Cloudflare status: hosting issues and outage reports
Some problems detected
Users are reporting problems related to: domains, cloud services and hosting.
Cloudflare is a company that provides DDoS mitigation, content delivery network (CDN) services, security and distributed DNS services. Cloudflare's services sit between the visitor and the Cloudflare user's hosting provider, acting as a reverse proxy for websites.
Problems in the last 24 hours
The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.
May 27: Problems at Cloudflare
Cloudflare is having issues since 06:30 PM IST. Are you also affected? Leave a message in the comments section!
Most Reported Problems
The following are the most recent problems reported by Cloudflare users through our website.
- Domains (41%)
- Cloud Services (31%)
- Hosting (16%)
- Web Tools (8%)
- E-mail (4%)
Live Outage Map
The most recent Cloudflare outage reports came from the following cities:
| City | Problem Type | Report Time |
|---|---|---|
|
|
Cloud Services | 8 hours ago |
|
|
Cloud Services | 10 hours ago |
|
|
Domains | 1 day ago |
|
|
Web Tools | 4 days ago |
|
|
Cloud Services | 7 days ago |
|
|
Domains | 9 days ago |
Community Discussion
Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.
Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.
Cloudflare Issues Reports
Latest outage, problems and issue reports in social media:
-
Dr Heidy Khlaaf (هايدي خلاف) (@HeidyKhlaaf) reported@ZackKorman To be frank they specifically created an offensive model (for fearmongering) that they try to repurpose as defensive by saying exploits help "prioritize" vulns. Even Cloudflare blog notes Mythos has an advantage for exploit development rather than vuln discovery over other models
-
Plan B (@OopsPlanFailed) reportedHey @ZohoMail For the last hour I've been trying to verify my Cloudflare email on Zoho Mail, but the verification emails are never arriving. Checked inbox, spam, all folders... nothing. Retried so many times that Cloudflare now says I have to wait 1 hour due to too many attempts What’s happening with Zoho mail delivery today? Can you help?
-
Kenneth Eversole (@kennetheversole) reported@AskYoshik I ran all the Kafka clusters at Cloudflare, so I think I have a strong opinion about this. Kafka is an elegant design wrapped in a bunch of bloated crap.
-
Emmanuel Efe Asika 🇮🇪 (@sageasika) reported@TosinOlugbenga @nooriefyi Need to use OpenNext, cloudflare doesnt support a ton of NextJs features that vercel does.
-
burger (@burger403) reported@JETIXFILO unfortunately cloudflare doesn't take down or block the website, they just forward your report
-
Res (@lavenderleaf86) reported@Cloudflare @CloudflareHelp @CloudflareDev I'm migrating a client to Cloudflare, but when he tried creating an account w/ his Gmail it gave an error & said to contact support. Which he can't because it requires an account... He sent an email 2 days ago w/ no response. What to do?
-
Ruchir (@heyruchir) reportedYesterday I migrated @usescholarly's frontend from GCP to @Cloudflare. vendor lock-in is dead. It took ~1 hour and it worked perfectly, no issues at all. I just asked Codex to migrate it, and it did it without any issues. this will save me hundreds of dollars every month..
-
Satoshi Nakamoto, Andrew Rulnick (@MickeySteamboat) reportedextremely bad on ads that I see in feed too. no it's not my network. you probably have another cloudflare disaster brewing or something
-
Evans Maina (@evanssmaina) reportedBeen fighting a TanStack Start deployment to Cloudflare Workers for the past hour. Finally got it working. Weird thing: Even though the env vars were set in the Cloudflare dashboard + wrangler config, production still failed. The fix ended up being making sure the production envs existed in .env during the build/deploy step. Dev worked. **** didn’t. Took way longer to realize than I expected.
-
Nevo David (@wickedguro) reportedPostiz is currently on $105k MRR. My infrastructure is actually very cheap: > Railway = ~$200/m > CloudFlare R2 = ~$160/m, it's too damn cheap > X = $1000/m, yes, yes, you have to move to their PPU (good for me, it will remove some competitors) > Transloadit = $800/m > ChatGPT credits = $200/m
-
Juan Camilo Auriti | GEO (@JuanAuriti) reportedCloudflare, Akamai, Vercel. Default configs can treat AI crawler traffic as suspicious. GPTBot and ClaudeBot can hit a 403 before your robots.txt is ever read. This is not something you configured wrong. It is the default.
