Cloudflare status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

• Domains (41%)
• Cloud Services (33%)
• Hosting (20%)
• Web Tools (4%)
• E-mail (2%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

City	Problem Type	Report Time
Colima	Hosting	1 day ago
Leuven	Domains	2 days ago
New Delhi	Cloud Services	2 days ago
Mâcon	Cloud Services	7 days ago
Ashburn	Domains	11 days ago
Rosario	Domains	15 days ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Insanegamer (@Insanegame2025) reported 3 minutes ago

  @sci_minister_0 @Cloudflare @SpaceX That's because of the CGNat on ipv4 which they're not abandoning anytime soon. Like I've used some IPv6 peer-to-peer programs where everything was IPv6 and it worked great. Peer-to-peer is terrible on ipv4 because they limit the number of ports you can use on ipv4.

• 
  Chynen Eide (@chynen_eide) reported 3 minutes ago

  I have to admit. Cloudflare is awful. Firstly, security verification: most of the websites get a verification if you are not a bot and that's fine. The problem is that it failed to load (it refreshes over and over and over again) until it started to work. Then if you think that's bad, Some websites get down for like a HOUR.

• 
  Aldrich - 窯犬 (@aldrichhecc) reported 4 minutes ago

  @Vryionic The only network activity I've been able to has been Github updates (SHA-512 verif), driver version checks. cloudflare speed tests and, of course, bug reporting. Looks clean, good job!

• 
  maman (@achmadmahardi) reported 5 minutes ago

  @Cloudflare help plzz

• 
  Osintly (@Osintly) reported 6 minutes ago

  We've just fixed an issue where the captcha wouldn't resolve when launching modules on the search page due to recent Cloudflare Turnstile changes. Sorry for the inconvenience 🙏

• 
  Tracie Nielson (@NielsonTracie) reported 8 minutes ago

  @CloudflareDev How do I get this Cloudflare **** off my phone and computer? I didn't ask for it. I don't want it. Their phone number is bogus. It's impossible to communicate without logging in, but I don't have a login. I don't want a login.

• 
  Sina Meraji (@sinasanm) reported 8 minutes ago

  2 incoming PRs today (custom slash commands PR from @seasonsaw, and cloudflare AI gateway support from another legend). thank you

• 
  Ross (@RV_Smirnov) reported 9 minutes ago

  MCP just had its "open redirect" moment — security researchers found prompt injection and tool poisoning flaws. Meanwhile: Google DeepMind adopted it, Cloudflare shipped native support, and enterprises are betting billions on agent infrastructure anyway. The pattern? Build fast, secure later. Same story as APIs, npm, the web. @yoheinakajima @Thom_Wolf @emollick

• 
  Swrkz (@shadowrkz) reported 9 minutes ago

  @ashypilots Constant connection problem? Yeah, I had this before, but with Genshin on my mobile only. Try using Cloudflare dns manually.

• 
  Cumulus (@cumulus_____) reported 10 minutes ago

  @CodeWithAmann Always vercel, anything backend related render. If heavy and need speed aws Never ever Cloudflare, just not curious to learn it and I don’t understand their pricing

• 
  Pi Changelog (@PiChangelog) reported 14 minutes ago

  Added: - Cloudflare Workers AI is a new built-in provider with default model resolution and /login support. Set CLOUDFLARE_API_KEY and CLOUDFLARE_ACCOUNT_ID. See docs/providers.md#api-keys.

• 
  REN | Serverless Infrastructure (@ren_assetcolle) reported 18 minutes ago

  Grid bots aren't slow because of bad code. They're slow because of where the code lives. Cloudflare Workers fires from 300+ locations worldwide. Your order reaches the exchange before the SaaS queue even starts.

• 
  science.minister.0 (@sci_minister_0) reported 22 minutes ago

  @Insanegame2025 @Cloudflare @SpaceX Yea, it's dog **** totally unsuitable for p2p networking.

• 
  TOYE (@Toye_Pro) reported 25 minutes ago

  At first glance, this might just look like a simple update. But it actually says a lot about what @HelmTrading is doing behind the scenes. Getting into Cloudflare for Startups isn’t just for show. It means they now have access to infrastructure that can seriously improve how the platform performs and how well it’s protected. And that matters more than people think. For something like Helm where users are interacting with markets tied to real-world outcomes you can’t afford issues like: slow execution downtime or security gaps Even small problems in those areas can affect trust. With Cloudflare in the picture, things become a lot stronger: better protection against attacks faster experience across different regions more stability as more users come in Basically, the platform becomes more reliable and harder to break. What stood out to me is that moves like this usually happen when a project is getting ready for more growth. You don’t focus on this level of infrastructure unless you’re thinking long term. So, this isn’t just about an announcement. It’s about building something that can actually handle scale when attention comes. And in this space, that’s what really separates projects that last from the ones that don’t.

