Cloudflare status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

• Domains (35%)
• Cloud Services (26%)
• Web Tools (17%)
• Hosting (13%)
• E-mail (9%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

City	Problem Type	Report Time
Los Angeles	Cloud Services	20 hours ago
Paris	Cloud Services	17 days ago
New York City	Hosting	19 days ago
Manchester	Domains	1 month ago
Angers	Cloud Services	2 months ago
London	Domains	2 months ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  xanter.ai (@0xanter) reported 5 minutes ago

  THIS TEAM TRAINED AN AI MODEL ACROSS 14 MACS IN 4 COUNTRIES, NO DATACENTER NEEDED His laptop's just one node in the network. The others are in Switzerland, France, and beyond, all synced over regular home internet. Pause at 0:05 👀 — 14 consumer Macs, across 4 countries, generating every single training rollout — each Mac runs int8 inference locally via MLX, one B200 GPU elsewhere handles the actual gradient updates — they only sync through Cloudflare R2, ordinary cloud storage, no dedicated datacenter interconnect — tested on a biomedical search task: pass rate jumped from 29% to 63%, tool-use rate from 22% to 84% — rollout generation is roughly 80% of the compute cost in this kind of training, and all of it ran on regular home machines Here's the mechanism: the hard part isn't running inference on Macs, it's that those rollouts come from slightly outdated, quantized weights running on a completely different kernel stack than the trainer. Two tricks fix that gap: sending only the ~0.5% of weight values that actually changed (82MB instead of a 9GB checkpoint), and filtering out the small fraction of tokens where probability estimates drift too far between the rollout machine and the trainer. Their bigger point: idle consumer compute worldwide already outnumbers the clusters behind today's frontier models. As top AI labs lock models behind closed APIs, training runs like this, on hardware people already own, are one path to keeping frontier-level AI development actually open. Would you let your own idle Mac or PC contribute compute to a training run like this?

