Cloudflare Outage Disrupts Websites Including LinkedIn and Zoom

A variety of websites, such as LinkedIn, Zoom, and Downdetector, experienced outages on Friday morning due to another incident involving Cloudflare. This marks the company’s second disruption within a month.

Cloudflare reported that the outage was triggered by adjustments made to their firewalls intended to protect customers from a widespread software vulnerability disclosed earlier this week, clarifying it was not the result of a cyber attack. Previously, another issue was observed concerning their application programming interface.

The incident lasted approximately 30 minutes, concluding shortly after 9 a.m. Japan time. This follows a larger Cloudflare outage in mid-November that impacted platforms like X, OpenAI, and Spotify, along with online games such as League of Legends.

The underlying issue was identified as “configuration files that are automatically generated to manage threat traffic,” which exceeded expected sizes, leading to a crash of the software system responsible for handling traffic across various Cloudflare services.

Friday’s malfunction appeared relatively minor, affecting sites including Canva, Shopify, and the India-based brokerage firm Groww, alongside LinkedIn, Zoom, and Downdetector, which tracks online service issues. Downdetector recorded over 4,500 reports related to Cloudflare once the services resumed.

Given the recent series of prominent internet outages, some businesses might be reevaluating their reliance on Cloudflare’s offerings.

Stephen Murdoch, a computer science professor at University College London, noted, “Given these two outages within such a brief timeframe, it’s likely people will begin to question their reliability. They’re not satisfied, and Cloudflare isn’t happy either. They apologize, but it’s premature to determine if there’s a systemic problem, like software misuse, or just unfortunate timing.”

Murdoch emphasized that Cloudflare, known for its global cloud services and cybersecurity, promotes itself on its reliability. Businesses utilize its services for enhanced immunity against specific cyber threats, improved website performance, faster load times, and greater resilience to server failures.

The recent outages from Amazon Web Services, including one in October that affected over 2,000 businesses globally, have sparked discussions among experts about whether major internet services are becoming overly centralized and thus more vulnerable.

“There’s significant centralization occurring,” Murdoch stated. “Cloudflare offers an excellent product and is widely used, which introduces potential vulnerabilities.”

“This highlights yet again how exposed the major tech internet is,” remarked Michał “Risiek” Wojniak, an expert on DNS and internet infrastructure. “This marks the fourth major global outage since October 20th that has drawn the attention of media outside of the tech sphere and affected everyday users around the globe.”

Skip past newsletter promotions

According to Cloudflare, around 20% of all websites utilize its services in one form or another. The company boasts nearly 300,000 clients in 125 countries and claims to thwart billions of cyberattacks against its users on a daily basis, generating over $500 million (£440 million) each quarter.

Wojniak stated that the recent outages raise questions about Cloudflare’s marketing strategy, which promotes reliability and resilience alongside the common belief that larger enterprises are safer partners than smaller infrastructure providers.

“These companies are growing too large to fail, and their extensive traffic handling means that when they do encounter issues, it leads to significant problems very quickly,” he added.

Conversely, Murdoch suggested that the outages could be an opportunity for Cloudflare. “When AWS went down, its stock price actually increased because people recognized the scale of its usage. [The outage] serves as effective marketing, demonstrating the widespread reliance on Cloudflare.”

Source: www.theguardian.com

Cloudflare Outage Triggers Error Messages Across the Internet

A vital segment of the internet’s often unseen infrastructure experienced a worldwide outage on Tuesday, leading to error messages appearing across various websites.

Cloudflare, a US-based firm that safeguards millions of websites against malicious assaults, faced an unexplained problem that hindered internet users from accessing certain client sites.

Some website owners struggled to reach their performance dashboards. The company reported that platforms like X and OpenAI saw a spike in outages concurrent with the Cloudflare issue. Down Detector.

The outage was first noted at 11:48 a.m. London time, and by 2:48 p.m., Cloudflare announced: “A fix has been implemented and we believe the issue is resolved. We are continuing to monitor the situation to ensure all services return to normal.”

A spokesperson from Cloudflare issued an apology “to our customers and the entire internet for the disruptions today.” They added, “We aim to learn from today’s events and enhance our services.”


To tackle the issue, the company turned off an encryption service known as Warp in London, stating that “users in London attempting to access the internet via Warp will face connection failures.”

Professor Alan Woodward of the Surrey Cyber Security Centre referred to Cloudflare as “the biggest company you’ve never heard of.” The firm claims to provide services that “protect websites, apps, APIs, and AI workloads while enhancing performance.”

Woodward characterized Cloudflare as a “gatekeeper,” noting its role in monitoring site traffic to protect against distributed denial-of-service (DDoS) attacks, which involve malicious actors attempting to overwhelm a site with requests. It also verifies whether a user is human.

Upon identifying the fix, Cloudflare revealed that the issue stemmed from “configuration files automatically generated to manage threat traffic.”

These files expanded larger than anticipated, resulting in a failure of the software systems that direct traffic for numerous Cloudflare services.

Skip past newsletter promotions

“To clarify, there is no evidence that this was caused by an attack or malicious activity,” the spokesperson stated. “We anticipate that some Cloudflare services may experience temporary degradation as traffic spikes following this incident, but we expect all services to normalize within the next few hours.”

This incident at Cloudflare occurred less than a month after an outage at Amazon Web Services disrupted thousands of sites.

According to Woodward, “We’re beginning to realize just how few companies are integral to the internet’s infrastructure, so when one fails, the impact is immediately noticeable.”

Although the cause remains unidentified, Woodward suggested that it’s unlikely to be a cyber attack, as such a major service typically does not have a single point of failure.

Source: www.theguardian.com