Bringing insights into TCP resets and timeouts to Cloudflare Radar
Sep 5, 2024Luke Valenta

Summary
Introduced a new dashboard and API endpoint on Cloudflare Radar to track and analyze anomalous TCP connections (resets or timeouts within the first 10 ingress packets). This involved developing detection mechanisms to classify these connections and provide insights into network issues, scanning, and attacks. The post details the classification of connection stages (Post-SYN, Post-ACK, Post-PSH, Later) and provides guidance on interpreting the data.
More from the Data Infrastructure & Analytics trail
- Introducing Cloudflare Basin: an open, serverless data platform, now generally available
- Introducing the Billable Usage API: programmatic cost visibility for Cloudflare
- Announcing the Monetization Gateway: charge for any resource behind Cloudflare via x402
- How we built Cloudflare's data platform and an AI agent on top of it
- Iran's Internet is partially restored, Cloudflare Radar data shows