Open Source Software & Community Contributions

1/16/2026

This post announces Cloudflare's acquisition of the Astro Technology Company, creators of the Astro web framework. Cloudflare commits to keeping Astro open source, MIT-licensed, and open to contributions, and will continue to support the Astro Ecosystem Fund. The acquisition signifies a deepening of Cloudflare's commitment to open source and highlights Astro's role as a foundational framework for content-driven websites, often deployed on Cloudflare's platform. The post also details upcoming features in Astro 6, including a new Vite-powered development server that leverages Cloudflare Workers runtime, and the stabilization of Live Content Collections.

3/24/2025

This post details Cloudflare's contribution of a URLPattern API implementation to Node.js, leveraging their high-performance Ada URL parser. This effort aims to standardize URL pattern matching across JavaScript runtimes like Node.js and Cloudflare Workers, reinforcing Cloudflare's commitment to open-source contributions and web interoperability. The post also highlights the importance of the URLPattern API for routing and its inclusion in the WinterTC Minimum Common API.

1/8/2025

This post details a significant evolution in Cloudflare's open source engagement by treating developer documentation as an open source product. It describes the migration of the documentation site's framework from Hugo to Astro and Starlight, highlighting the benefits of enhanced content organization, extensibility, improved development experience, and better JavaScript/TypeScript support. The post also details the technical migration process using Abstract Syntax Trees (ASTs) and quantifies the effort, emphasizing the success of the migration with community MVP involvement and no downtime.

9/27/2024

Introduced Project Alexandria, an expanded and streamlined open source program offering recurring annual credits and tailored product upgrades (Pro, Business, Enterprise plans, Workers, Pages, R2, Zero Trust) to open source projects. Detailed specific use cases and benefits for OpenJS Foundation (Node.js CDN Worker), OpenTofu (R2 for registry), and JuliaLang (R2 for package delivery), highlighting technical implementations and cost savings.

2/29/2024

This post details Cloudflare's contribution to the open-source polyfill.io project by providing an alternative endpoint on cdnjs. This initiative addresses supply chain risks associated with the original polyfill.io domain by leveraging Cloudflare's infrastructure and reputation. Furthermore, Cloudflare has forked polyfill.io to run on Cloudflare Workers, utilizing Rust and D1 for storage, showcasing their commitment to supporting and enhancing open-source projects.

2/28/2024

This post announces the open-sourcing of Pingora, a Rust framework developed by Cloudflare for building programmable network services, particularly HTTP proxy services. It highlights Pingora's memory safety, performance benefits, and customizability, making it suitable for security-sensitive and performance-critical applications. The post details Pingora's capabilities, including support for HTTP/1, HTTP/2, TLS, and TCP, along with customizable load balancing and graceful upgrades. It also provides a practical example of building a load balancer with Pingora and discusses future plans and contribution guidelines.

8/26/2022

This post details Cloudflare's contribution to the open source community by open-sourcing their fork of PgBouncer. This fork includes fixes for an authentication bug affecting HBA authentication and new features for enforcing per-user and per-pool connection limits at runtime, which are crucial for tenant performance isolation in their Postgres infrastructure. They have also made administrative commands available to dynamically adjust these limits.

4/17/2021

This post details the evolution of Cloudflare's partnership with HashiCorp, focusing on the development and improvement of the Cloudflare Terraform provider and the `cf-terraforming` tool. It highlights how customer demand drove Cloudflare to take over support for the Terraform provider, leading to its verification. The post also explains the challenges and lessons learned in maintaining `cf-terraforming`, particularly regarding API changes and Terraform updates, and introduces a new, simplified version that leverages Terraform's schema and `terraform-exec` for easier resource management and bootstrapping of existing Cloudflare configurations into an infrastructure-as-code workflow.

5/30/2019

This post details how Cloudflare's CDN and large file caching capabilities were leveraged by the Kali Linux project to significantly improve their download infrastructure. It highlights the challenges of distributing large ISO images and apt repositories, the initial skepticism and subsequent successful integration with Cloudflare's services, and the resulting substantial bandwidth savings and performance improvements for the Kali community. This demonstrates Cloudflare's commitment to supporting open source projects with its core infrastructure.

2/15/2019

This post introduces `cf-terraforming`, a new open-source utility that allows users to export their existing Cloudflare configurations (defined via the dashboard and API) into Terraform-compliant configuration files. This tool simplifies the migration of complex Cloudflare setups to infrastructure-as-code, demonstrating Cloudflare's commitment to supporting and enhancing the open-source ecosystem by providing tools that integrate with popular open-source solutions like Terraform.

2/4/2019

This post details the internal debate regarding the open-sourcing of Quicksilver, a generic data and code sync system based on LMDB. It outlines the criteria for open-sourcing software: whether it's something others can use and if Cloudflare has the time to maintain it publicly. It also mentions the company's defensive patent strategy and the importance of engaging with governments.

9/2/2018

This post details the technical challenges and solutions involved in porting Cloudflare's internal software stack to the ARM64 architecture. It highlights the use of open-source tools and community efforts in supporting ARM64, and the development of custom emulation and cross-compilation strategies using QEMU and Docker to achieve software parity across different hardware architectures. The post also discusses specific technical hurdles encountered with languages like Go and the solutions implemented, such as CPU pinning for threading issues and the use of `--rpath` for shared library management.

