Cloudflare status: hosting issues and outage reports

Problems in the last 24 hours

The graph below depicts the number of Cloudflare reports received over the last 24 hours by time of day. When the number of reports exceeds the baseline, represented by the red line, an outage is determined.

Most Reported Problems

The following are the most recent problems reported by Cloudflare users through our website.

• Cloud Services (50%)
• Domains (25%)
• Hosting (25%)

Live Outage Map

The most recent Cloudflare outage reports came from the following cities:

City	Problem Type	Report Time
New York City	Hosting	9 days ago
New York City	Cloud Services	28 days ago
Los Angeles	Cloud Services	29 days ago
Paris	Cloud Services	1 month ago
New York City	Hosting	2 months ago
Manchester	Domains	2 months ago

Full Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  Cat (@cybersec_cat) reported 5 minutes ago

  Hey Cloudflare, you don’t get to take credit for stopping cyberattacks that came from your own infrastructure. You created the problem. Solving it doesn’t deserve anything but scrutiny.

• 
  GZ Lin (@gzlin) reported 6 minutes ago

  7/8 Two answers fit this physics. Ship continuously in public: Chrome ships two security releases a week, the kernel defers fixes at most seven days. And put protocol layer mitigations live while the real fix lands. Cloudflare did that for Log4shell in 2021.

• 
  Michael Andreuzza (@Mike_Andreuzza) reported 8 minutes ago

  @codeboje So, Cloudflare gives you the request's ASN for free, so it's just a curated allowlist-style check against known cloud-compute networks, AWS, GCP, Azure, Hetzner, etc. there's no IP range syncing, no external service and VPN networks and private relay are excluded since real humans come from those....

• 
  TKS (@TKS701312296730) reported 8 minutes ago

  @MeltsIcy24536 It's clearly the problem because Cloudflare is trying to explain its reasons for failing. The 'genius' needs to get rid of this moronic verification system that's probably locking more legitimate users out of X than it is 'exterminating' real bots.

• 
  Brain Shield (@PneumaBlessing) reported 9 minutes ago

  @Cloudflare @OpenAI But what does that mean? You say you support it, but WHAT DOES IT ACTUALLY MEAN? And how does it impact open weight models like QWEN and DEEPSEEK?

• 
  Pradeep (@ipradeepmishra) reported 11 minutes ago

  i wish @Cloudflare had project concept to group all service i am using in my project instead of listing all workers, d1, queues etc in the account

• 
  Javier (@escartin) reported 17 minutes ago

  Here's a reminder for ppl with sites on Cloudflare: They block major LLM crawlers by default, so your site may be invisible to AI search. It's dumb, but I feel the percentage of sites with this problem is higher than you'd expect.

• 
  Adam Goss (@gossy_84) reported 19 minutes ago

  SynkLoader: fake IT Service Desk on Microsoft Teams WordlistLoader: fake CAPTCHA on a legitimate website Fake Codex: fake error prompt aimed at developers npm phishing hosts: fake Cloudflare check on a trusted mirror WeedHack: fake game client, top of Google via SEO poisoning

• 
  Tauhid IQ (@iqtauhid) reported 25 minutes ago

  - Claude = coding. ($20/mo) - Supabase = backend. (Free) - Vercel = deploying. (Free) - Namecheap = domain. ($12/yr) - Stripe = payments. (2.9%/transaction) - GitHub = version control. (Free) - Resend = emails. (Free) - Clerk = auth. (Free) - Cloudflare = DNS. (Free) - PostHog = analytics. (Free) - Sentry = error tracking. (Free) - Upstash = Redis. (Free) - Pinecone = vector DB. (Free) Total monthly cost to run a startup: ~$20 There has never been a cheaper time to build. Follow Tauhid IQ for regular update.

• 
  Bogdan Carlescu (@bogdancarlescu) reported 25 minutes ago

  The market has picked a side. In 2026, $CHKP is down 24%. $NET is up 53%. Per employee, the market pays about $2.0M for Check Point and about $20.7M for Cloudflare. Ten times more for the company losing money on every head.

• 
  Hiren Kavad (@meHirenKavad) reported 28 minutes ago

  @LeoBuilds_ Fixed price VPS. 5-10 euro on Hetzner or DO, same bill at 100 hits or 100k. Worst case the box slows down instead of charging you. Cloudflare in front is free. The tradeoff is TLS, backups, and deploys are now yours. Coolify and Dokploy already cover ***-push onto Docker Compose. I work on Peon which is the same shape. For side projects I would take the boring 6 euro month over a metered bill I cannot cap.