-
Max Clark (@maxclark) reported@mikejulian Because nuance = social media :) but sure lets be pedantic about this then $350k credits - margin + cost in sales/marketing to promote + sales ops (all AI now?) + cost for AM/CSM + cost to support + opportunity cost +++ = CAC Cloudflare has a Non-GAAP gross margin of 72.8% so without knowing/sharing internals that's a CLV well north of $1.44m Point is they've still decided the CLV is well worth the $350k without risking their analysts freaking out
-
dieselbaby (@dieselbabyy) reported@simonxabris @developedbyed @Cloudflare Yeah, apparently it doesn’t break the ToS but such activity certainly “feels” like the kind of thing that they’d not appreciate you doing. Granted, I think you’d have to be seriously abusing the service to even get noticed, with how much traffic they are pushing.
-
Vauban (@vauban_tech) reportedIf Cloudflare goes down tomorrow, my passport proof still works. My RPC is my own validator. My prover is my container. This is not ideology. It is risk management.
-
Jonas Templestein (@jonas) reportedThe end-state of this direction could be a system that lets you create "service bindings" from any JS runtime environment into a cloudflare worker from anywhere As long as you trust the caller, you can then do away with any other additional RPC frameworks
-
El Guapo (@Checkm3out) reported@dok2001 Issue with ANC -> SFO still occurrs . No other regions have trouble connecting to the cloudflare tunnel
-
Sooraj (@suryanox7) reported@gselendal interesting.. Never tried, I usually work with cloudflare or spinning myself with ollama etc. Thanks
-
Lyre, Lord High Artificer (@WordsOllie) reported@WarframePlayer_ @VRChat First night was CloudFlare that was down, the night after it was AWS that went down. How moronic are you?
-
Psychofren (@psycho_fren) reported@vxunderground seems strange that reports are required when Cloudflare already has a CSAM scanning tool seems like many online platforms choose to ignore these problems
-
Basemail (@Basemail_ai) reportedAgentMail just hit 25K inboxes. Cloudflare launched Email for Agents. WorkOS is hosting MCP Night talks about it. The channel problem is solved. But none of them answer: "Was this email actually authorized by that agent?" API keys can be leaked. Domain-based auth can be spoofed. Wallet signatures can't. Every email cryptographically bound to the sender's key. Per-message. Unforgeable. Channel ≠ Identity. #AIAgents #Web3
-
The Bingus Man (@NotNordgaren) reported@_winter_wonders "crashed half the internet (Cloudflare)" This guy never read the Cloudflare post-mortem. Even if they handled the error there, I am pretty sure they still would have needed to crash. The actual issue was with their database, not the actual Rust code that failed.
-
5555555555555555555555555555555555555555555555 555 (@denihil2) reported@KiwiFarmsDotNet @Cloudflare it is never enough for them. they will never rest until the internet is pg-13. don't let them take a inch, **** everything about the @ADL
-
Lyrie.ai (@lyrie_ai) reportedCloudflare Cloudforce One, the vendor's threat intelligence division, released the inaugural 2026 Cloudflare Threat Report based on a year of telemetry analysis covering trillions of network signals. The report fundamentally reframes how security teams should understand…
-
Rav (@_MrDecentralize) reportedCloudflare posted $639.8 million in revenue last quarter. Up 34% year over year. Record quarter. The company that routes a significant share of the world's internet traffic, that sells the security layer AI agents run on, was growing faster than almost any infrastructure company its size. The same week the earnings call dropped, 1,100 employees received termination notices. Twenty percent of the workforce. Gone. The CEO published a blog post and a Wall Street Journal op-ed explaining the cuts. He was precise about what he was doing and unusually precise about who he was doing it to. Matthew Prince divided the company into three groups. Builders. Sellers. Measurers. "AI isn't coming for builders or sellers," he wrote. "But it is coming for measurers." Measurers, by his definition: middle management, finance, legal, internal auditing, revenue recognition. The qualifying clause that reframes everything: "Today's actions are not a cost-cutting exercise or an assessment of individuals' performance; they are about Cloudflare defining how a world-class, high-growth company operates and creates value in the agentic AI era." Not layoffs. A structural redefinition. The oversight layer, by name, as the displacement target. Cloudflare's AI usage increased 600% internally over three months. The company reached a threshold where, in Prince's words, 100% of the code produced by AI and deployed in Cloudflare's products is now reviewed by autonomous AI agents. Not reviewed by humans using AI tools. Reviewed by agents. The oversight function for the code layer is already automated. The finance, legal, and audit teams that measured whether the company was compliant, whether the numbers were right, whether the processes held: same story. The measuring is being done by the infrastructure Cloudflare itself built and sells. The assumption that has kept compliance, finance, legal, and internal audit safe was never about complexity. It was about accountability. The belief that someone has to sign their name. That institutional judgment requires a human on the line. Prince's taxonomy names that assumption and buries it in the same sentence. The measurer is not protected by judgment. The measurer is protected by the gap between what AI can do today and what it will do in eighteen months. Cloudflare just published that the gap closed. At the company running the infrastructure the rest of the industry depends on. The next quarterly earnings report will tell you which companies are still pretending the gap is open.
