1. Home
  2. Companies
  3. Cloudflare
Cloudflare

Cloudflare status: hosting issues and outage reports

No problems detected

If you are having issues, please submit a report below.

Full Outage Map

Cloudflare is a company that provides DDoS mitigation, content delivery network (CDN) services, security and distributed DNS services. Cloudflare's services sit between the visitor and the Cloudflare user's hosting provider, acting as a reverse proxy for websites.

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

At the moment, we haven't detected any problems at Cloudflare. Are you experiencing issues or an outage? Leave a message in the comments section!

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

  • 50% Cloud Services (50%)
  • 25% Domains (25%)
  • 25% Hosting (25%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

CityProblem TypeReport Time
New York City Hosting 9 days ago
New York City Cloud Services 28 days ago
Los Angeles Cloud Services 29 days ago
Paris Cloud Services 1 month ago
New York City Hosting 2 months ago
Manchester Domains 2 months ago
Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

  • cybersec_cat
    Cat (@cybersec_cat) reported

    Hey Cloudflare, you don’t get to take credit for stopping cyberattacks that came from your own infrastructure. You created the problem. Solving it doesn’t deserve anything but scrutiny.

  • gzlin
    GZ Lin (@gzlin) reported

    7/8 Two answers fit this physics. Ship continuously in public: Chrome ships two security releases a week, the kernel defers fixes at most seven days. And put protocol layer mitigations live while the real fix lands. Cloudflare did that for Log4shell in 2021.

  • Mike_Andreuzza
    Michael Andreuzza (@Mike_Andreuzza) reported

    @codeboje So, Cloudflare gives you the request's ASN for free, so it's just a curated allowlist-style check against known cloud-compute networks, AWS, GCP, Azure, Hetzner, etc. there's no IP range syncing, no external service and VPN networks and private relay are excluded since real humans come from those....

  • TKS701312296730
    TKS (@TKS701312296730) reported

    @MeltsIcy24536 It's clearly the problem because Cloudflare is trying to explain its reasons for failing. The 'genius' needs to get rid of this moronic verification system that's probably locking more legitimate users out of X than it is 'exterminating' real bots.

  • PneumaBlessing
    Brain Shield (@PneumaBlessing) reported

    @Cloudflare @OpenAI But what does that mean? You say you support it, but WHAT DOES IT ACTUALLY MEAN? And how does it impact open weight models like QWEN and DEEPSEEK?

  • ipradeepmishra
    Pradeep (@ipradeepmishra) reported

    i wish @Cloudflare had project concept to group all service i am using in my project instead of listing all workers, d1, queues etc in the account

  • escartin
    Javier (@escartin) reported

    Here's a reminder for ppl with sites on Cloudflare: They block major LLM crawlers by default, so your site may be invisible to AI search. It's dumb, but I feel the percentage of sites with this problem is higher than you'd expect.

  • gossy_84
    Adam Goss (@gossy_84) reported

    SynkLoader: fake IT Service Desk on Microsoft Teams WordlistLoader: fake CAPTCHA on a legitimate website Fake Codex: fake error prompt aimed at developers npm phishing hosts: fake Cloudflare check on a trusted mirror WeedHack: fake game client, top of Google via SEO poisoning

  • iqtauhid
    Tauhid IQ (@iqtauhid) reported

    - Claude = coding. ($20/mo) - Supabase = backend. (Free) - Vercel = deploying. (Free) - Namecheap = domain. ($12/yr) - Stripe = payments. (2.9%/transaction) - GitHub = version control. (Free) - Resend = emails. (Free) - Clerk = auth. (Free) - Cloudflare = DNS. (Free) - PostHog = analytics. (Free) - Sentry = error tracking. (Free) - Upstash = Redis. (Free) - Pinecone = vector DB. (Free) Total monthly cost to run a startup: ~$20 There has never been a cheaper time to build. Follow Tauhid IQ for regular update.

  • bogdancarlescu
    Bogdan Carlescu (@bogdancarlescu) reported

    The market has picked a side. In 2026, $CHKP is down 24%. $NET is up 53%. Per employee, the market pays about $2.0M for Check Point and about $20.7M for Cloudflare. Ten times more for the company losing money on every head.

  • meHirenKavad
    Hiren Kavad (@meHirenKavad) reported

    @LeoBuilds_ Fixed price VPS. 5-10 euro on Hetzner or DO, same bill at 100 hits or 100k. Worst case the box slows down instead of charging you. Cloudflare in front is free. The tradeoff is TLS, backups, and deploys are now yours. Coolify and Dokploy already cover ***-push onto Docker Compose. I work on Peon which is the same shape. For side projects I would take the boring 6 euro month over a metered bill I cannot cap.

