Company type | Public |
---|---|
| |
Industry | Information and communications technology |
Founded | July 2009 |
Founder | Lee Holloway Matthew Prince Michelle Zatlyn |
Headquarters | San Francisco, California, U.S. |
Key people | |
Brands | 1.1.1.1 |
Services | reverse proxy, edge computing, streaming media, identity management, virtual private network |
Revenue | US$1.297 billion (2023) |
US$−185 million (2023) | |
US$−184 million (2023) | |
Total assets | US$2.759 billion (2023) |
Total equity | US$763 million (2023) |
Number of employees | 3,682 (2023) |
Subsidiaries | Area 1 Security |
ASN | |
Website | cloudflare |
Footnotes /references [1] [2] |
Cloudflare, Inc. is an American company that provides content delivery network services, cloud cybersecurity, DDoS mitigation, wide area network services, reverse proxies, Domain Name Service, and ICANN-accredited [3] domain registration services. [4] [5] [6] Cloudflare's headquarters are in San Francisco, California. [4] According to W3Techs, Cloudflare is used by more than 19% of the Internet for its web security services, as of 2024. [update] [7]
Cloudflare was founded in July 2009 by Matthew Prince, Lee Holloway, and Michelle Zatlyn. [2] [8] [9] Prince and Holloway had previously collaborated on Project Honey Pot, a product of Unspam Technologies that served as some inspiration for the basis of Cloudflare. [10] From 2009, the company was venture-capital funded. [11] On August 15, 2019, Cloudflare submitted its S-1 filing for IPO on the New York Stock Exchange under the stock ticker NET. [12] It opened for public trading on September 13, 2019, at $15 per share. [13]
In 2020, Cloudflare co-founder and COO Michelle Zatlyn was named president, making her one of the few female presidents of a publicly traded technology company in the U.S. [14]
Cloudflare has acquired web-services and security companies, including StopTheHacker (February 2014), [15] CryptoSeal (June 2014), [16] Eager Platform Co. (December 2016), [17] Neumob (November 2017), [18] S2 Systems (January 2020), [19] Linc (December 2020), [20] Zaraz (December 2021), [21] Vectrix (February 2022), [22] Area 1 Security (February 2022), [23] Nefeli Networks (March 2024), and BastionZero (May 2024). [24]
Since at least 2017, Cloudflare has been using a wall of lava lamps in their San Francisco headquarters as a source of randomness for encryption keys, alongside double pendulums in its London offices and a geiger counter in its Singapore offices. [25] The lava lamp installation implements the Lavarand method, where a camera transforms the unpredictable shapes of the "lava" blobs into a digital image. [26] [25]
In Q4 2022, [update] Cloudflare provided paid services to 162,086 customers. [27]
Cloudflare provides network and security products for consumers and businesses, utilizing edge computing, reverse proxies for web traffic, data center interconnects, and a content distribution network to serve content across its network of servers. [28] It supports transport layer protocols TCP, UDP, QUIC, and many application layer protocols such as DNS over HTTPS, SMTP, and HTTP/2 with support for HTTP/2 Server Push. [29] As of 2023, [update] Cloudflare handles an average of 45 million HTTP requests per second. [30]
In 2023, Cloudflare launched Workers AI, a framework allowing for use of Nvidia GPU's within Cloudflare's network. [31]
In 2024, Cloudflare launched a tool that prevents bots from scraping websites. To build automatic bot detector models, the company analyzed AI bots and crawler traffic. [32]
Cloudflare provides free and paid DDoS mitigation services that protect customers from distributed denial of service (DDoS) attacks. Cloudflare received media attention in June 2011 for providing DDoS mitigation for the website of LulzSec, a black hat hacking group. [33]
In March 2013, The Spamhaus Project was targeted by a DDoS attack that Cloudflare reported exceeded 300 gigabits per second (Gbit/s). [34] [35] Patrick Gilmore, of Akamai, stated that at the time it was "the largest publicly announced DDoS attack in the history of the Internet". While trying to defend Spamhaus against the DDoS attacks, Cloudflare ended up being attacked as well; Google and other companies eventually came to Spamhaus' defense and helped it to absorb the unprecedented amount of attack traffic. [36]
