Announcing Cloudflare Secrets Store

Announcing Cloudflare Secrets Store
Announcing Cloudflare Secrets Store

We’re excited to announce Secrets Store - Cloudflare’s new secrets management offering!

A secrets store does exactly what the name implies - it stores secrets. Secrets are variables that are used by developers that contain sensitive information - information that only authorized users and systems should have access to.

If you’re building an application, there are various types of secrets that you need to manage. Every system should be designed to have identity & authentication data that verifies some form of identity in order to grant access to a system or application. One example of this is API tokens for making read and write requests to a database. Failure to store these tokens securely could lead to unauthorized access of information - intentional or accidental.

The stakes with secret’s management are high. Every gap in the storage of these values has potential to lead to a data leak or compromise. A security administrator’s worst nightmare.

Developers are primarily focused on creating applications, they want to build quickly, they want their system to be performant, and they want it to scale. For them, secrets management is about ease of use, performance, and reliability. On the other hand, security administrators are tasked Continue reading

Using LangChainJS and Cloudflare Workers together

Using LangChainJS and Cloudflare Workers together
Using LangChainJS and Cloudflare Workers together

We are incredibly stoked that our friends at LangChain have announced LangChainJS Support for Multiple JavaScript Environments (including Cloudflare Workers). During Developer Week 2023 we wanted to celebrate this launch and our future collaborations with LangChain.

“Our goal for LangChain is to empower developers around the world to build with AI. We want LangChain to work wherever developers are building, and to spark their creativity to build new and innovative applications. With this new launch, we can't wait to see what developers build with LangChainJS and Cloudflare Workers. And we're excited to put more of Cloudflare's developer tools in the hands of our community in the coming months.” - Harrison Chase, Co-Founder and CEO, LangChain

In this post, we’ll share why we’re so excited about LangChain and walk you through how to build your first LangChainJS + Cloudflare Workers application.

For the uninitiated, LangChain is a framework for building applications powered by large language models (LLMs). It not only lets you fairly seamlessly switch between different LLMs, but also gives you the ability to chain prompts together. This allows you to build more sophisticated applications across multiple LLMs, something that would be way more complicated without the help Continue reading

How to secure Generative AI applications

How to secure Generative AI applications
How to secure Generative AI applications

I remember when the first iPhone was announced in 2007. This was NOT an iPhone as we think of one today. It had warts. A lot of warts. It couldn’t do MMS for example. But I remember the possibility it brought to mind. No product before had seemed like anything more than a product. The iPhone, or more the potential that the iPhone hinted at, had an actual impact on me. It changed my thinking about what could be.

In the years since no other product came close to matching that level of awe and wonder. That changed in March of this year. The release of GPT-4 had the same impact I remember from the iPhone launch. It’s still early, but it's opened the imagination, and fears, of millions of developers in a way I haven’t seen since that iPhone announcement.

That excitement has led to an explosion of development and hundreds of new tools broadly grouped into a category we call generative AI. Generative AI systems create content mimicking a particular style. New images that look like Banksy or lyrics that sound like Taylor Swift. All of these Generative AI tools, whether built on top of GPT-4 or something Continue reading

Building Cloudflare on Cloudflare

Building Cloudflare on Cloudflare
Building Cloudflare on Cloudflare

Cloudflare’s website, application security and performance products handle upwards of 46 million HTTP requests per second, every second. These products were originally built as a set of native Linux services, but we’re increasingly building parts of the system using our Cloudflare Workers developer platform to make these products faster, more robust, and easier to develop. This blog post digs into how and why we’re doing this.

System architecture

Our architecture can best be thought of as a chain of proxies, each communicating over HTTP. At first, these proxies were all implemented based on NGINX and Lua, but in recent years many of them have been replaced - often by new services built in Rust, such as Pingora.

The proxies each have distinct purposes - some obvious, some less so. One which we’ll be discussing in more detail is the FL service, which performs “Front Line” processing of requests, applying customer configuration to decide how to handle and route the request.

Building Cloudflare on Cloudflare

This architecture has worked well for more than a decade. It allows parts of the system to be developed and deployed independently, parts of the system to be scaled independently, and traffic to be routed to different nodes in Continue reading

How Cloudflare is powering the next generation of platforms with Workers

How Cloudflare is powering the next generation of platforms with Workers
How Cloudflare is powering the next generation of platforms with Workers

We launched Workers for Platforms, our Workers offering for SaaS businesses, almost exactly one year ago to the date! We’ve seen a wide array of customers using Workers for Platforms – from e-commerce to CMS, low-code/no-code platforms and also a new wave of AI businesses running tailored inference models for their end customers!