10/19/2017

This post details Cloudflare's funding of an academic research group at King's College London to improve the performance of LuaJIT, a critical component of Cloudflare's infrastructure. It highlights Cloudflare's commitment to giving back to the open-source community by supporting research that benefits the broader LuaJIT ecosystem, with all improvements being open-sourced.

9/23/2017

This post announces the release of an official PHP binding for the Cloudflare API (cloudflare-php). It highlights the design decisions made, including the exclusive use of PHP 7 for modern features like scalar type hinting and return type declarations, and the adoption of object composition and dependency injection for flexibility and maintainability. The post also details how the binding facilitates testing through adherence to PSR-7 standards and the use of mocking.

11/12/2016

This post introduces the use of TypeScript for generating documentation, highlighting its advantages over JSDoc by providing compile-time error checking and tightly coupled documentation. It details the adoption and use of TypeDoc at Cloudflare for automated documentation generation and discusses how to extend this beyond API references to create more dynamic and linked documentation. The post also announces plans to open-source the documentation generation tools and themes developed by Cloudflare, further contributing to the open-source ecosystem.

8/3/2016

This post introduces and open-sources a comprehensive toolchain for generating API documentation from JSON Schemas. It details the individual components (json-schema-loader, json-schema-example-loader, doca-bootstrap-theme, doca) and the underlying technologies (Webpack, Handlebars.js, React) used to create a modular, extensible, and performant documentation generation system. This contributes to Cloudflare's open-source efforts by providing a valuable tool for developers and showcasing their internal engineering practices.

4/27/2016

This post details the creation and open-sourcing of `vendorcheck`, a simple static analysis tool for Go. It highlights Cloudflare's proactive approach to improving developer tooling within the Go ecosystem by addressing a specific pain point related to Go's vendoring mechanism. The post also serves as a recruitment tool, indicating the team's engagement with Go development and their willingness to contribute to open source.

3/31/2016

This post introduces CFSSL 1.2, detailing new features like a TLS endpoint scanner for evaluating server security configurations, a Transport package for Go developers to simplify encrypted connections (handling key management, certificate issuance, and renewal), and enhanced revocation support with PostgreSQL backend, CRL, and OCSP. It also highlights the motivation behind treating internal networks as hostile and the use of CFSSL for service-to-service encryption and mutual authentication.

10/9/2015

This post details Cloudflare's contribution to the Netmap project by developing and proposing a 'single RX queue mode'. This enhancement allows user-space applications to bypass the Linux kernel for specific network flows, enabling high-throughput packet processing for handling large packet floods, particularly on Intel IXGBE NICs where direct kernel bypass was not previously available. The post also outlines the technical implementation, configuration, and performance benefits of this contribution, highlighting its value to the open-source community.

7/8/2015

This post details Cloudflare's optimized fork of the zlib compression library, highlighting its performance improvements over the original and other forks. It showcases the library's use in critical scientific research (cancer research via DNA sequencing) as an unexpected benefit of open-sourcing, reinforcing Cloudflare's commitment to contributing to the open-source community and the broad impact of their code.

12/22/2014

This post details Cloudflare's contribution of security enhancements for data replication in the open-source Kyoto Tycoon project. Specifically, Cloudflare added mutually-authenticated TLS encryption for data transit between data centers, preventing man-in-the-middle attacks and protecting sensitive data. They have released this code back to the open-source community, demonstrating their commitment to open source collaboration and improving the security of widely used infrastructure components.

2/28/2014

Introduced lua-capnproto, a new open-source Lua module for Cap'n Proto serialization and deserialization. This module provides high-performance data transfer capabilities for Lua applications, addressing the need for efficient serialization within Cloudflare's NGINX/Lua stack and for inter-data center communication. The post details installation, Cap'n Proto definition, data preparation, and usage examples for serialization and deserialization, along with performance comparisons to lua-cjson.

12/22/2013

This post details the release and updates of several new open source projects by Cloudflare, including Red October, Lua Resty Shcache, Lua Resty Core, Go Libs, BM, Lua Raven, Lua Resty Logger Socket, conf, Lua Resty Kyoto Tycoon, Go LZ4, Aho Corasick, kt-fdw, Lua Resty Cookie, and Docker NPMJS. It also highlights contributions to OpenSSL, SystemTap, and PhantomJS, as well as mentions of Cloudflare employees in the Nginx changelog. The post also references a repository of engineering talks and the reorganization of Cloudflare's GitHub page by language/software.

11/21/2013

This post details the open-sourcing of 'Red October,' a Go-based service implementing the 'two-man rule' for enhanced data security against insider threats. It highlights Cloudflare's commitment to sharing security innovations with the community by releasing the technology under a BSD license and making it available on GitHub, encouraging its adoption and further development by others.

10/7/2013

This post details Cloudflare's extensive use of open source software (nginx, PostgreSQL, Kyoto Tycoon, OpenResty, gcc, make, Go, Lua, Python, Perl, PHP, Sentry, Kibana, Nagios, Linux) and their contributions back to the community. It highlights specific open source projects they use and have contributed to, such as Go's log/syslog module and LuaJIT sponsorship. The post also discusses the benefits of open sourcing their own code and the practice of hiring engineers based on open source contributions.