In 2014, Cloudflare began providing free DDoS mitigation for artists, activists, journalists, and human rights groups under the name "Project Galileo". [37] In 2017, they extended the service to electoral infrastructure and political campaigns under the name "Athenian Project". [38] [39] By 2020, more than 1,000 users and organizations were participating in Project Galileo, including 31 states. [40] [41]
In February 2014, Cloudflare claimed to have mitigated an NTP reflection attack against an unnamed European customer, which they stated peaked at 400 Gbit/s. [42] [43] In November 2014, it reported a 500 Gbit/s DDoS attack in Hong Kong. [44] In July 2021, the company claimed to have absorbed a DDoS attack three times larger than any they'd previously recorded, which their corporate blog implied was over 1.2 Tbit/s in total. [45] In February 2023, Cloudflare reported blocking a 71 million request-per-second DDoS attack which "the company says was the largest HTTP DDoS attack on record". [46]
Cloudflare blocked the largest publicly-recorded DDoS attack in October 2023, with volumetric attacks peaking at 3.8 terabits per second. [47] The attack targeted compromised devices, including hijacked Asus home routers, DVRs, and web servers. [48]
In 2017, Cloudflare launched Cloudflare Workers, a serverless computing platform for creating new applications, augmenting existing ones, without configuring or maintaining infrastructure. It has expanded to include Workers KV, a low-latency key-value data store; Cron Triggers, for scheduling Cron jobs; and additional tooling for developers to deploy and scale their code across the globe. [49]
In 2020, Cloudflare released a JAMstack platform for developers to deploy websites on Cloudflare's Edge infrastructure, under the name "Pages". [50]
In 2022, Cloudflare announced an Edge SQL database, D1, which is built on SQLite. [51]
In August 2023, Cloudflare and IBM announced a partnership providing bot management capabilities to protect IBM Cloud customers from malicious bots and automated threats. [52]
Also in August 2023, Cloudflare was hired by SpaceX to boost the performance of Starlink, [53] and in September launched Cloudflare Fonts as a competitor to Google Fonts. [54]
In April 2020, Cloudflare announced it was moving away from using reCAPTCHA in favor of hCaptcha. [55] In September 2022, Cloudflare began to test Turnstile – an alternative to CAPTCHA. The product, instead of presenting a visual CAPTCHA for the user to solve, automatizes the verification process by conducting JavaScript-based checks inside the browser to determine whether the user is a real person or an automated entity. The algorithm reportedly uses machine learning to optimize the process. [56]
Through a contract with the Cybersecurity and Infrastructure Security Agency, Cloudflare provides registry and authoritative DNS services to the .gov top-level domain. [57]
In November 2020, Cloudflare announced Cloudflare for Teams, consisting of a DNS resolver and web gateway called "Gateway", and a zero-trust authentication service called "Access". [58]
Cloudflare announced a partnership with PhonePe in January 2023 to secure its mobile payment system. [59] In February, Cloudflare launched Wildebeest to allow Mastodon users to set up and run their own instances on Cloudflare's infrastructure. [60]
In August 2023, Cloudflare started the Project Cybersafe Schools program as part of a $20 million grant program from Amazon Web Services, making 70 percent of public school districts in the United States eligible for no-cost cybersecurity services. [61]
In March 2024, they announced Firewall for AI to defend applications running large language models (LLMs). [62]
Cloudflare One, the company's overarching SASE platform, debuted in October 2020. [63]
Cloudflare One announced the acquisition of Area 1 Security in February 2022, a company who developed a product for combating phishing email attacks. [64]
Cloudflare One announced the acquisition of Nefeli Networks in March 2024, a cloud networking company co-founded by computer scientist Sylvia Ratnasamy.