• 
  Med (@medhansh) reported 8 minutes ago

  How to make every Mac, server & cloud worker you own feel like one computer: ====== NETWORKING ====== - Tailscale: Connects all your machines into one private network. SSH into your home desktop from anywhere with no port forwarding and nothing exposed publicly - Thunderbolt Bridge: Connects two nearby Macs directly through a Thunderbolt cable. You get tens of Gbps and sub-ms latency without buying networking gear - 2.5/10GbE: The wired alternative when Thunderbolt isn’t practical. Use it when normal gigabit networking becomes the bottleneck - Cloudflare Tunnel: Gives a local service a public URL without opening a port on your router. Useful for websites, APIs and dashboards other people need to reach - ngrok: Creates a temporary public URL in seconds. Perfect for testing webhooks against something running locally ====== REMOTE ACCESS ====== - SSH + `~/.ssh/config`: Lets you create short names and reusable settings for remote machines. Type `ssh studio` instead of remembering usernames, IP addresses and ports - `ControlMaster auto`: Keeps one SSH connection open and reuses it. New terminals connect instantly instead of negotiating a fresh session every time - Mosh: SSH that survives your Wi-Fi dropping. Close the laptop, open it on a train, switch networks and the same terminal session reconnects - tmux: Keeps programs running after you disconnect. Start a long agent job, close your laptop and reconnect to it later - tmux-resurrect + continuum: Saves and restores your tmux sessions after the machine itself reboots - VS Code / Cursor Remote SSH: The editor runs on your laptop while the code, terminal and language server run on the remote machine. It feels local without syncing files - code-server: Runs VS Code inside a browser. Useful when you need to work from an iPad or a computer without your development setup - macOS Screen Sharing: Built-in remote control between Macs. On the same network it’s fast enough for normal desktop work - Sunshine + Moonlight: Streams a remote desktop using game-streaming technology. Use it when you need much lower latency than normal screen sharing ====== SERVING ====== - Tailscale Serve: Gives a local service a private HTTPS URL that only devices on your Tailscale network can open - Tailscale Funnel: Takes that private service and makes it reachable from the public internet. Useful for receiving webhooks on a home machine - Caddy: A web server and reverse proxy that gets HTTPS certificates automatically. Two lines of config, real certificates, no Let’s Encrypt homework - Cloudflare Tunnel: Better when you want public traffic to pass through Cloudflare before reaching your machine ====== FILES ====== - ***: Tracks changes, understands conflicts and lets each agent work on a separate branch. Use *** for code that agents edit, not a generic sync tool - *** worktrees: Opens multiple branches from the same repository as separate folders. Every agent gets its own workspace without cloning the repo again - Jujutsu (`jj`): A ***-compatible version-control system designed around easier rebasing, undoing and concurrent work. Worth trying when many agents produce branches at once - SMB: Shares a folder from one machine so another can mount it like a local drive. The easiest answer for two Macs on the same network - NFS: The same basic idea as SMB, with more setup and generally better performance - Mutagen: Continuously mirrors a local project to a remote machine while respecting ignored files. Use it when you want to edit locally but run remotely - Syncthing: Automatically syncs folders directly between machines. Great for notes, assets and scratch files - Don’t use Syncthing for code multiple agents edit. It syncs files but doesn’t understand branches or conflicts - rsync: Copies files or folders once, usually over SSH. Fast, scriptable and already installed almost everywhere - rclone: rsync for cloud storage. Moves files between your machines and S3, R2, B2, Google Drive and dozens of other services - pnpm: Stores each package once and hardlinks it into every project. Fourteen worktrees can share one copy instead of downloading fourteen ====== ENVIRONMENT ====== - mise: Installs and switches Node, Python, Go and Ruby versions per project. Replaces nvm, pyenv, rbenv and asdf with one fast tool - direnv: Loads the correct environment variables the moment you enter a folder, then unloads them when you leave - OrbStack: A drop-in Docker Desktop replacement for Mac. The same Docker commands with a fraction of the RAM and battery usage - Homebrew + Brewfile: Records the apps and CLI tools installed on your Mac. A new machine can recreate the setup with one command - Devcontainers: Defines the development environment in code. Anyone opening the project gets the same operating system packages, runtimes and tools - Nix / devenv: Reproduces an environment extremely precisely across machines. Powerful, but only worth the learning curve when that level of determinism matters ====== SECRETS ====== - 1Password CLI: Injects secrets into a command at runtime. Your `.env` becomes a template you can safely commit because the real values stay in 1Password - `op run`: Starts a command with the required secrets available only to that process. Nothing sensitive needs to be copied into plaintext files - 1Password Service Accounts: Give headless servers access to specific vaults without attaching them to your personal login - SOPS + age: Encrypts secret files before they enter ***. The repository stores ciphertext and approved machines decrypt it at runtime - Tailscale SSH: Uses your Tailscale identity to authorize SSH access. You stop copying and rotating public keys across every machine ====== TERMINAL ====== - Atuin: Your shell history, synced and searchable across every machine. That command from last Tuesday on the server is available on your laptop - zoxide: Learns which folders you use. Type `z api` instead of `cd ../../../services/api` - fzf: Adds fuzzy search to almost anything. Use it for files, command history, *** branches, processes and SSH hosts - ripgrep (`rg`): Searches