User:ElijahPepe/Cloudflare

Cloudflare, Inc. is an American technology company headquartered in San Francisco, California. Cloudflare provides content delivery network, cloud cybersecurity, DDoS mitigation, and domain registration services. In 2022, the company was used by more than 20% of the entire Internet.

Global expansion (2010–2016)
In July 2014, Cloudflare signed an agreement with Chinese technology company Baidu creating a service known as Yunjiasu (Chinese: 云加速), which began operating in December. The agreement shared part of Cloudflare's intellectual property, particularly regarding its technology to speed up Internet traffic. By September 2015, the service had attracted 450,000 businesses. The deal faced strenuous passage when an online voting platform for the 2014–2015 Hong Kong electoral reform was affected by a distributed denial-of-service (DDoS) attack mitigated by Cloudflare. Hong Kong-based Internet entrepreneur Charles Mok had praised Prince for defending Occupy Central's voting platform, to which he suggested opening an office in Hong Kong rather than the previously suggested Singapore. Vice journalist Richard Bejtlich noted the potential for the Chinese government to utilize the partnership to circumvent Cloudflare's DDoS prevention and enhancing Great Cannon, a cyberweapon used by the Chinese government to attack the servers of GitHub, an Internet hosting service, and GreatFire, a website that monitors websites blocked by the Great Firewall; Baidu used its analytics platform to facilitate the attack on GitHub and GreatFire.

Growth (2017–present)
On February 17, 2017, Project Zero security researcher Tavis Ormandy discovered a vulnerability, later known as Cloudbleed, that exposed HTTP cookies, access tokens, passwords, and other sensitive data. The vulnerability occurred when Cloudflare switched its Ragel-based HTML parser to a new parser known as cf-html, both written as Nginx modules. With unfinished script tags, both parsers would overflow, although the Ragel-based parser inserted a buffer at the end of the tag, preventing memory outside of the end of the pointer from being accessed. When using both the old parser and the new parser, the last buffer may have been removed, thus exposing server memory. The flaw may have been present as early as September 22, 2016, but intensified between February 13 and February 18. Search engines cached the data returned by the parser, presenting an additional problem.

During the Russian invasion of Ukraine, Cloudflare has monitored Internet traffic. Amid concerns hospitals in the United States may be hit by cyberattacks, Cloudflare offered its services to at-risk organizations for free, but faced criticism from Ukrainian politician Mykhailo Fedorov for continuing to offer its services in Russia. In response, Prince wrote that the Russian government would "celebrate us shutting down Cloudflare's services in Russia". A State Department spokesperson said that the flow of information in Russia must be maintained.

Products and services
Cloudflare offers its services for free, but charges for additional security measures.

Security
In March 2012, Cloudflare introduced Maze, a service that diverts and throttles network traffic from known content scrapers, creating a self-described "virtual labyrinth".

In April 2020, citing privacy concerns, Cloudflare moved from reCAPTCHA to hCaptcha. The company proposed a security key-based replacement for CAPTCHAs in May 2021 using WebAuthn. Cloudflare announced Turnstile, its JavaScript-based CAPTCHA alternative, in September 2088.

Consumer products
Cloudflare operates the DNS server 1.1.1.1 and 1.0.0.1, which it launched in April 2018 as a privacy-focused alternative to OpenDNS and Google DNS, supporting DNS over TLS and DNS over HTTPS. The server was launched in partnership with APNIC. Cloudflare retained professional services network KPMG to publish an annual audit on 1.1.1.1. In November, an official iOS and Android app was launched, adding virtual private network (VPN) support. Building off of 1.1.1.1, Cloudflare announced Warp, a VPN for mobile devices that utilizes the WireGuard protocol alongside a subscription, Warp+, that uses Argo to increase speeds.

In February 2023, Cloudflare announced Wildebeest, a Mastodon-compatible server that interacts with ActivityPub. Wildebeest runs on Supercloud, a cloud computing platform.

Other services
Cloudflare proposed a Domain Name System (DNS) standard in December 2020 known as Oblivious DNS over HTTPS (ODoH), in collaboration with Apple and Fastly. The protocol implements a proxy server in between DNS connections and uses DNS over HTTPS to encrypt the request, thus concealing where the request came from and encrypting it. Cloudflare added ODoH capability to 1.1.1.1 upon its announcement.

In September 2022, Cloudflare announced R2 Storage, a storage solution compatible with Amazon S3. The container registry Chainguard is platformed on R2 and billed as secure.