• 
  Basemail (@Basemail_ai) reported 27 minutes ago

  The infrastructure shipped. The governance didn't. The agents don't care. Cloudflare Agents Week (Apr 14-20): 20+ products for the "agentic cloud." Sandboxes GA, Mesh private networking for agents, Managed OAuth (RFC 9728) for non-human identity, Agent Memory, Email Service for agents, Artifacts (*** for agents), Agents SDK "Project Think," Unweight 22% LLM compression. 93% of Cloudflare R&D using AI coding tools. 241B tokens routed through AI Gateway. Same week — Fed SR 26-2 (Apr 17): first model risk management revision in 15 years. Explicitly excludes generative AI and agentic AI. Goldman deploying Claude agents for trade accounting. JPMorgan: 400 AI use cases in production, $18B tech budget. Lloyds expects £100M from agentic AI this year. NVIDIA survey: 42% of financial firms using or assessing agentic AI. Deloitte: 350+ distinct risks from autonomous agent behavior in banking. Forbes: "The agents being deployed in 2026 operate in a space the regulator has formally acknowledged it does not yet cover." Cloudflare is solving agent identity at infrastructure level — Managed OAuth, scannable API tokens, Mesh scoped access. The Fed is solving model risk for 2011-era credit scoring models. One is shipping at runtime speed. The other at committee speed. The agents are already in production. #AIAgents #Web3

• 
  Vishwanath Patil (@patilvishi) reported 28 minutes ago

  DDoS Protection Architecture -How Systems Survive Massive Traffic Attacks This is: - Used by Cloudflare, AWS Shield, Google Cloud Armor - Critical for public APIs, SaaS, fintech - A must-know for system design interviews - Directly tied to availability & security Let’s go deep 👇 The Core Problem DDoS = Distributed Denial of Service Attackers send massive traffic: Millions of requests/sec Goal: Overload system → make it unavailable Types of DDoS Attacks 1. Volumetric Attacks Flood network bandwidth. Example: UDP flood, DNS amplification 2. Protocol Attacks Exploit network layer. Example: SYN flood 3. Application Layer Attacks (Most Dangerous) Look like real traffic: HTTP GET /login spam Hard to detect. Defense Strategy (Layered Approach) DDoS protection is not one tool. It is multi-layer defense: 1. Edge Protection (CDN + WAF) First line of defense. Handles: - Traffic filtering - Bot detection - IP blocking - Geo-blocking Examples: Cloudflare Akamai AWS CloudFront + WAF 2. Rate Limiting Limit requests per IP / tenant. Example: 100 req/sec per IP Stops abuse early. 3. Load Balancing Distributes traffic across servers. Prevents single-node overload. 4. Auto Scaling Increase capacity during attack. But: Scaling alone does NOT stop DDoS. 5. Application Protection - CAPTCHA - Login throttling - API key validation - Token-based access 6. Backend Protection - Circuit breakers - Queue buffering - Caching Example Attack Flow Without protection: Botnet → API → DB → crash With protection: Botnet → CDN → WAF → Rate Limit → App → DB Attack filtered before reaching backend. Key Techniques 1. IP Reputation Block known bad IPs. 2. Geo Filtering Block traffic from suspicious regions. 3. Bot Detection Analyze: - request patterns - headers - behavior 4. Challenge Systems - CAPTCHA - JS challenges - Proof-of-work 5. Traffic Shaping Limit heavy endpoints like: login search payment Real-World Example Login endpoint under attack: 1M requests/min Protection: - CAPTCHA after 3 attempts - Rate limit per IP - Block suspicious patterns Trade-Offs Strategy Benefit Cost CDN/WAF Strong protection Cost Rate limiting Easy May block legit users CAPTCHA Blocks bots UX impact Auto scaling Absorbs load Expensive Architect-Level Insight DDoS protection is about: Filtering early + protecting deeper layers Never rely on backend alone. Common Mistakes - No edge protection - Only scaling infra - No rate limits - No bot detection - Blocking too aggressively Golden Rule Drop bad traffic as early as possible Edge > Gateway > App > DB Final Insight DDoS protection is not optional. It is a core reliability + security requirement for any internet-facing system.