• 
  Alejandro Vivanco (@alvivanco) reported 30 minutes ago

  @PSaezT this is so awful, Cloudflare is one of the best products out there i guess i cant go to spain 😭

• 
  Joady (@Joadys) reported 30 minutes ago

  @VodafoneIreland Guys, if you change your DNS from Vodafone's secure DNS to Google's or Cloudflare's, it will work perfectly. The broadband isn't broken on Vodafone. It's their secure DNS server that's broken or has been hacked or something. 1. Go to 192.168.1.1 while connected to your broadband router. And log in with the username admin and whatever password is on the bottom of your Vodafone router/modem 2. Switch to expert mode. 3. Go to the internet tab. 4. Go to DNS. 5. Switch from automatically to manually. 6. Change the slider "Configure DNS for all devices" to be on. 7. Put 1.1.1.1 or 8.8.8.8 or 9.9.9.9 into those two boxes, whichever you prefer. The first one is Cloudflare, the second one is Google, and the third one is Quad9, a privacy-focused Swiss non-profit. That solves it. You can switch back after if you like.

• 
  Sandeep Kamble (@SandeepL337) reported 31 minutes ago

  @Cloudflare change is coming, and the teams ahead of it are testing verified access now, not after their agents start hitting 403s. the next problem is simpler for pentester: can your agent even reach the target without getting blocked?

• 
  Immanuel (@immanuel_vibe) reported 32 minutes ago

  most devs think eBPF is "that networking thing cloudflare uses" it's this: you can run your own code inside the linux kernel, safely, with no module, no patch, no reboot, on a box that's serving traffic right now a verifier proves your program can't crash the kernel or loop forever. then it's JIT'd to native speed. that's the whole trick what eBPF actually buys you: - see every exec, every file open, every TCP connect on the host. no agent inside the app, no code change, no restart - read TLS traffic before it's encrypted. uprobe on SSL_write. plaintext requests out of a binary you don't own and can't rebuild - drop millions of packets/sec at the driver, before the kernel allocates an sk_buff. that's XDP. that's how DDoS mitigation works now - delete iptables. cilium does k8s service routing in BPF hash maps instead of walking a linear rule chain that grows with your cluster - continuous profiling of every process on the box, every language, zero instrumentation, single-digit percent overhead. parca, pyroscope - block the syscall, not the alert. tetragon and falco don't just detect, they can kill the process at the hook - swap the CPU scheduler at runtime. sched_ext landed in 6.12. valve wrote one for the steam deck the mental model: your kernel now has event listeners. syscalls, kernel functions, packets, cgroups. attach, filter, aggregate into a map, read from userspace the part nobody puts on the landing page: the verifier will reject perfectly correct code and hand you a 400-line register state dump as the explanation. it's like arguing with a compiler that has decided it hates you personally worth it anyway. observability stops being a thing you build into your app and becomes a thing you point at it what's the most cursed thing you've done with it?

• 
  Bilal Bakr (@bil0090) reported 34 minutes ago

  @maxktz @cursor_ai I think CloudFlare is/was down which is causing some problems

• 
  Marusu (@mrusu_) reported 39 minutes ago

  The Cutting Room Floor is likely going to stay down until X realizes why it is down in the first place. His own ego is the only reason the site does not use Cloudflare. I would not underestimate bad actors and the lengths they will go to to keep the site down.

• 
  ohnwow (@kxmcs) reported 40 minutes ago

  @dump_tcp @Cloudflare Again the argument was never “Golang cannot handle high request outputs” I run multiple companies running on rust and golang, rust is just the superior choice, that is a fact.

• 
  Liverpool Don (@ThNorthernKing) reported 42 minutes ago

  @Cloudflare This is awesome. I once resolved a lookup and made it faster after transferring the read service to use Rust. Rust needs to be respected outer here

• 
  zeaaaNFT 🐸⚔️ (@raze35010) reported 42 minutes ago

  @RomixUS @kick Method 1 Hard Refresh Press the key combination Ctrl + F5 (or Ctrl + Shift + R) on your keyboard while the browser is open to force it to re-download all web elements without using the old cache. Method 2 Change DNS (If Blocked by Internet Service Provider) Some ISPs block specific CDN domains used by streaming sites. Open your browser settings (e.g., Opera/Chrome). Look for the DNS or "Use Secure DNS" option. Switch to Cloudflare (1.1.1.1).

