DNS – Noise

From .com to .anything: introducing Top-Level Domain (TLD) insights on Cloudflare Radar

André Jesus — Mon, 27 Oct 2025 12:00:00 +0000

Cloudflare Radar has launched a new Top-Level Domain (TLD) page, providing insights into TLD popularity, traffic, and security. The top-ranking TLD may come as a surprise.

Addressing the unauthorized issuance of multiple TLS certificates for 1.1.1.1

Joe Abley — Thu, 04 Sep 2025 17:30:00 +0000

Unauthorized TLS certificates were issued for 1.1.1.1 by a Certification Authority without permission from Cloudflare. These rogue certificates have now been revoked.

Some TXT about, and A PTR to, new DNS insights on Cloudflare Radar

David Belson — Thu, 27 Feb 2025 14:00:00 +0000

The new Cloudflare Radar DNS page provides increased visibility into aggregate traffic and usage trends seen by our 1.1.1.1 resolver

How we prevent conflicts in authoritative DNS configuration using formal verification

James Larisch — Fri, 08 Nov 2024 14:00:00 +0000

We describe how Cloudflare uses a custom Lisp-like programming language and formal verifier (written in Racket and Rosette) to prevent logical contradictions in our authoritative DNS nameserver’s behavior.

Migrating billions of records: moving our active DNS database while it’s in use

Alex Fattouche — Tue, 29 Oct 2024 14:00:00 +0000

DNS records have moved to a new database, bringing improved performance and reliability to all customers.

Cloudflare partners with Internet Service Providers and network equipment providers to deliver a safer browsing experience to millions of homes

Kelly May Johnston — Tue, 24 Sep 2024 13:00:00 +0000

Cloudflare is extending the use of our public DNS resolver through partnering with ISPs and network providers to deliver a safer browsing experience directly to families. Join us in protecting every Internet user from unsafe content with the click of a button, powered by 1.1.1.1 for Families.

Making zone management more efficient with batch DNS record updates

Alex Fattouche — Mon, 23 Sep 2024 13:00:00 +0000

In response to customer demand, we now support the ability to DELETE, PATCH, PUT and POST multiple DNS records in a single API call, enabling more efficient and reliable zone management.

Zero-Trust DNS

Bruce Schneier — Thu, 16 May 2024 11:03:58 +0000

Microsoft is working on a promising-looking protocol to lock down DNS.

ZTDNS aims to solve this decades-old problem by integrating the Windows DNS engine with the Windows Filtering Platform—the core component of the Windows Firewall—directly into client devices.

Jake Williams, VP of research and development at consultancy Hunter Strategy, said the union of these previously disparate engines would allow updates to be made to the Windows firewall on a per-domain name basis. The result, he said, is a mechanism that allows organizations to, in essence, tell clients “only use our DNS server, that uses TLS, and will only resolve certain domains.” Microsoft calls this DNS server or servers the “protective DNS server.”...

Improving authoritative DNS with the official release of Foundation DNS

Hannes Gerhart — Fri, 12 Apr 2024 13:00:12 +0000

We are launching Foundation DNS – our new enterprise-grade Authoritative DNS offering. As our new enterprise authoritative DNS offering, Foundation DNS was designed to enhance the reliability, security, flexibility, and analytics of our authoritative DNS service

Advanced DNS Protection: mitigating sophisticated DNS DDoS attacks

Omer Yoachimik — Thu, 07 Mar 2024 14:00:36 +0000

We're proud to introduce the Advanced DNS Protection system, a robust defense mechanism designed to protect against the most sophisticated DNS-based DDoS attacks

Remediating new DNSSEC resource exhaustion vulnerabilities

Vicky Shrestha — Thu, 29 Feb 2024 14:00:57 +0000

Cloudflare recently fixed two critical DNSSEC vulnerabilities: CVE-2023-50387 and CVE-2023-50868. Both of these vulnerabilities can exhaust computational resources of validating DNS resolvers. These vulnerabilities do not affect our Authoritative DNS or DNS firewall products

DDoS threat report for 2023 Q4

Omer Yoachimik http://blog.cloudflare.com/author/omer/ — Tue, 09 Jan 2024 14:00:25 +0000

Welcome to the sixteenth edition of Cloudflare’s DDoS Threat Report. This edition covers DDoS trends and key findings for the fourth and final quarter of the year 2023, complete with a review of major trends throughout the year

Using DNS to estimate the worldwide state of IPv6 adoption

Carlos Rodrigues http://blog.cloudflare.com/author/carlos-rodrigues/ — Thu, 14 Dec 2023 15:05:52 +0000

In the last decade, IPv6 adoption on the client side went from under 1% to somewhere in the high 30 to low 40 percent, depending on who’s reporting, but there’s also the other end of the equation: the server side

Amazon SES: Email Authentication and Getting Value out of Your DMARC Policy

Bruno Giorgini — Mon, 02 Oct 2023 21:29:56 +0000

Amazon SES: Email Authentication and Getting Value out of Your DMARC Policy Introduction For enterprises of all sizes, email is a critical piece of infrastructure that supports large volumes of communication. To enhance the security and trustworthiness of email communication, many organizations turn to email sending providers (ESPs) like Amazon Simple Email Service (Amazon SES). […]

Connection coalescing with ORIGIN Frames: fewer DNS queries, fewer connections

Suleman Ahmad — Mon, 04 Sep 2023 13:00:51 +0000

In this blog we’re going to take a closer look at “connection coalescing”, with specific focus on manage it at a large scale

Connection errors in Asia Pacific region on July 9, 2023

Christian Elmerot — Tue, 11 Jul 2023 08:48:13 +0000

On July 9, 2023, users in the Asia Pacific region experienced connection errors due to origin DNS resolution failures to .com and .net TLD nameservers

How we scaled and protected Eurovision 2023 voting with Pages and Turnstile

Dirk-Jan van Helmond — Fri, 23 Jun 2023 13:00:55 +0000

More than 162 million fans tuned in to the 2023 Eurovision Song Contest, the first year that non-participating countries could also vote. Cloudflare helped scale and protect the voting application based.io, built by once.net using our rapid DNS infrastructure, CDN, Cloudflare Pages and Turnstile

How Rust and Wasm power Cloudflare’s 1.1.1.1

Anbang Wen — Tue, 28 Feb 2023 14:00:00 +0000

Introducing a new DNS platform that powers 1.1.1.1 and various other products.

One of our most requested features is here: DNS record comments and tags

Hannes Gerhart — Wed, 21 Dec 2022 14:00:00 +0000

Today, we’re releasing DNS record comments and tags, making it easier to keep track of and manage DNS records of your domain

Cloudflare is joining the AS112 project to help the Internet deal with misdirected DNS queries

Hunts Chen — Thu, 15 Dec 2022 14:00:00 +0000

Cloudflare is participating in the AS112 project, becoming an operator of the loosely coordinated, distributed sink of the reverse lookup (PTR) queries for RFC 1918 addresses, dynamic DNS updates and other ambiguous addresses.