an entire codebase in milliseconds and skips files in `.gitignore` automatically - fd: `find` with syntax you can actually remember. Type `fd config` instead of assembling a collection of flags - bat: `cat` with syntax highlighting, line numbers and *** changes - dust: Shows which folders are consuming disk space as a readable chart instead of a wall of numbers - lazygit: A full *** interface inside the terminal. Stage individual lines, inspect diffs, rebase, cherry-pick and resolve conflicts visually - btop: A readable live view of CPU, memory, disks, networks and running processes ====== CONSISTENCY ====== - just: One file containing every project command. `just dev` means the same thing on every machine and every teammate’s laptop - chezmoi: Keeps your dotfiles in *** and adapts them per machine. You get the same shell, aliases and settings across macOS and Linux - Brewfile + mise + chezmoi + just: Together these recreate your installed tools, runtime versions, personal configuration and project commands ====== ISOLATION ====== - Containers: Give each workload its own filesystem, dependencies and permissions. One broken agent can’t interfere with everything else on the machine - One container per client: An agent cannot read another client’s files if those files were never mounted into its container - Colima: A free, CLI-only way to run Docker containers on Mac - Podman: Runs containers without a permanent root-level daemon. Useful when stronger rootless isolation matters - ****: Creates and manages macOS and Linux virtual machines on Apple Silicon - UTM / Parallels: Full desktop virtual machines for workloads that need a complete graphical operating system - Firecracker: Starts tiny virtual machines in under a second. Useful when you’re building a platform that needs an isolated machine for every agent run ====== AGENT ORCHESTRATION ====== - tmux + *** worktrees: The simplest fleet manager. Every agent gets a terminal, branch and folder you can inspect directly - Claude Code hooks: Run commands automatically before or after specific Claude Code events. Useful for validation, formatting, notifications and cleanup - Claude Code subagents: Hand focused tasks to separate agents without manually opening another terminal for each one - Claude Agent SDK: Starts, steers and streams agent sessions from your own code. Use it when a terminal workflow needs to become part of a product - Inngest / Trigger .dev: Turns agent runs into durable jobs. If a process crashes, the job can retry instead of disappearing with the terminal - BullMQ / Graphile Worker: Adds a straightforward job queue backed by Redis or Postgres - launchd: Starts Mac workers after reboot and restarts them when they crash - systemd: The Linux equivalent of launchd - Temporal: Stores every step of a long workflow so it can resume after failures. Powerful, but unnecessary until durable execution becomes a real problem ====== RENTED COMPUTE ====== - Hetzner dedicated: Cheap, persistent Linux machines with lots of CPU and RAM. Good for workers that run all day - Hetzner Server Auction: Older dedicated servers sold for less. Useful when price matters more than having current hardware - DigitalOcean / Vultr / Linode: More expensive per GB, but nearby regions can make interactive SSH and remote editing feel much faster - Fly .io: Small machines that start quickly and can shut down when idle. Good for temporary workers - GitHub Actions self-hosted runners: Sends CI and batch jobs to hardware you already own instead of GitHub’s machines - Depot: Runs builds remotely and shares the cache between machines. Useful when Docker or application builds become the bottleneck - Modal / RunPod / Lambda: Rent GPUs by the hour instead of owning hardware that sits idle - MacStadium / Scaleway Apple Silicon: Rent real Macs remotely. Only worth it when the workload genuinely requires macOS ====== BROWSER AUTOMATION ====== - Playwright + `storageState`: Saves cookies and login state to a file that can move between machines. Much safer and more portable than syncing an entire Chrome profile - Puppeteer: A smaller Chrome-focused alternative when you don’t need Playwright’s multi-browser support - Chrome DevTools MCP: Lets an agent inspect and control a real Chrome session through developer tools - browser-use: Gives agents a higher-level way to navigate websites, fill forms and complete browser tasks - Browserbase / Browserless / Steel: Hosts and manages browsers for you. Useful when one local Chrome instance becomes fifty concurrent sessions - Residential proxies: Routes browser traffic through consumer IP addresses. Use them when websites block traffic from cloud servers ====== SAFETY ====== - restic + Backblaze B2: Encrypted, deduplicated, automatic offsite backups for roughly $6/TB/month. You’ll need it exactly once - Time Machine: Keeps local versions of your Mac files and makes accidental deletion easy to undo. Necessary, but not enough by itself - Carbon Copy Cloner / SuperDuper: Creates a bootable copy of your drive so a dead SSD doesn’t mean rebuilding the machine from zero - Netdata: One command installs a full metrics dashboard. Finally see which process has been eating your RAM - `memory_pressure`: Shows whether your Mac is actually running out of usable memory - `vm_stat`: Shows detailed memory usage and paging activity - `sysctl vm.swapusage`: Shows exactly how much SSD space macOS is using as emergency memory - asitop: Shows Apple Silicon CPU clusters, GPU usage, power consumption and temperatures - Uptime Kuma: Checks whether your machines and services are online and sends an alert when they aren’t - Grafana + Prometheus: Stores metrics over time and turns them into dashboards and alerts. Worth adding once you have several machines A backup isn’t real because the command succeeded It’s real when you’ve restored from it successfully ====== THE 80/20 STACK ====== Tailscale SSH + Mosh + tmux *** worktrees SMB 1Password CLI mise + direnv OrbStack pnpm just + chezmoi restic + B2 Netdata Atuin + zoxide + fzf Start here Add another tool only when you can clearly explain what problem it solves