Let’s take a look back and recap why we built Workers for Platforms, show you some of the most interesting problems our customers have been solving and share new features that are now available!

What is Workers for Platforms?

SaaS businesses are all too familiar with the never ending need to keep up with their users' feature requests. Thinking back, the introduction of Workers at Cloudflare was to solve this very pain point. Workers gave our customers the power to program our network to meet their specific requirements!

Need to implement complex load balancing across many origins? Write a Worker. Want a custom set of WAF rules for each region your business operates in? Go crazy, write a Worker.

We heard the same themes coming up with our customers – which is why we partnered with early customers to build Workers for Platforms. We worked with the Continue reading

AWS to invest $12.7B to expand its cloud infrastructure in India by 2030

Amazon Web Services (AWS) on Thursday said it is committing $12.7 billion to expand its cloud infrastructure in India by 2030 in order to meet growing customer demand for its cloud services.“Today we’re announcing an additional planned investment of $12.7 billion for cloud infrastructure in India. That will bring our total investment to $16.4 billion by 2030 — boosting the country’s GDP, supporting tens of thousands of jobs, and continuing to help customers innovate,” AWS CEO Adam Selipsky said in a tweet.The new investment, according to the company, is expected to add $23.3 billion to the country’s GDP by 2030, generating 131,700 jobs annually for the next seven years.To read this article in full, please click here

AWS to invest $12.7B to expand its cloud infrastructure in India by 2030

Amazon Web Services (AWS) on Thursday said it is committing $12.7 billion to expand its cloud infrastructure in India by 2030 in order to meet growing customer demand for its cloud services.“Today we’re announcing an additional planned investment of $12.7 billion for cloud infrastructure in India. That will bring our total investment to $16.4 billion by 2030 — boosting the country’s GDP, supporting tens of thousands of jobs, and continuing to help customers innovate,” AWS CEO Adam Selipsky said in a tweet.The new investment, according to the company, is expected to add $23.3 billion to the country’s GDP by 2030, generating 131,700 jobs annually for the next seven years.To read this article in full, please click here

AWS to invest $12.7B to expand its cloud infra in India by 2030

Amazon Web Services (AWS) on Thursday said it is committing $12.7 billion to expand its cloud infrastructure in India by 2030 in order to meet growing customer demand for its cloud services.“Today we’re announcing an additional planned investment of $12.7 billion for cloud infrastructure in India. That will bring our total investment to $16.4 billion by 2030 — boosting the country’s GDP, supporting tens of thousands of jobs, and continuing to help customers innovate,” AWS CEO Adam Selipsky said in a tweet.The new investment, according to the company, is expected to add $23.3 billion to the country’s GDP by 2030, generating 131,700 jobs annually for the next seven years.To read this article in full, please click here

AWS to invest $12.7B to expand its cloud infra in India by 2030

Amazon Web Services (AWS) on Thursday said it is committing $12.7 billion to expand its cloud infrastructure in India by 2030 in order to meet growing customer demand for its cloud services.“Today we’re announcing an additional planned investment of $12.7 billion for cloud infrastructure in India. That will bring our total investment to $16.4 billion by 2030 — boosting the country’s GDP, supporting tens of thousands of jobs, and continuing to help customers innovate,” AWS CEO Adam Selipsky said in a tweet.The new investment, according to the company, is expected to add $23.3 billion to the country’s GDP by 2030, generating 131,700 jobs annually for the next seven years.To read this article in full, please click here

Learn about Edge Automation at Red Hat Summit and AnsibleFest 2023

Learn about Edge Automation at Red Hat Summit and AnsibleFest 2023

As you may have heard, AnsibleFest will be taking place at Red Hat Summit in Boston May 23-25. This change will allow you to harness everything that Red Hat technology has to offer in a single place and will give you even more tools to address your automation needs. Join Ansible and automation-focused audiences to hear from Red Hat and Ansible leaders, customers, and partners while getting the latest on the Red Hat Ansible Automation Platform product roadmap, community projects, and what's coming in IT automation.

Across every industry, automation at the edge is enabling emerging use cases by helping organizations drive the next wave of innovation as they explore and execute digital transformation initiatives. Organizations are looking to extend a consistent automation experience across cloud, datacenter, and edge with the ability to scale in heterogeneous environments. Red Hat Ansible provides a common platform where organizations can build, run, and manage the entirety of their highly distributed systems, even to remote locations where network connectivity may be intermittent.

