Reducing double spend latency from 40 ms to < 1 ms on privacy proxy
Aug 5, 2025Ben Yang
Summary
This post details the optimization of authentication latency for Cloudflare's privacy proxy product. It identifies and resolves a significant performance bottleneck related to TCP Nagle's algorithm and delayed ACKs, reducing double-spend check latency from approximately 40ms to under 1ms. This directly improves the performance and privacy of services like Apple's Private Relay and Microsoft's Edge Secure Network by ensuring faster token validation.
More from the Website Security & Threat Management trail
- We tested our own WAF with frontier AI models. Here’s what we found
- When scanners miss the attack: how Cloudflare Client-Side Security protects storefronts
- Introducing automatic remediation policies with Cloudflare CASB
- Introducing context-aware vulnerability discovery and remediation with Cloudflare Managed Defense and OpenAI Daybreak Models
- Introducing Adaptive Intelligence: undermining the economics of every bot attack