• 
  Salina Mendoza (@inababi) reported 18 minutes ago

  @Cloudflare can you talk to your customers here? This is such a bad look for the feature that is only meant to be used as an emergency. There is zero reason to have this on 100% of the time and it seems they cannot figure out how to turn it off

• 
  Anıl Soylu (@anilsoylu) reported 18 minutes ago

  @gabrielstuff @Cloudflare I built a bot with Claude in about five minutes just to test this. There was no CAPTCHA issue and no proxy usage, yet four of my links were taken down within an hour. It seems this system is extremely easy to abuse.

• 
  Rheza Pahlevi (@rheza) reported 21 minutes ago

  @eastdakota @Cloudflare Can you guys please fix your support team first ?, I have been waiting for email support. My account and domain has been hacked and taken over by someone else.

• 
  2024=2023+1 (e/acc) (@commondoubts) reported 21 minutes ago

  @paularambles Site is down now. @Cloudflare to the rescue?

• 
  Jonas Templestein (@jonas) reported 22 minutes ago

  @dok2001 Oh another one: line by line billing events - ideally delivered to a cloudflare queue And the ability for most operations that cost money to carry billing metadata We want to charge our customers for any costs they incur in our cloudflare account, but it’s currently a bit hard Alternatively I’ve been thinking we could “make a cloudflare account per customer” but I don’t think that API is made for having that many

• 
  Min Yoi (@yoi_minmin) reported 23 minutes ago

  @FuneralsR4 @Cloudflare Same.. getting the same crap for the past week. #FuckCloudflare

• 
  WIV Reports — Uncensored (@WIVReports) reported 24 minutes ago

  There is no greater love than Christian hate. Gab, a company that constantly preaches its "Christian values" responds to a long term paying customer with pure disdain the second they get called out on technical incompetence. After dropping slurs and throwing a tantrum over standard DevTools logs, their CTO sent this email and immediately blocked my account on Gab so I couldn't reply. I am also sharing the email notification I received. Here is the full timeline of how Gab handles paying subscribers reporting a legitimate bug: 1: Socket io connections failed and looped infinitely, triggering a Cloudflare 429 Too Many Requests status code at their edge. 2: Support claimed a Cloudflare 429 signed by Cloudflare IPs was an issue with my "home Wi-Fi." A VPN on that same Wi-Fi instantly bypassed it, proving it was a server-side edge filter. 3: Instead of checking their WAF rules, their CTO claimed checking origin logs for 6 hours was "VIP treatment," accused me of using AI, and threw a fit. 4: I deleted my gab ai account, posted the DevTools receipts, and told him to fix his edge. 5: He sent a profanity-laden, slur-filled email, blocked me on the platform, and tried to hide it. Never once did I name-call or throw insults, I just posted raw HTTP response headers. This is how Gab treats the people who keep their lights on. Absolute amateur hour You can see the entire unfolding here on my X account, as I posted everything said verbatim. And again, here are the screenshots of the HTTP responses showing the issue is on them.