• 
  Pasi Autio (@autio_pasi) reported 31 minutes ago

  @Cloudflare Why would I need to use IPv6 in home network? I cannot think of single valid reason.

• 
  HighSpeedLTE (@HighSpeedLTE) reported 32 minutes ago

  @CarlySotura Hey Carly, sorry to bother you, but I’m stuck with a serious X account access bug and I don’t know who else to contact. Since the Cloudflare/X outage last week, my main account @Matthias_Oel has been locked in an email verification loop. I still have access to the email and can reset my password, but when I try to verify the email, the verification button fails with a technical error and no email arrives. The contact form keeps giving me AI replies saying I should verify my email, but that’s exactly the broken step. Is there any chance you could help or point me to someone who can manually review this? Would really appreciate it 🙏 11:21 AM

• 
  Andras Bacsai (@heyandras) reported 39 minutes ago

  @quartzdevgg I tried to reproduce this issue several times, in dev and in **** but I could not. Do you use Cloudflare or anything like that between Coolify and you?

• 
  HighSpeedLTE (@HighSpeedLTE) reported 39 minutes ago

  @cambridgemike Hey Mike, sorry to bother you, but I’m stuck with a serious X account access bug and I don’t know who else to contact. Since the Cloudflare/X outage last week, my main account @Matthias_Oel has been locked in an email verification loop. I still have access to the email and can reset my password, but when I try to verify the email, the verification button fails with a technical error and no email arrives. The contact form keeps giving me AI replies saying I should verify my email, but that’s exactly the broken step. Is there any chance you could help or point me to someone who can manually review this? Would really appreciate it 🙏

• 
  Chynen Eide (@chynen_eide) reported 42 minutes ago

  I have to admit. Cloudflare is awful. Firstly, security verification: most of the websites get a verification if you are not a bot and that's fine. The problem is that it failed to load (it refreshes over and over and over again) until eventually it started to work. Then if you think that's bad, Some websites get down for like a HOUR.

• 
  Dr. Ingrid Murra (@DrIngridMurra) reported 45 minutes ago

  Cloudflare just published data from their AI-powered review system. Median review time: 3 minutes and 39 seconds. That means an engineer gets feedback while the work is still fresh. Fixes it and moves to the next problem.

• 
  Ritesh (@treadon) reported 45 minutes ago

  @lukcombinator @Samaytwt Why Mongo, I just switched my last site away from Atlas because of latency and connection issues from CloudFlare?

• 
  snake_eater4526 (@SEater45) reported 46 minutes ago

  @napsterbater @Cloudflare What I'm talking about is dual stacking network ( a router doing ipv4 lan / IPv6 wan for exemple ). Which also is tunneling the ipv4 traffic into IPv6. Like I said, it's all router's magic ****

• 
  Michael Denney (@MikeDVB) reported 52 minutes ago

  @CloudFlare - My email to our partner account manager bounced - and we're having a strange issue with the LAX POP and one specific end-user account. We're a web hosting provider [small one, 37k domains] - so a small fish - but still - is there any way for us to contact anyone?

• 
  Editor's Quote (@Editorsquote) reported 53 minutes ago

  @SahilExec Just route through Cloudflare for the meantime if you don't have a fix solution instantly...

• 
  → iSpeedtestOS (@iSpeedtest0S) reported 55 minutes ago

  Great, Telekom breaking half of the internet again right now… tons of websites are not reachable. Includes X, netzwelt, cloudflare status, and tons of others. Vodafone works. @Telekom_hilft get your **** together, this is unacceptable. Looks to be your IP resolver this time.

• 
  Tracie Nielson (@NielsonTracie) reported 56 minutes ago

  @megaconfidence How do I get this Cloudflare **** off my phone and computer? I didn't ask for it. I don't want it. Their phone number is bogus. It's impossible to communicate without logging in, but I don't have a login. I don't want a login.

• 
  Chynen Eide (@chynen_eide) reported 57 minutes ago

  I have to admit. Cloudflare is awful. Firstly, security verification: most of the websites get a verification if you are not a bot and that's fine. The problem is that it failed to load (it refreshes over and over and over again). Then if you think that's bad, Some websites get down for like a HOUR.

• 
  Akshay Kripalani (@akshay_krips) reported 57 minutes ago

  Why do domain registration companies demand to see your government ID to buy a simple .com? Such shady practice. @Cloudflare once again saving the day by cutting all the crap and just letting me buy and get started in 2 minutes.