Because we understand how important edge automation is to teams looking to automate their entire IT landscape with a single platform, Continue reading

Juniper MISTifies ChatGPT, Zoom and NAC security service

Juniper Networks is looking to simplify the control of enterprise networks by expanding the AI-driven conversational interface of its cloud-based Mist management system and adding a new security access control service.Juniper is integrating the ChatGPT AI-based large language model (LLM) with Mist’s virtual network assistant, Marvis. Marvis can detect and describe myriad network problems, including persistently failing wired or wireless clients, bad cables, access-point coverage holes, problematic WAN links, and insufficient radio-frequency capacity. To read this article in full, please click here

Day Two Cloud 195: Planning For Post-Quantum Cryptography

Today's Day Two Cloud explores post-quantum cryptography and how to make your cryptographic secrets safe from quantum computers. We're looking at a time horizon of at least five or ten years, so this isn't an immediate threat, but it doesn't hurt to start thinking about it now. We dive into how quantum computing and quantum encryption work, their impact on cryptographic secrets, what it means for technologies such as IPSec VPNs, and more. Melchior Aelmans is our guest.

Day Two Cloud 195: Planning For Post-Quantum Cryptography

Today's Day Two Cloud explores post-quantum cryptography and how to make your cryptographic secrets safe from quantum computers. We're looking at a time horizon of at least five or ten years, so this isn't an immediate threat, but it doesn't hurt to start thinking about it now. We dive into how quantum computing and quantum encryption work, their impact on cryptographic secrets, what it means for technologies such as IPSec VPNs, and more. Melchior Aelmans is our guest.

The post Day Two Cloud 195: Planning For Post-Quantum Cryptography appeared first on Packet Pushers.

Kubernetes network security foundations: Get started on building your Kubernetes network security policies with Calico!

The adoption of cloud native applications has become a necessity for organizations to run their businesses efficiently. As per Gartner, more than 85% of organizations will embrace a cloud-first principle by 2025, which will rely on adopting cloud native applications for complete execution. The massive increase in adoption of cloud native applications has given  rise to more security challenges such as container image vulnerabilities, configuration errors and a larger runtime attack surface. Kubernetes has become the de facto standard platform to host and run cloud native applications. However, as Kubernetes adoption gains momentum, so does the security risk associated with business-critical applications that communicate with multiple external and internal systems. Kubernetes network security is a critical aspect of securing cloud native applications and the Kubernetes platform itself. This multi-part blog series aims to explore the network security challenges of the Kubernetes environment and provide insights into mitigating them using Calico security controls. The series will cover various aspects of network security, including security policies, application layer security, host network security,  Pod traffic encryption, and the importance of a defense-in-depth security approach. Let’s dive into the world of Kubernetes network security and learn how to protect your organization’s valuable assets.

Continue reading

Startup NEO Semiconductor promises 8x increase in memory density

System memory is a complex problem. More memory means more performance, especially in a virtualized environment. But more memory also requires more power, and that can add up as you start to get into thousands of memory sticks.Plus, you can only put so many memory sticks in a server, depending on the number of slots available. So how do you increase memory capacity? By increasing memory density on the chips, which is easier said than done. However, a startup called NEO Semiconductor is claiming it will be able to increase memory density by up to eight times over standard memory with a breakthrough 3D design.It’s not a new concept; 3D memory stacking has been used in NAND flash to increase capacity for a decade now. Memory transistors can only be so large to fit in the confines of a DRAM chip. Rather than an increase the number of transistors laid out side by side, memory makers began stacking it on top of each other, thus increasing capacity in the same physical space. In the 10 years since 3D stacking began, NAND flash DRAM has reached the 170-layer mark, and SSDs have seen a significant increase in capacity without Continue reading

Startup NEO Semiconductor promises 8x increase in memory density

System memory is a complex problem. More memory means more performance, especially in a virtualized environment. But more memory also requires more power, and that can add up as you start to get into thousands of memory sticks.Plus, you can only put so many memory sticks in a server, depending on the number of slots available. So how do you increase memory capacity? By increasing memory density on the chips, which is easier said than done. However, a startup called NEO Semiconductor is claiming it will be able to increase memory density by up to eight times over standard memory with a breakthrough 3D design.It’s not a new concept; 3D memory stacking has been used in NAND flash to increase capacity for a decade now. Memory transistors can only be so large to fit in the confines of a DRAM chip. Rather than an increase the number of transistors laid out side by side, memory makers began stacking it on top of each other, thus increasing capacity in the same physical space. In the 10 years since 3D stacking began, NAND flash DRAM has reached the 170-layer mark, and SSDs have seen a significant increase in capacity without Continue reading