• 
  Clifton Griffin 🛒 (@clifgriffin) reported 29 minutes ago

  @ezsmith397 turns out cloudflare apo was still on and caching a broken version - so mobile worked fine but desktop was broken 🫡

• 
  Jonas Templestein (@jonas) reported 29 minutes ago

  @dok2001 @jachands @mattzcarey I think even outside MCP oauth, managing scopes on access tokens on cloudflare is super confusing and tedious There seem to be two similar but different UIs that are each really fiddly and require advance knowledge of what scopes are called. There is no “manifest” support as far as I can tell where I could just paste a Jain blob or something to update scopes

• 
  Xamayon (@SauceNAO) reported 30 minutes ago

  If you use Vultr Firewall Groups and have a rule restricted to Cloudflare sources, it's probably blocking all traffic right now... Either switch the rule to allow all or disconnect and reconnect the firewall group from your servers. Not thrilled that they knew about the issue and didn't bother to let their customers know.

• 
  27 — floofy/acc 🦝📈🚀 (@happysmash27) reported 34 minutes ago

  @mhartl @NickCalabs Did Cloudflare go down or something?? I get the main reference, but haven't heard any news about Cloudflare yet.

• 
  ICHIKA GAMES (@ichika_games) reported 35 minutes ago

  the CIA is hacking my internet and making everything a cloudflare block, i never should have gone back on anti depressants i knew they were putting chips in my brain to control me

• 
  Citedy (@citedycom) reported 36 minutes ago

  Cloudflare Dashboard is temporarily unavailable. Claude down. What next. Aliens?

• 
  abipraya; (@rbayuokt) reported 36 minutes ago

  @CloudflareHelp @Cloudflare I'm getting error when deploying my pages project with wrangler “received a malformed response from the API blablvalabla” and a 522 response is there an issue with the pages API at the moment?

• 
  WIV Reports — Uncensored (@WIVReports) reported 37 minutes ago

  Gab sends an email admitting they just tightened API security and rate limits to fight a bot farm draining compute. Yet when a long-term paying customer gets caught in those same new edge rules with an explicit Cloudflare 429 Too Many Requests error, support claims "it's an incorrect assumption," tells them to buy a VPN, and dumps a partial refund. Andrew, if you're going to ask users to fund independent infrastructure, your support team needs to know how to distinguish real paying members from the bots you're trying to block.

• 
  bone (@boneGPT) reported 37 minutes ago

  @fren_FAST6 have at it my friend, it was using nanobanana, would be really easy to rebuild in codex or claude code i thought i had locked it down really well, had cloudflare workers and supabase all set up right, ran without a hitch for months costing me like $5 a day making me $7

