Cloudflare Outage Map

Community Discussion

Tips? Frustrations? Share them here. Useful comments include a description of the problem, city and postal code.

Beware of "support numbers" or "recovery" accounts that might be posted below. Make sure to report and downvote those comments. Avoid posting your personal information.

Cloudflare Issues Reports

Latest outage, problems and issue reports in social media:

• 
  TECHEPAGES (@techepages) reported 5 minutes ago

  A newly disclosed HTTP/2 vulnerability enables unauthenticated denial-of-service attacks through memory exhaustion. By manipulating flow-control parameters attackers can force servers to buffer complete responses in memory indefinitely, leading to out-of-memory conditions. CVEs assigned: CVE-2026-44909, CVE-2026-59173, CVE-2026-59762 Affected vendors: Apache Traffic Server, Citrix, F5 Networks, Meta, Red Hat, SUSE, Yahoo Confirmed unaffected: Cloudflare, AMD Organizations running HTTP/2 services are advised to review vendor advisories and apply patches promptly.

• 
  Lunch Money Bro! (@LunchMoneyBro) reported 6 minutes ago

  @scanmidgard is your website still up? Giving me cloudflare 502 errors

• 
  Dr. Gonzo (@N3DrGonzo) reported 7 minutes ago

  @AnisDrawn PSN goes down more often than CloudFlare. And CloudFlare has an outage QUOTA. But yes, please tell me how an all digital ecosystem for a console is a good thing.

• 
  VICTOR (@victoris_x) reported 9 minutes ago

  @TheRealAdamG I tried it with Crunchyroll but Cloudflare verification stopped me from login.

• 
  Ara T. Howard (@drawohara) reported 15 minutes ago

  today, with the help of 3 agents, I managed to create a cloudflare API token JFC

• 
  Jason · The Orbital Forge🧬🤖 (@occupymars___) reported 19 minutes ago

  @JoeWinton @XFreeze Already working towards that my Os linux is almost an AI node with no desktop only a dashboard scroll my network access is anywhere phone tablet p.c using cloudflare it works

• 
  Harman (@itsharmanjot) reported 20 minutes ago

  Most developers scan file extensions and call it security. Attackers don’t care what your file extension check says. There’s an open-source tool that actually scans the bytes before a file ever touches your disk. It’s called pompelmi. A TypeScript toolkit for Node.js that scans uploads in-process, MIME spoofing, ZIP bombs, nested archives, polyglot files, before storage, before your CDN spreads it, before it becomes someone else’s problem. → Scans in-process with zero outbound network calls, bytes never leave your server, no cloud API, no daemon required → Deep ZIP inspection catches nesting depth, file count, and archive traversal tricks that simple extension checks miss entirely → Optional ClamAV antivirus integration plus optional YARA rule support, for teams that want signature-based detection layered on top → Drop-in adapters for Express, Fastify, Koa, NestJS, and Next.js, plus support for Bun, Deno, and Cloudflare Workers → Built-in security scorecard grades your actual upload configuration A through F, so you know your real exposure, not just whether the tool is installed → Quarantine mode auto-moves flagged files with a sidecar JSON report, so a suspicious upload gets isolated automatically instead of silently landing in your storage bucket Any app that accepts user uploads is dealing with a real attack surface most teams treat as an afterthought. pompelmi’s whole design is catching the risk at the entry point, not after the file’s already spread across your systems. 337 GitHub stars.

• 
  Konstantinos (@kostasbotonakis) reported 20 minutes ago

  Cloudflare support: Health checks, checking a static page on Cloudflare Pages show plenty of outages. It’s been now 2 weeks