• 
  tcpdump (@dump_tcp) reported 43 minutes ago

  @djsmith42 @Cloudflare yes but i only used dns as a hash tag didn't use dns in my argument. I was talking about tcp traffic connections for like there network with webtraffic for there cdn

• 
  GP Q (@argosaki) reported 44 minutes ago

  🤖 OpenAI and 127 Organizations Warn AI Cyberattacks Are Scaling Fast OpenAI, Anthropic, Google, Microsoft, AWS, Cisco, Cloudflare, CrowdStrike, Visa, Mastercard and dozens of other organizations signed an open letter calling for urgent cyber defense upgrades. ⚫ The warning: AI-powered attacks could become more widespread and more complex in the coming months ⚫ Critical services are at risk, including hospitals, water systems and internet infrastructure ⚫ The letter says current defenses are not enough because of old vulnerabilities, weak access controls, poor patching and technical debt ⚫ Signatories want defenders to get broader access to AI tools, shared fixes, threat data and practical support ⚫ AI model developers are also being asked to fund, train and support under-resourced critical infrastructure teams The bigger signal: AI is now changing both sides of cybersecurity. Attackers get faster, but defenders need the same tools before the gap becomes impossible to close. ⚡ECONOMY NEWS⚡

• 
  Ironic Ape (@Ironic_Ape) reported 45 minutes ago

  @anthonyiseman @StockMarketNerd Short term fine - long term debatable. I'll Never buy another CRM licence ever again - I suspect no other founder will either, large enterprise will double down thinking it can help them become "ai" - The markets react quickly, often too quick.... but answer me this... when I can build a CRM in an afternoon.. (and I have, several times)... why would I pay for it ? Compliance, Security, Infastructure.... I already have all of those with Cloudflare or Google... I'm already paying for it... why would I pay twice.. what you're seeing is the ApplePay launch for PayPal...CD's replacing tapes, Digital camera's replacing film.... change takes time... those that adapt will be fine.. those that dont, die. thats just the nature of the S curve of business. Be under no illusion, Ai is and will change EVERYTHING!

• 
  Glen Allsopp 👾 (@ViperChill) reported 48 minutes ago

  The Detailed newsletter got 100+ questionable signups today the space of an hour. Many got past reCAPTCHA and double opt-in, but AI saved the day. For context, I was using Kit's HTML form embeds, rather than JS. These sign-ups were happening without having to visit the site. Just replacing the form would potentially have the same issue so I created a new form, hid the URL behind a Cloudflare Workers endpoint, then applied rules to block the questionable emails based on their obvious pattern. No questionable signups since. Would have spent my entire day on something like this in the past. To clarify, this is not a criticism of Kit. This is partly my fault for having the form action URL visible (have not had an issue for years). The Kit API is part of what made this fix possible. Big fan of @nathanbarry and what he has built.

• 
  tcpdump (@dump_tcp) reported 49 minutes ago

  @kxmcs @Cloudflare Never ran into that big of a ram issue so I guess we will see one day i also many people are using golang around me i never see anyone using rust for anything

• 
  Julian Goldie SEO (@JulianGoldieSEO) reported 50 minutes ago

  Hermes Agent just added 44 one click app connections. Cloudflare, GitLab, Datadog, Metabase, Railway, Deep Wiki, and a pile more. Before, you hunted down the server, read the docs, and hand edited a config file. One typo and nothing worked. Now you open the catalog, hit enter on the app you want, and it asks for the key or opens your browser to log in. But here's the setting nobody mentions. Every app you connect ships its whole instruction list to your model on every single turn. Cloudflare alone exposes about 3,300 tools. Just the names eat 32,000 tokens. So people switch on 20 apps and then wonder why their agent got slow and forgetful. The fix is called tool search. It swaps all those instructions for 3 tiny helpers. One finds the tool, one loads it, one runs it. Your agent only pulls what it needs, when it needs it. That's why you can add 44 connections and not wreck your setup. Turn that on first. Then connect everything. Want the SOP? DM me. 💬

• 
  KZZY (@kzzy47) reported 50 minutes ago

  @borrhensaidi A DDoS big enough to take the whole service down instead of degrading it usually means there was no mitigation layer in front yet. Is Cloudflare or similar going in front of it once you're back up?

• 
  Wind (@productdevbook) reported 52 minutes ago

  I want to build an entire project on Cloudflare, but this is the only obstacle. I hope I can figure this out because domain providers that don’t support root CNAME records require an IP address.

• 
  Alex Sofroniev (@alexsofroniev) reported 1 hour ago

  Damn, now this what you call memory and performance optimiziation. Another reason why Cloudflare is the GOAT

• 
  Alex North Rule (@alexnorthrule) reported 1 hour ago

  @Cloudflare You need to provide these new users with a reason to make a regular return to the directory, like a habbit tracker or a game, or a regular set of problems that need solutions for, or a competition.