• 
  🜑 (@1casie) reported 38 minutes ago

  > be me > macbook air is bricked, needs a reinstall > no second mac to build a bootable installer > find a github actions workflow that builds macOS installers for free, no mac required > perfect.jpg > trigger a build, artifact is a 17.6GB .dmg.img > click download > kb/s > literal kb/s > theoretical connection is 10MB/s > discover artifact lives on azure blob, signed URL expires in 10 min > write a bash script that resolves the azure SAS url fresh, hands it to aria2c with 16 parallel streams > 16 connections, still kb/s > mfw it's a per-IP throttle, not per-connection > repo author literally has a line in the workflow: "Enable Cloudflare WARP for faster download" > install Cloudflare WARP on my ubuntu box > single stream jumps 20KB/s -> 1.6MB/s > aria2c 16x -> 10MB/s, pinned to my ceiling > 17.6GB in ~an hour, sha256 matches github's published digest > oknowweiscooking.webp > dd it to a USB SSD > paranoid it won't boot apple silicon because it was built on an intel runner > boots apple silicon just fine, i was wrong, shut up > installer runs, reinstall chugs along > STOPS > "OS Personalization" PREFLIGHT_PERSONALIZE portioncomplete:0.15000 estimatedtimeremaining:-1 > 70000 log lines of stalled:NO > the mac can ping apple/com > it can ping cupertino > but personalization "no connections witnessed" > i don't ******* get it > try to sniff the wifi to see what it's talking to > can't > WPA2 isn't a hub, it's a switch, i can't decrypt the mac's traffic as a third client > feel stupid > dig into it > test apple's personalization signing servers from my box > gs/apple/com -> 000 > gsp-ssl/apple/com -> 000 > albert/apple/com -> 403 (works) > gs/apple/com is the signing server and it's IPv4-ONLY > my ISP (DIGI, romania) has broken IPv4 routing to apple's 17.0.0.0/8 > ICMP works, IPv6 works, CDN works, the ONE /8 macOS needs to sign firmware is a black hole > that's why it could "ping cupertino" but personalization silently died > fix: repoint the mac's IPv4 default gateway from the router to my ubuntu pc > my pc has IP forwarding + NAT masquerade + Cloudflare WARP > mac's IPv4 now tunnels through cloudflare, bypassing my ISP's broken path > watch the signing handshake complete in tcpdump, SYN -> SYN-ACK -> ClientHello -> kilobytes of signed data > portioncomplete climbs past 0.15 > weactuallydidit.jpg > STOPS AGAIN at 0.29 > silent on IPv4 > oh > the mac's IPv6 still goes straight to the router, bypassing my box > i literally cannot see it > disable IPv6 on the mac so everything falls back to the working IPv4 path > it reboots > flashes the apple logo 4 times > i'm dying > it boots > it works > 29 hours > i had to MITM my own home network because my ISP couldn't route to one (1) /8 > the mac is back > i'm buying a framework >text still isn't green

• 
  RejectNova (@RejectNova1917) reported 42 minutes ago

  @yeusep3 What actually happened with it? Is it just linked to the platform you're trying to upload it to?... another note, why ******** dose cloudflare exist anyway, seems like a "useful" but also completely useless service.

• 
  Evil Emperor Zurg (@DeadlockState) reported 42 minutes ago

  Hi @dok2001 are you planning to support .fr domains in Cloudflare Domains ?

• 
  Aryan Malik (@aryan33388) reported 45 minutes ago

  @CherryJimbo @Cloudflare @CloudflareDev the demo trace is an agent confidently telling a customer their order is delayed to 2026. finally, observability for the exact moment your support bot starts gaslighting people.

• 
  Kamran Wajdani (@kamranwajdani) reported 51 minutes ago

  @anilsoylu @Cloudflare that’s wild. if a bare test page can get flagged that fast, either the report flow is too loose or they’re using almost no signal before escalating it.

• 
  feranmi (@_bumblebee7_) reported 53 minutes ago

  @vxnuaj @treejordan @LemonLime_AI i wouldn’t say hopeless tbh. it’s just a tough world out there. being a cs major is tough. cloudflare got 1 million applications for internship spots of about 1000 people. the field is so densely packed. not everyone goes to waterloo or a big tech school where the names can speak for you. it’s easy to say “put in the work” but that can only come from someone who’s blind and insensitive. students are asked to send cold emails upon cold emails to people who don’t care. “your cold email must make my middle finger twitch before you get a response”. it’s tough working your *** off with no results or anyone noticing you. a good number of cs majors are also immigrants who don’t have a network or know anyone. most of them just came to the U.S. with dreams and ambitions to help support those back at home. so when they see opportunities like this, sure, it looks so bad and you wonder “why would they do it?”. but when you’re in a pool where all hope seems to be lost, you happily take any rope thrown at you even if the person offering it is the devil himself. it’s a tough world out there. anyone who doesn’t have to experience it should be grateful.

