Serving the most critical missions: Cloudflare for Government achieves FedRAMP Class D (High) Certified status

We believe the Internet must be a force for good, and that it requires a foundation of trust. Nowhere is that trust more critical than in public service. Government agencies are the stewards of a nation’s most sensitive data. They protect national security, critical infrastructure, and the personal information of every citizen. 

Cloudflare’s mission is to help build a better Internet. A key part of that mission is giving public sector agencies the best technology to stay secure, fast, and reliable. That means meeting the highest possible standards.

Today, we are proud to announce a major milestone: Cloudflare for Government has achieved FedRAMP Class D (High) certification status. We are honored to take this step with our sponsoring agency, the National Institute of Standards and Technology, whose global mission demands the highest level of security.

We are also very excited to announce that we are using the new systems we developed for FedRAMP High as the foundation of our commitment to pursuing U.S. Department of Defense Impact Level 4 (DoD IL4) authorization. IL4 is the department’s cybersecurity standard for systems handling controlled, unclassified data. We are confident that bringing our global network to this space will change Continue reading

New Financial Tools Section (Retirement Planner Is the Big One)

I mentioned in the WordPress-to-Hugo migration post that this site was going to start drifting a bit toward retirement and financial planning content alongside the usual networking stuff. Here’s the first real piece of that: a new Financial Tools section, same browser-only, nothing-sent-to-a-server philosophy as the Network Tools I’ve been building for years.

Retirement & Social Security Planner

This is the one that actually matters. It’s a full retirement dashboard — portfolio projections, Social Security claiming strategy (including spousal/survivor benefits), RMDs, a Roth conversion planner, Medicare/IRMAA cost estimates, and a Monte Carlo simulation that runs a thousand random market paths against your numbers instead of just assuming a flat return every year. I’ve been building and using a private version of this for a while now; this is that tool, cleaned up for public use. Find it at fryguy.net/financial-tools/retirement-planner.

Retiring WordPress – How I Migrated fryguy.net to Hugo (With an AI Pair Programmer)

This site has run on WordPress since basically forever. As of this week, it doesn’t anymore. Everything you’re reading is now a static Hugo site, built from Markdown, served by nginx, with no PHP and no database anywhere in the stack. Here’s why I did it, what actually moved, and how I used Claude Code as a pair programmer for most of the heavy lifting.

Why bother

Let’s be honest about how it got this bad: I didn’t keep up with it. I know. Servers don’t rot on their own — you stop patching them, stop upgrading them, and a few years later you’re staring at a stack that’s aged out from under you. The old droplet had quietly rotted underneath a site that still worked fine. Ubuntu 18.04 — EOL since 2023. PHP 7.4 — EOL since 2022, with no apt-upgrade path to anything newer (the PPA I’d have needed was frozen). MySQL 5.7 — also EOL. WordPress itself was current; everything under it wasn’t, and there was no clean patching path left, just a slow accumulation of risk on a box facing the public internet.

Worth Reading 080826


Would you work differently if you knew every keystroke was being saved, every website logged, every idle minute counted against you?

 


Everything I read about the AI industry leads me to think there will be an AI crash.

 


I designed this to help with different BGP communities and configuring them on your routers.

 


It’s commonly believed that when selecting between a number of routes for the same address prefix, a BGP speaker will select the route with the shortest AS Path.

 


There is an interesting fight within the leadership of U.S. AI companies. It is between the supporters of open-source AI and those driven to oppose open-source AI.

HN837: Agentic AI to Reduce MTTR

Ethan Banks sits down with Eduard Dulharu live at AutoCon 5 to explore how agentic AI can be used to reduce Mean Time to Recovery (MTTR) for complex network environments. Eduard breaks down how these AI agents leverage deterministic workflows and custom fine-tuned models to analyze telemetry and propose solutions. Through the use of agentic... Read more »

Hedge 315: Engineering Psychology

We often talk about “human infrastructure” in network engineering–but what does this mean, and how do we help engineers “produce” while helping them to flourish as individuals? Catherine Hicks joins Tom and Russ to discuss the psychology of software engineering, and how the lessons learned apply to network engineering.

download

You can find Catherine’s new book on the psychology of software engineering here.
If you would like to follow Catherine’s writing in this area, including the impact of AI on work, you can find her blog here.
You can connect with Catherine on LinkedIn.

Unveiling good and bad behaviors on the Agentic Internet

The Internet isn’t a single lane of traffic. For a long time, the rule of thumb in web security was that bots are bad, while humans are good. Of course, we’re far past this generalization. Humans can be fraudulent, and bots can be helpful at different levels. Site owners actively want some automated traffic to interact with our sites to make the Internet functional and discoverable.

To complicate things further, the line between "human" and "bot" is blurring more and more. Now, we have a type of “hybrid” traffic where a single session shifts from human to agentic and back again. (Think of a user browsing a store, and then handing off the checkout process to an automated shopping assistant.)