In 2019, Cloudflare released a VPN service called WARP, [65] [66] and open sourced the custom underlying WireGuard implementation written in Rust. [67] [68]
In January 2021, the company began providing its "Waiting Room" digital queue product for free for COVID-19 vaccination scheduling under the title "Project Fair Shot". [69] Project Fair Shot later won a Webby People's Choice Award in 2022 for Event Management under the Apps & Software category. [70]
In March 2023, Cloudflare announced post-quantum cryptography will be made freely and forever available to cloud services, applications and Internet connections. [71]
On June 1, 2012, the hacker group UGNazi compromised some of Cloudflare CEO Matthew Prince's accounts and redirected visitors of the website 4chan to a Twitter account belonging to UGNazi. They allegedly used social engineering to trick AT&T support staff into giving them access to Prince's voicemail, then exploited a vulnerability in Cloudflare's use of Google's two-factor authentication system. Once in control of Prince's email account, UGNazi was able to redirect the 4chan domain through Cloudflare's database. [72] [73]
From September 2016 until February 2017, a major Cloudflare bug nicknamed Cloudbleed [74] leaked sensitive data, including passwords and authentication tokens, from customer websites by sending extra data in response to web requests. [75]
Cloudflare has said that it has a content neutrality policy and that it opposes the policing of its customers on free speech grounds, except in cases where the customers break the law. [76] [77] The company has faced criticism for not banning hate speech websites and websites allegedly connected to terrorism groups, [78] but Cloudflare has maintained that no law enforcement agency has asked the company to discontinue these services and it closely monitors its obligations under U.S. laws. [79]
In 2022, a research paper by Stanford University found that Cloudflare was a prominent CDN provider among several other providers that are disproportionately responsible for serving misinformation websites. [80] [81] Cloudflare has come under pressure on multiple occasions due to its services being utilized to access far-right content. [82] [83] [84] [85]
Cloudflare provided DNS routing and DDoS protection for the white supremacist and neo-Nazi website, The Daily Stormer. In 2017 Cloudflare stopped providing its services to The Daily Stormer after an announcement on the website asserted that the "upper echelons" of Cloudflare were "secretly supporters of their ideology". [86] [87]
Previously, Cloudflare had refused to take any action regarding The Daily Stormer. [85] Founder Matthew Prince said he found the website's content "vile", but regretted he alone could "decide its fate". [88] He told Business Insider : "The ability of somebody to single-handedly choose to knock content offline doesn’t align with core ideas of due process or justice. Whether that’s a national government launching attacks or an individual launching attacks." [88]
As a self-described "free speech absolutist", Prince, in a blog post, vowed never to succumb to external pressure again and sought to create a "political umbrella" for the future. [85] Prince further addressed the dangers of large companies deciding what is allowed to stay online, a concern that is shared by a number of civil liberties groups and privacy experts. [89] [90] [91] The Electronic Frontier Foundation, a US digital rights group, said that services such as Cloudflare "should not be adjudicating what speech is acceptable", adding that "when illegal activity, like inciting violence or defamation, occurs, the proper channel to deal with it is the legal system". [86]
In 2019, Cloudflare was criticized for providing services to the far-right [92] discussion and imageboard 8chan. The message board has been linked to mass shootings in the United States and the Christchurch mosque shootings in New Zealand. [92] [93] [94] In addition, a number of news organizations including The Washington Post and The Daily Dot have reported on the existence of child pornography and child sexual abuse discussion boards. [95] [96] [97]
A Cloudflare representative said that the platform "does not host the referenced websites, cannot block websites, and is not in the business of hiding companies that host illegal content". [98] Cloudflare did not terminate service to 8chan until public and legal pressure mounted in the wake of the 2019 El Paso shooting, in which the associated manifesto was published to 8chan. [99] [100] [101] In an interview with The Guardian immediately after the shooting, CEO Matthew Prince defended Cloudflare's support of 8chan, saying that he had a "moral obligation" to keep 8chan online. [102]
On August 5, 2019, Cloudflare terminated service to 8chan. [103] Following this, 8chan moved its forums from the clearnet to the dark web. [104] Cloudflare explained that 8chan "have proven themselves to be lawless and that lawlessness has caused multiple tragic deaths. Even if 8chan may not have violated the letter of the law in refusing to moderate their hate-filled community, they have created an environment that revels in violating its spirit." [105] Prince said that what happened in El Paso was "abhorrent in every possible way", removing 8chan from the Internet was "the right thing to do". [106] [102]