  • alvivanco
    Alejandro Vivanco (@alvivanco) reported

    @PSaezT this is so awful, Cloudflare is one of the best products out there i guess i cant go to spain 😭

  • Joadys
    Joady (@Joadys) reported

    @VodafoneIreland Guys, if you change your DNS from Vodafone's secure DNS to Google's or Cloudflare's, it will work perfectly. The broadband isn't broken on Vodafone. It's their secure DNS server that's broken or has been hacked or something. 1. Go to 192.168.1.1 while connected to your broadband router. And log in with the username admin and whatever password is on the bottom of your Vodafone router/modem 2. Switch to expert mode. 3. Go to the internet tab. 4. Go to DNS. 5. Switch from automatically to manually. 6. Change the slider "Configure DNS for all devices" to be on. 7. Put 1.1.1.1 or 8.8.8.8 or 9.9.9.9 into those two boxes, whichever you prefer. The first one is Cloudflare, the second one is Google, and the third one is Quad9, a privacy-focused Swiss non-profit. That solves it. You can switch back after if you like.

  • SandeepL337
    Sandeep Kamble (@SandeepL337) reported

    @Cloudflare change is coming, and the teams ahead of it are testing verified access now, not after their agents start hitting 403s. the next problem is simpler for pentester: can your agent even reach the target without getting blocked?

  • immanuel_vibe
    Immanuel (@immanuel_vibe) reported

    most devs think eBPF is "that networking thing cloudflare uses" it's this: you can run your own code inside the linux kernel, safely, with no module, no patch, no reboot, on a box that's serving traffic right now a verifier proves your program can't crash the kernel or loop forever. then it's JIT'd to native speed. that's the whole trick what eBPF actually buys you: - see every exec, every file open, every TCP connect on the host. no agent inside the app, no code change, no restart - read TLS traffic before it's encrypted. uprobe on SSL_write. plaintext requests out of a binary you don't own and can't rebuild - drop millions of packets/sec at the driver, before the kernel allocates an sk_buff. that's XDP. that's how DDoS mitigation works now - delete iptables. cilium does k8s service routing in BPF hash maps instead of walking a linear rule chain that grows with your cluster - continuous profiling of every process on the box, every language, zero instrumentation, single-digit percent overhead. parca, pyroscope - block the syscall, not the alert. tetragon and falco don't just detect, they can kill the process at the hook - swap the CPU scheduler at runtime. sched_ext landed in 6.12. valve wrote one for the steam deck the mental model: your kernel now has event listeners. syscalls, kernel functions, packets, cgroups. attach, filter, aggregate into a map, read from userspace the part nobody puts on the landing page: the verifier will reject perfectly correct code and hand you a 400-line register state dump as the explanation. it's like arguing with a compiler that has decided it hates you personally worth it anyway. observability stops being a thing you build into your app and becomes a thing you point at it what's the most cursed thing you've done with it?

  • bil0090
    Bilal Bakr (@bil0090) reported

    @maxktz @cursor_ai I think CloudFlare is/was down which is causing some problems

  • mrusu_
    Marusu (@mrusu_) reported

    The Cutting Room Floor is likely going to stay down until X realizes why it is down in the first place. His own ego is the only reason the site does not use Cloudflare. I would not underestimate bad actors and the lengths they will go to to keep the site down.

  • kxmcs
    ohnwow (@kxmcs) reported

    @dump_tcp @Cloudflare Again the argument was never “Golang cannot handle high request outputs” I run multiple companies running on rust and golang, rust is just the superior choice, that is a fact.

  • ThNorthernKing
    Liverpool Don (@ThNorthernKing) reported

    @Cloudflare This is awesome. I once resolved a lookup and made it faster after transferring the read service to use Rust. Rust needs to be respected outer here

  • raze35010
    zeaaaNFT 🐸⚔️ (@raze35010) reported

    @RomixUS @kick Method 1 Hard Refresh Press the key combination Ctrl + F5 (or Ctrl + Shift + R) on your keyboard while the browser is open to force it to re-download all web elements without using the old cache. Method 2 Change DNS (If Blocked by Internet Service Provider) Some ISPs block specific CDN domains used by streaming sites. Open your browser settings (e.g., Opera/Chrome). Look for the DNS or "Use Secure DNS" option. Switch to Cloudflare (1.1.1.1).