• 
  eddiebro (@EddiebroRon) reported 56 minutes ago

  I decided to write an iOS shortcut that will encrypt a message before sending it over iMessage and then decrypt it by only the person that has the correct 256 bit key, read it and then reply to me using the same process BUT I’m using the same type of Double Ratchet protocol Signal uses so that every message has a different encryption key and if someone were to gain access to one of the participants private key, they would not be able to do anything with it as it changes each message. Anyway, I am in the process of auditing my shortcut because iOS 27 adds features to use AI to write your shortcut for you and then also auditing and I was writing the audit and so excited that I was within five minutes of testing all of this that I just spent hours doing, and I go to open the door and walk inside with the dogs and then look down at the Shih Tzu and she look like a Christmas tree with cockleburs as decorations and I wanted to cry. It’s hard to believe that I’ve actually pulled more off of her in the past, but this was still pretty bad. And now I shall go test my shortcut yay. If it works as intended I might put it up in the gallery and then I will post a link here. The method to get a private key bound to someone else (using a temp key they provide to you from the same page) is a website that I threw up real quick on Cloudflare and then the key and all processing is done on device using JavaScript so technically anyone could use it without risk of me or anyone else being capable of decrypting any messages 🤷

• 
  The Hacker News (@TheHackersNews) reported 57 minutes ago

  The attacker’s own server address never appears on the wire. msaRAT uses Cloudflare to establish the connection, then routes the entire WebRTC channel through Twilio. Defenders see the victim’s browser talking to legitimate services. No Chrome or Edge patch fixes this. It exploits neither browser. Hunt for Chrome or Edge launched by an installer, service, or another non-interactive parent with --headless=new and --remote-debugging-port. See “Hunting Notes” in the article.

• 
  Andrew McGarry (@beyondcontent) reported 57 minutes ago

  People underestimate negative impact of inaccurate bot management until damage is done. Don't expect Cloudflare to be subtle by default. False positives can be a different kind of bad. Log files @datadoghq can help.

• 
  fatih k. (@0xWebmaster) reported 58 minutes ago

  we have crazy amounts of bot traffic from china and singapore although we tried to solve this issue with WAF rules on cloudflare, nothing ever worked. Our solution: to block all traffic from CN and SG. Sorry but that's not scraping, thats systemic ****** of our infra.

• 
  dweewq (@eweqss1431) reported 58 minutes ago

  Agencies charge $8,000 to $12,000 for a marketing site, three weeks of calls, one invoice that makes you sit down. Claude Code builds the same site in an afternoon, but most people still get template output because they type "make it beautiful" and pray. Claude defaults to safe: Inter font, purple gradients, three feature cards. The ten thousand dollar look comes from constraints, not vibes. Screenshots beat adjectives. Three reference sites from your niche, with an explicit instruction not to copy the layout, give the model an actual quality bar. One prompt with five blocks, audience, the single action every page pushes toward, the references, the stack, and a banned list of clichés, gets a working first version in under ten minutes, about seventy percent there. The part that earns the price tag is the polish pass agencies bill forty percent for: typography, spacing, and motion, fixed in three separate messages instead of one, plus a mobile check at 375px since most traffic is a phone. Shipping costs nothing. Push to GitHub, connect Cloudflare Pages, deploy. The agency was always selling three weeks of process. The process was always one afternoon.

• 
  Benjamin Shelton (@zancarius) reported 1 hour ago

  @kwrob24 Yeah... I have most of my blogs behind Cloudflare specifically for this reason, but for historical (read: lazy) reasons, this instance lives on a domain I use for a *lot* of personal projects and home-lab-esque sort of things, even if most of it has been migrate to cloud services. It's not really a huge problem, and it's not (yet) consuming a bunch of egress traffic. But, this isn't the first time I've had issues with AI-related crawlers. I may be forced to move this to another domain at some point.