Cloudflare provided DDoS mitigation and acted as a reverse proxy for Kiwi Farms, a far-right [107] [108] Internet forum dedicated to discussion and trolling of online figures or communities. The site often engages in harassment and doxxing of targets [109] and has been implicated in the suicides of at least three people. [110] [111] [112] [113] [114] Kiwi Farms also has a reputation for transphobic content, and its users have been accused of swatting vulnerable individuals. [115] [116] [117] [118] Although Cloudflare was not the primary website host, they did perform critical services to keep Kiwi Farms on-line, both protecting the site from denial-of-service attacks and optimizing content delivery. [119] [5] [120] [121]
In 2022, a campaign was launched by transgender activist Clara Sorrenti, who has previously been targeted by the forum, to pressure Cloudflare into terminating service for Kiwi Farms. [122] [123] Cloudflare responded by issuing a statement on its abuse policies and saying it didn't want to set precedent for speech on the internet with its "extraordinary" decision. [124]
The company also released a blog post [125] and likened their services to that of a public utility, stating that "Just as the telephone company doesn't terminate your line if you say awful, racist, bigoted things, we have concluded ... that turning off security services because we think what you publish is despicable is the wrong policy", but that it would certainly be the "popular choice" to drop sites that the Cloudflare team "personally feels [are] disgusting and immoral". [126] [127] The company also defended their decision by saying that "where they had provided DDoS protection services to an anti-LGBTIQ+ website, they donated 100% of the fees earned to an organisation fighting for LGBTIQ+ rights". [128] The blog post mentioned Cloudflare's terms of use agreement, which allows them to terminate service due to "content that discloses sensitive personal information, [and] incites or exploits violence against people" but, according to The Guardian , the statement "did not specifically address how Kiwi Farms users doxxing people did not fall foul of these terms". [128]
On September 3, 2022, Cloudflare blocked Kiwi Farms, citing urgent escalating rhetoric against targets of Kiwi Farms, stating that there is an "unprecedented emergency and immediate threat to human life". According to The Washington Post, there was a "surge in credible violent threats stemming from the site" and CEO Matthew Prince said that Cloudflare believes "there is an imminent danger, and the pace at which law enforcement is able to respond to those threats we don't think is fast enough to keep up". [129] [130] [131]
Switter was a social media network for the sex worker community, built by Australia-based company Assembly Four on Mastodon's open-source software, before Cloudflare dropped Switter as a client and ceased services in April 2018, citing terms of service violations. [132] [133] This occurred shortly after the passage of FOSTA/SESTA, a set of bills criminalizing websites that "facilitate or support sex trafficking" in 2018. SESTA weakened protections for Internet infrastructure companies and was criticized on free speech grounds due to concerns about disproportionate impact and disruptions to the lives of sex workers. [134] [135] [136]
Cloudflare said the move was "related to our attempts to understand FOSTA, which is a very bad law and [sets] a very dangerous precedent". [137] Assembly Four said that "Given Cloudflare's previous stances of privacy and freedom, as well as fighting alongside the EFF, we had hoped they would take a stand against FOSTA/SESTA". [132]
In 2015, testimony to the United States House Committee on Foreign Affairs, it was reported that two of the top three online chat forums and nearly forty other web sites belonging to the Islamic State of Iraq and the Levant (ISIL) were guarded by Cloudflare. [138]
In 2018, The Huffington Post documented that Cloudflare provided services for "at least 7 terrorist groups", as designated by the United States Department of State including Al-Shabaab, the Taliban, the Popular Front for the Liberation of Palestine, the al-Quds Brigades, the Kurdistan Workers' Party (PKK), the al-Aqsa Martyrs' Brigades, and Hamas. [139] [112] At the time, Cloudflare's general counsel, Doug Kramer, told The Huffington Post that he couldn't comment on specific cases in which Cloudflare was told about possible terrorist organizations using its services, but that Cloudflare does work with government agencies to be in compliance with its legal obligations. [112]
In September 2019, Cloudflare reported in their Form S-1 filing that their technology was "used by, or for the benefit of, certain individuals or entities" that were blacklisted due to United States economic and trade sanctions regulations", [140] including "entities identified in OFAC’s counter-terrorism and counter-narcotics trafficking sanctions programs, or affiliated with governments currently subject to comprehensive U.S. sanctions". [141]