• 
  Grant Mucha (@grantmucha) reported 24 minutes ago

  Ordering $50,000 in server hardware today and reflecting on a post I read earlier that asked, "Why is it so difficult to build a genuinely good X, Y, or Z, and why do so many products remain 'good enough' for half a decade without ever becoming great?" The answer, in most cases, is not capability. It is priorities. One company pushes X, another pushes Y, and another pushes Z, all because each benefits the seller. I see **** like this every day, it's not what's best for the owner, but rather what's best for the seller. In my experience, greed and ego explain a large percentage of mediocre products and services. Companies CAN build something better, take starlink, starship, building quality is a decision. Most prioritize profit first, investors second, and customers last. Take hosting. I do not need to: > Invest in quality servers > Pay 40k per month for Cloudflare Enterprise > License LiteSpeed Enterprise > Include real WordPress management > Promise zero technical debt > Maintain 90 days of redundant backups I could operate with a fraction of that investment and significantly increase my companies profit. I choose not to because I know exactly how this industry operates. I know companies still running production servers from 2013 on outdated kernels. Can they upgrade? Absolutely. Will they? No. Most people are not aware that Cloudflare Enterprise is modular. Contracts are assembled like Lego blocks. One company may technically offer "Cloudflare Enterprise" with a single component, another may have a handful, and others may have more than 100 enterprise features and configurations enabled. All of them advertise the same label, yet they are not remotely the same product. Now consider the customer's side. Within 48 hours, I can move a business owner into what is effectively a top 1% WordPress hosting environment, complete with real WordPress management, for $1,490 per year or about $124 per month. Consider for a moment that some companies charge $200/mo or more for WordPress management alone, and let that sink in for a minute. No technical burden. No infrastructure management. All existing technical debt resolved. Full WordPress management. No worrying about backups, performance, security, updates. etc. Owners focus on business, and for $124/mo, this is a joke to the vast majority making money, every day, 365 days a year. Circling back to mindset, I believe the people who fail to see it are often operating from the same greed-and-ego framework. They have to sell X, so they recommend it to everyone relentlessly, whether it's right or not. And the why is simple! It comes down to what you choose to prioritize, the decisions you make, and whether you are willing to put quality ahead of profit. More importantly, it is whether you are willing to put the customer ahead of yourself and your business, and prioritize a genuine win-win relationship. At which point, I believe there is no limit in business.

• 
  Kyle Mistele 🏴‍☠️ (@0xblacklight) reported 24 minutes ago

  @QuinnyPig @awscloud why does lambda still not support handling a single long-lived websocket connection like cloudflare workers do

• 
  Anurag Bhatia (@anurag_bhatia) reported 27 minutes ago

  @nileshgr @Cloudflare Google / Facebook / Cloudflare CDNs are not impacted by the EDNS issue. Likely your issue would be something else alongside of Akamai issue.

• 
  Volt ✚.🏳️‍🌈 (@voltreaver) reported 27 minutes ago

  it feels like adolf hitler made cloudflare warp to be the most unusable **** ever why does it keep disconnecting randomly

• 
  Dr. Xi Zeng (@xiz25) reported 31 minutes ago

  @dhh @Cloudflare Putting speedtest and DNS choice in the same panel is the detail: diagnosis and action live together. Most network UIs show status, then make users hunt elsewhere for control. Which metric actually changed your behavior after using it?

• 
  Jonas Templestein (@jonas) reported 31 minutes ago

  @thdxr (Not a serious application) Alchemy is v good but unfortunately cloudflare is investing heavily in wrangler for local dev and it sucks not being able to run apps locally So we made a little script that takes env config and secrets in and produces wrangler files and wrangler commands It works quite well for us now - but it does feel like we are building half of IaC because we need to sequence resource creation and tear down and deal with flaky control plane APIs etc

• 
  Toolport (@toolportapp) reported 32 minutes ago

  Cloudflare's CTO, Dane Knecht, emailed their entire customer list about running every AI agent through MCP portals, with scoped tool access and a Code Mode they say cuts token costs ~93%. We build Toolport. This is our exact category. A few notes from the small end of the pond. 1. The announcement is two products wearing one trenchcoat. AI Gateway is a model-layer proxy. It routes your OpenAI/Anthropic calls and meters model spend, same lane as OpenRouter or LiteLLM. MCP portals are the tool layer, deciding which servers and tools each agent can touch. Different problems, different failure modes. If you're evaluating either one, don't let the bundle blur that line. 2. Their ~93% Code Mode number lands in the same range we've been measuring with lazy discovery for the past three months. Loading dozens of tool schemas into context on every request was always the wrong default. It's nice that it's no longer just indie gateway builders saying so. 3. The structural difference. Their portals require being a Cloudflare customer and routing agent traffic through their edge. Toolport runs on your own machine and works with Claude Desktop, Cursor, and 25 other clients, with no vendor in the traffic path. When the traffic is your prompts, your credentials, and your tool outputs, where it flows is not a detail. 4. Scoped access is becoming table stakes. The harder question is whether the tool you approved yesterday is the same tool running today. Toolport pins tool integrity, quarantines drift, and scans for injection. A DLP scan on the wire doesn't catch a server that changed underneath you. Watching a giant walk into your category is a strange feeling. It's also the strongest signal yet that this layer needs to exist. We just think it should live on your machine, not in someone else's cloud.