-
Bankless (@Bankless) reportedINTERVIEW: Cloudflare Needs 100M TPS from Crypto to Fix the Internet | CEO Matthew Prince The internet is about to be flooded by machines, and @eastdakota thinks the old business model is not ready. The @Cloudflare co-founder and CEO joins Bankless to explain why AI agent traffic could overtake human traffic by 2027, how crawlers are changing the economics of content, why ads and subscriptions may not survive in their current form, and how x402, stablecoins, and pay-per-crawl could create a new payment layer for the web. [TIMESTAMPS] 0:00 Intro 1:18 When AI Bot Traffic Overtakes Humans 4:19 What Cloudflare Actually Does 8:33 Life on the Internet’s “Ice Wall” 11:26 The Internet’s Business Model Problem 15:36 Google, Traffic, and the Attention Economy 22:49 AI Agents and the End of Ads 26:40 Why Faster Answers Can Still Hurt Creators 31:19 AI Companies as the Next YouTube or Netflix 36:11 Creating Scarcity for Content Markets 39:45 Content Independence Day 43:35 Should AI Agents Count as Human Users? 49:30 The Risks of Subscription-Only AI 53:36 A Golden Age of Content Creation? 57:58 Pay-Per-Crawl and x402 1:00:46 Why Stablecoins Matter 1:04:08 The Cloudflare Stablecoin Question 1:10:30 The Final Form of the Internet 1:13:52 The Park Record and Local Journalism 1:18:27 The Centralization Risk 1:23:24 Advice for Content Creators
-
Ruben Herz (@aethroc) reportedAnthropic's Claude Mythos found 10,000+ critical bugs in one month — 2,000 at Cloudflare, 271 in Firefox. Only 97 patched upstream. AI finds vulnerabilities faster than engineers can fix them. That's the new bottleneck in cybersecurity. #AI #Cybersecurity #Glasswing
-
FILM DB | ۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗۗh (@FemiSuccess7) reportedI MOVED OFF CLOUDFLARE D1 TO STANDARD, LOCAL SQLITE DATABASES (@LEVELSIO CREDIT AGAIN). TO HANDLE HIGH CONCURRENCY, I: - RAN PROPER INDEXES ON SEARCH COLUMNS. - ENABLED SQLITE WAL (WRITE-AHEAD LOGGING) MODE. QUERY TIMES WENT FROM 150MS+ OVER THE NETWORK TO UNDER 1MS LOCALLY!
-
Ben Valentin (@TheBenValentin) reportedFour AI labs made four acquisitions in five days. Anthropic bought Stainless for $300M+. The company that built SDKs for OpenAI, Google, and Cloudflare. Then shut down the hosted product for everyone else. Mistral bought Emmi AI for physics-aware models. Google DeepMind acqui-hired all of Contextual AI. Meta grabbed Dreamer. This isn't a coincidence. It's a consolidation signal. The frontier labs hit a point where buying a specific capability is faster than building it. And that means the tools you depend on today could disappear into a competitor's stack tomorrow. Stainless is the clearest example. They spent years earning developer trust across every major AI lab. Anthropic acquired that trust in one transaction, then killed the product for everyone else. If you're building on someone else's infrastructure, you are one acquisition away from a forced rewrite. The builders who survive this phase aren't the ones picking the "best" tool. They're the ones building portable systems that aren't locked to a single vendor's SDK, a single model, or a single platform. The AI consolidation phase isn't coming. It started last week. What's one tool in your stack you'd have to completely rebuild around if it got acquired tomorrow?
-
Leo (@leoarronchester) reported@patternrecoggni Cloudflare. server down (but you and Cloudflare are up but the target server is offline)
-
Brian Anglin (@BriansAngles) reportedSomeone should build a nice API privilege escalation UX, let me explain 👇 When I'm letting my agent build stuff, the default wrangler login to interact with @Cloudflare doesn't have DNS permission, which I think is generally a good thing! But it's very annoying that I have to stop what I'm doing and manually set up the DNS for a new project or have a super powerful API key laying around with a big blast radius. I wish API providers would make some sort of escalation UX that kind of looks like the signup flow for an OAuth cli, where an agent could temporarily request permissions to do some certain action and you could grant it for five minutes. Then that already provisioned API key would be able to do those actions for the time window. Feels like the best of both worlds kind of reminds me of "sudo" mode on GitHub where you're asked to re-enter your password to do something really destructive.