Cloudflare has been cited in reports by The Spamhaus Project, an international spam tracking organization, for the high numbers of cybercriminal botnet operations hosted by Cloudflare. [142] [143] [144] An October 2015 report found that Cloudflare provisioned 40% of the SSL certificates used by typosquatting phishing sites, which use deceptive domain names resembling those of banks and payment processors to compromise Internet users' banking and other transactions. [145] Cloudflare has been criticized for having a conflict of interest by providing DDoS protection to both the operators and victims of "stresser" services. [146] [147]
In 2018, Cloudflare was identified by the European Union's Counterfeit and Piracy Watch List as a "notorious market" which engages in, facilitates, or benefits from counterfeiting and piracy. The report noted that Cloudflare hides and anonymizes the operators of 40% of the world's pirate sites, and 62% of the 500 largest such sites, and "does not follow due diligence when opening accounts for websites to prevent illegal sites from using its services". [148] [149]
In 2020, an Italian court ruled Cloudflare had to block current and future domain names and IP addresses of the pirate IPTV service "IPTV THE BEST" for infringing on Lega Serie A intellectual property. [150] At the time, Cloudflare was already blocking 22 domain names in Italy. [151] German courts have similarly found that "Cloudflare and its anonymization services attract structurally copyright infringing websites." [152]
After Russia invaded Ukraine in late February 2022, Ukrainian Vice Prime Minister, Minister of Digital Transformation Mykhailo Fedorov [153] and others [154] called on Cloudflare to stop providing its services in the Russian market amidst reports that Russia-linked websites spreading disinformation were using the company's content delivery network services. [155] Cloudflare CEO Matthew Prince responded that the company decided to remain providing services to Russian people to counter Russia's attempts to raise a 'digital iron curtain'. [156] [157] Prince shared that "Indiscriminately terminating service would do little to harm the Russian government but would both limit [Russian citizens'] access to information outside the country and make significantly more vulnerable those who have used us to shield themselves as they have criticized the government." [158] The company later said it had minimal sales and commercial activity in Russia and had "terminated any customers we have identified as tied to sanctioned entities". [159]
Cloudflare's Project Galileo, launched in 2014, offers DDoS protection to NGOs for free. In 2022, they extended free protection to Ukrainian government and telecoms. [160] [161]
In computing, a denial-of-service attack is a cyber-attack in which the perpetrator seeks to make a machine or network resource unavailable to its intended users by temporarily or indefinitely disrupting services of a host connected to a network. Denial of service is typically accomplished by flooding the targeted machine or resource with superfluous requests in an attempt to overload systems and prevent some or all legitimate requests from being fulfilled. The range of attacks varies widely, spanning from inundating a server with millions of requests to slow its performance, overwhelming a server with a substantial amount of invalid data, to submitting requests with an illegitimate IP address.
A CAPTCHA is a type of challenge–response test used in computing to determine whether the user is human in order to deter bot attacks and spam.
The Spamhaus Project is an international organisation based in the Principality of Andorra, founded in 1998 by Steve Linford to track email spammers and spam-related activity. The name spamhaus, a pseudo-German expression, was coined by Linford to refer to an internet service provider, or other firm, which spams or knowingly provides service to spammers.
An Internet bot, web robot, robot or simply bot, is a software application that runs automated tasks (scripts) on the Internet, usually with the intent to imitate human activity, such as messaging, on a large scale. An Internet bot plays the client role in a client–server model whereas the server role is usually played by web servers. Internet bots are able to perform simple and repetitive tasks much faster than a person could ever do. The most extensive use of bots is for web crawling, in which an automated script fetches, analyzes and files information from web servers. More than half of all web traffic is generated by bots.
In computer networks, a reverse proxy or surrogate server is a proxy server that appears to any client to be an ordinary web server, but in reality merely acts as an intermediary that forwards the client's requests to one or more ordinary web servers. Reverse proxies help increase scalability, performance, resilience, and security, but they also carry a number of risks.
Dyn, Inc. was an Internet performance management company that also dealt with web application security, offering products to monitor, control, and optimize online infrastructure, and also domain registration services and email products. The company was acquired by Oracle Corporation in 2016. It began operating as a global business unit of Oracle in 2017.