So, how do website owners manage this kind of complexity? What matters here is assessing behaviors. Is this behavior abusive? Malicious? What’s the risk presented here, and can I trust this visitor based on their actions? Solving this requires moving beyond static, point-in-time checks. It requires analyzing continuous behaviors to evaluate Trust.

In this post, we’ll share an inside look into the strategy of the Web Integrity & Trust team (covering the bots and fraud problem spaces) around detecting Continue reading

Introducing Radar Researcher: An AI tool for exploring Internet data in plain language

Since launching in 2020, Cloudflare Radar has provided one-of-a-kind insight into Internet traffic on a global scale. The open data that Radar publishes from our global network is used by a variety of experts in different domains: human rights advocates, journalists, academic researchers, network operators, and more.

Today, as part of Agents Week, Radar is beta-launching a new tool: Radar Researcher. 

Now, if you want to answer a question with Radar’s data, you can just ask in plain language and get an answer back with real, interactive charts, all built on Cloudflare's developer platform. You no longer need to find the right page, choose the right filters, or read the API documentation to write a query. 

Why we built Radar Researcher

Over the past six years, the Radar team has worked to provide clear, accessible, reliable data visualizations of complex datasets. This is not without its challenges: our user base is vast and ranges from curious novices to technical network experts. Even so, we publish as much insight into the Internet as seen from our network as we can: DNS queries from our public resolver 1.1.1.1, HTTP traffic from across our global network, Continue reading

Announcing Cloudflare Ambassadors, Community Engineers, and another $1M in open-source funding

As a platform for helping build a better Internet, Cloudflare helps turn ideas into real products and experiences around the world. Across communities and backgrounds, developers build with Cloudflare using the tools they love, shaping what comes next for the Internet while inspiring, collaborating with, and teaching others.

The community is where some of Cloudflare’s best moments happen. Students show their friends how to deploy Workers for the first time. Discord users answer questions from other developers via working code samples, instead of links to documentation. Open-source contributors build novel solutions to solve their own problems, then share them with the world. Organizers host events that give builders from all backgrounds the space to start building their dream project.

All of these represent a community at its best: people helping other people build.

This spirit of community is an exciting and vital part of helping to build the Internet. Those who step up to educate and support others, or to invent, build, or maintain tools shared across the ecosystem, make lasting contributions to the health and potential of the Internet.

We want to have their backs.

That's why today we’re announcing an improved community program, designed to better support, recognize, Continue reading

Unifying Workers AI and AI Gateway into a single AI control plane

AI Gateway and Workers AI first started as distinct products, but over time, we noticed our users were converging. With AI Gateway, you can proxy requests to any model provider and get built-in observability, logging, access, and security. On Workers AI, we host models on the GPU infrastructure that we manage, exposing an API endpoint you can leverage to access inference-as-a-service. 

The architecture of these products looks different, but to an end user, it achieves the same goal: connecting you to models with a sophisticated control plane. Today, we're excited to share our plans on how these products converge into one unified path, so you can connect to any model provider (including Workers AI), while managing things like observability, billing, security, and logging from a single control plane.

It’s the next step toward some big plans we have — read on to learn what a unified control plane means for the future of model routing.

Merging the binding and API

We've been hinting at the fact that these products are becoming more unified through our entrypoints: the Workers binding and the REST API. We have an AI binding that you can use to call AI Gateway and Workers AI. Continue reading

SONiC Deep Dive: Configuring VLAN 10 from CLI to ASIC

 

Introduction

In this chapter, we examine what happens under the hood when we configure a Layer-2 VLAN on a SONiC switch, enable two host-facing interfaces, and associate them with the previously created VLAN as untagged access ports. Figure 5-1 illustrates the conceptual configuration in which Host-1 and Host-2 are connected to interfaces Eth1/1 and Eth1/2, respectively. Both interfaces are members of VLAN 10, which at this stage functions as a Layer-2 broadcast domain. The host-facing interfaces are single-lane 25-Gigabit Ethernet interfaces.

 

We begin by creating VLAN 10 and examining the complete SONiC processing sequence, from the user's VLAN configuration to ASIC programming. Next, we study what happens when the interfaces are enabled and associated with VLAN 10. Finally, we verify that Host-1 and Host-2 have IP connectivity through Leaf-1. Although this is a very basic configuration example, many SONiC components participate in the process. The database examples presented in this chapter are taken from the lab environment. The communication between processes is explained at a conceptual level because the focus is on SONiC operation rather than the underlying Linux communication mechanisms.




Figure 5-1: Host Connectivity.