  • dump_tcp
    tcpdump (@dump_tcp) reported

    @djsmith42 @Cloudflare yes but i only used dns as a hash tag didn't use dns in my argument. I was talking about tcp traffic connections for like there network with webtraffic for there cdn

  • argosaki
    GP Q (@argosaki) reported

    🤖 OpenAI and 127 Organizations Warn AI Cyberattacks Are Scaling Fast OpenAI, Anthropic, Google, Microsoft, AWS, Cisco, Cloudflare, CrowdStrike, Visa, Mastercard and dozens of other organizations signed an open letter calling for urgent cyber defense upgrades. ⚫ The warning: AI-powered attacks could become more widespread and more complex in the coming months ⚫ Critical services are at risk, including hospitals, water systems and internet infrastructure ⚫ The letter says current defenses are not enough because of old vulnerabilities, weak access controls, poor patching and technical debt ⚫ Signatories want defenders to get broader access to AI tools, shared fixes, threat data and practical support ⚫ AI model developers are also being asked to fund, train and support under-resourced critical infrastructure teams The bigger signal: AI is now changing both sides of cybersecurity. Attackers get faster, but defenders need the same tools before the gap becomes impossible to close. ⚡ECONOMY NEWS⚡

  • Ironic_Ape
    Ironic Ape (@Ironic_Ape) reported

    @anthonyiseman @StockMarketNerd Short term fine - long term debatable. I'll Never buy another CRM licence ever again - I suspect no other founder will either, large enterprise will double down thinking it can help them become "ai" - The markets react quickly, often too quick.... but answer me this... when I can build a CRM in an afternoon.. (and I have, several times)... why would I pay for it ? Compliance, Security, Infastructure.... I already have all of those with Cloudflare or Google... I'm already paying for it... why would I pay twice.. what you're seeing is the ApplePay launch for PayPal...CD's replacing tapes, Digital camera's replacing film.... change takes time... those that adapt will be fine.. those that dont, die. thats just the nature of the S curve of business. Be under no illusion, Ai is and will change EVERYTHING!

  • ViperChill
    Glen Allsopp 👾 (@ViperChill) reported

    The Detailed newsletter got 100+ questionable signups today the space of an hour. Many got past reCAPTCHA and double opt-in, but AI saved the day. For context, I was using Kit's HTML form embeds, rather than JS. These sign-ups were happening without having to visit the site. Just replacing the form would potentially have the same issue so I created a new form, hid the URL behind a Cloudflare Workers endpoint, then applied rules to block the questionable emails based on their obvious pattern. No questionable signups since. Would have spent my entire day on something like this in the past. To clarify, this is not a criticism of Kit. This is partly my fault for having the form action URL visible (have not had an issue for years). The Kit API is part of what made this fix possible. Big fan of @nathanbarry and what he has built.

  • dump_tcp
    tcpdump (@dump_tcp) reported

    @kxmcs @Cloudflare Never ran into that big of a ram issue so I guess we will see one day i also many people are using golang around me i never see anyone using rust for anything

  • JulianGoldieSEO
    Julian Goldie SEO (@JulianGoldieSEO) reported

    Hermes Agent just added 44 one click app connections. Cloudflare, GitLab, Datadog, Metabase, Railway, Deep Wiki, and a pile more. Before, you hunted down the server, read the docs, and hand edited a config file. One typo and nothing worked. Now you open the catalog, hit enter on the app you want, and it asks for the key or opens your browser to log in. But here's the setting nobody mentions. Every app you connect ships its whole instruction list to your model on every single turn. Cloudflare alone exposes about 3,300 tools. Just the names eat 32,000 tokens. So people switch on 20 apps and then wonder why their agent got slow and forgetful. The fix is called tool search. It swaps all those instructions for 3 tiny helpers. One finds the tool, one loads it, one runs it. Your agent only pulls what it needs, when it needs it. That's why you can add 44 connections and not wreck your setup. Turn that on first. Then connect everything. Want the SOP? DM me. 💬

  • kzzy47
    KZZY (@kzzy47) reported

    @borrhensaidi A DDoS big enough to take the whole service down instead of degrading it usually means there was no mitigation layer in front yet. Is Cloudflare or similar going in front of it once you're back up?

  • productdevbook
    Wind (@productdevbook) reported

    I want to build an entire project on Cloudflare, but this is the only obstacle. I hope I can figure this out because domain providers that don’t support root CNAME records require an IP address.

  • alexsofroniev
    Alex Sofroniev (@alexsofroniev) reported

    Damn, now this what you call memory and performance optimiziation. Another reason why Cloudflare is the GOAT

  • alexnorthrule
    Alex North Rule (@alexnorthrule) reported

    @Cloudflare You need to provide these new users with a reason to make a regular return to the directory, like a habbit tracker or a game, or a regular set of problems that need solutions for, or a competition.