Step 1: Configure Vlan 10

 

Figure 5-2 depicts the conceptual sequence of Continue reading

Mengenal Alvinocaris Alexandri: Udang Vent Unik di Laut Dalam

Udang vent Alvinocaris alexandri merupakan salah satu makhluk laut yang menarik perhatian para ilmuwan dan pecinta biologi kelautan saat ini. Ditemukan di habitat unik yaitu sekitar ventilasi hidrotermal di dasar laut, spesies ini memiliki peranan penting dalam ekosistem ekstrem yang sulit ditembus oleh mahluk lain. Dalam artikel ini, kita akan membahas berbagai aspek mengenai Alvinocaris alexandri mulai dari morfologi, habitat, perilaku, hingga perannya dalam ekologi dasar laut berdasarkan data dan penelitian periode terbaru.

Apa itu Alvinocaris Alexandri?

Fokus pada alvinocaris alexandri tidak terlepas dari keistimewaan habitatnya dan adaptasi biologis yang dimiliki. Udang ini merupakan salah satu jenis krustasea yang hidup di lingkungan dengan suhu sangat tinggi dan kondisi kimia yang ekstrem. Nama “alvinocaris” sendiri berasal dari kapal penelitian Alvin yang digunakan untuk menjelajahi dasar laut dan menemukan berbagai jenis makhluk laut baru, termasuk udang vent ini.

Alvinocaris alexandri mampu bertahan pada tekanan dasar laut yang sangat tinggi dan kandungan gas beracun yang tinggi di sekitar ventilasi hidrotermal, merupakan contoh sempurna dari bagaimana kehidupan laut dapat beradaptasi bahkan dengan kondisi yang paling ekstrem sekalipun.

Morfologi dan Ciri Khusus Alvinocaris Alexandri

Sebagai udang vent, alvinocaris alexandri memiliki bentuk tubuh yang relatif kecil, biasanya berukuran beberapa sentimeter hingga puluhan sentimeter saja. Morfologi tubuhnya Continue reading

Misteri Fenomena Bannock Evaporite Wall di Bannock Basin

Fenomena alam yang jarang dan menarik terus memikat perhatian para ilmuwan dan peneliti, salah satunya adalah bannock evaporite wall yang eksis di wilayah Bannock Basin. Hingga saat ini, fenomena ini masih menjadi salah satu topik penelitian yang mendalam karena kompleksitas pembentukannya dan pengaruhnya terhadap ekosistem serta aktivitas manusia di sekitarnya. Artikel ini akan membahas lebih lengkap tentang misteri di balik Bannock Basin Brine Evaporite Wall, perkembangan penelitian terkini, serta relevansi fenomena ini dalam konteks geologi dan lingkungan saat ini.

Pendahuluan: Apa Itu Bannock Evaporite Wall?

Bannock evaporite wall merupakan dinding endapan evaporit yang terbentuk dari proses penguapan air asin (brine) yang sangat pekat di cekungan (basin) yang dikenal sebagai Bannock Basin. Evaporit sendiri adalah mineral yang terbentuk akibat penguapan air dengan konsentrasi garam tinggi, menghasilkan endapan seperti garam, kalsit, halit, dan mineral lainnya. Bannock Basin menjadi sangat penting karena fenomena ini terlihat secara mencolok serta memiliki karakteristik unik dibandingkan evaporite wall di lokasi lain.

Fenomena bannock evaporite wall ini menarik banyak peneliti karena tidak hanya terkait dengan proses kimia dan fisika dalam pembentukan mineral, tetapi juga melibatkan faktor geologi tektonik dan hidrogeologi yang kompleks. Hingga saat ini, penemuan lapisan-lapisan baru dari dinding ini terus memberikan wawasan baru tentang kondisi geokimia Continue reading

The New MCP Headers Are a Gift to Gateways

In short, buried in the transport section of the MCP 2026-07-28 release candidate are three changes that matter more to infrastructure teams than to anyone else: mandatory Mcp-Method and Mcp-Name headers, cache-control-style ttlMs and cacheScope fields, and standardized W3C Trace Context propagation. Together with the stateless core, they turn MCP from a protocol that gateways had to fight into one that meets them halfway. What the headers still don’t carry: who the caller is, whether the call should be allowed, and any record that it happened.

Everyone is writing about MCP going stateless, and the coverage is deserved. No handshake, no session ID, any request can hit any server replica, round-robin load balancing just works. If you want the deep dive on what that does to protocol state, my colleague Peter is writing one.

I want to talk about the part of the release candidate that made me sit up, because I spend my days around a gateway that authorizes agent traffic. It’s three transport changes, a few paragraphs in the announcement, and it fixes a problem every MCP-aware proxy has been engineering around since Streamable HTTP shipped in the 2025-03-26 revision.

The problem: MCP was opaque at the network Continue reading

IPB205: Moving to Disable IPv4

Franck Martin returns to the show to discuss the practical challenges of retiring IPv4 with hosts Ed, Nick, and Tom. Together they break down key strategies, how to work effectively with vendors, and how to mitigate potential outages during the transition. They also explore the cultural shifts necessary for successful IPv6 adoption and the importance... Read more »
1 … 17 18 19 20 21 … 3,914