CyberBunker was an Internet service provider located in the Netherlands and Germany that, according to its website, "hosted services to any website except child pornography and anything related to terrorism". The company first operated in a former NATO bunker in Zeeland, from which it got its name, and later in another former NATO bunker in Traben-Trarbach, Germany. Sven Olaf Kamphuis referred to CyberBunker as the Republic of CyberBunker and referred to himself as the Minister of Telecommunications and Foreign Affairs.
reCAPTCHA Inc. is a CAPTCHA system owned by Google. It enables web hosts to distinguish between human and automated access to websites. The original version asked users to decipher hard-to-read text or match images. Version 2 also asked users to decipher text or match images if the analysis of cookies and canvas rendering suggested the page was being downloaded automatically. Since version 3, reCAPTCHA will never interrupt users and is intended to run automatically when users load pages or click buttons.
Barrett Gibson Lyon is an American Internet entrepreneur, security researcher, and a former hacker.
Jigsaw LLC is a technology incubator created by Google. It formerly operated as an independent subsidiary of Alphabet Inc., but came under Google management in February 2020. Based in New York City, Jigsaw is dedicated to understanding global challenges and applying technological solutions. From "countering extremism", online censorship, and cyber-attacks to protecting access to information. The current CEO is Yasmin Green.
8kun, previously called 8chan, Infinitechan or Infinitychan, is an imageboard website composed of user-created message boards. An owner moderates each board, with minimal interaction from site administration. The site has been linked to white supremacism, neo-Nazism, the alt-right, racism and antisemitism, hate crimes, and multiple mass shootings. The site has been known to host child pornography; as a result, it was filtered out from Google Search in 2015. Several of the site's boards played an active role in the Gamergate harassment campaign, encouraging Gamergate affiliates to frequent 8chan after 4chan banned the topic. 8chan is the origin and main center of activity of the discredited QAnon conspiracy theory.
Lizard Squad was a black hat hacking group, mainly known for their claims of distributed denial-of-service (DDoS) attacks primarily to disrupt gaming-related services.
Voat Inc was an American alt-tech news aggregator and social networking service where registered community members could submit content such as text posts and direct links. Registered users could then vote on these submissions. Content entries were organized by areas of interest called "subverses". The website was widely described as a Reddit clone and a hub for the alt-right. Voat CEO Justin Chastain made an announcement on December 22, 2020 that Voat would shut down. The site was shut down on December 25, 2020.
The InterPlanetary File System (IPFS) is a protocol, hypermedia and file sharing peer-to-peer network for storing and sharing data in a distributed hash table. By using content addressing, IPFS uniquely identifies each file in a global namespace that connects IPFS hosts, creating a resilient system of file storage and sharing.
Kiwi Farms, formerly known as CWCki Forums, is a web forum that facilitates the discussion and harassment of online figures and communities. Their targets are often subject to organized group trolling and stalking, as well as doxxing and real-life harassment. Kiwi Farms has been tied to the deaths of six people, three of them being victims of harassment who died by suicide, and a double murder-suicide at a high school in Aztec, New Mexico committed by a member of Kiwi Farms.
Epik is an American domain registrar and web hosting company known for providing services to alt-tech websites that host far-right, neo-Nazi, and other extremist materials. It has been described as a "safehaven for the extreme right" because of its willingness to provide services to far-right websites that have been denied service by other Internet service providers.
Robert W. Monster is a Dutch-American technology executive. He is the founder, former chief executive officer, and former chairman of Epik, a domain registrar and web host known for providing services to websites that host far-right, neo-Nazi, and extremist content.
DDoS-Guard is a Russian Internet infrastructure company which provides DDoS protection and web hosting services. Researchers and journalists have alleged that many of DDoS-Guard's clients are engaged in criminal activity, and investigative reporter Brian Krebs reported in January 2021 that a "vast number" of the websites hosted by DDoS-Guard are "phishing sites and domains tied to cybercrime services or forums online". Some of DDoS-Guard's notable clients have included the Palestinian Islamic militant nationalist movement Hamas, American alt-tech social network Parler, and various groups associated with the Russian state.
Nicholas Lim is a technology entrepreneur and software developer based in Vancouver, Washington. Lim and his companies provide services to alt-tech, far-right and neo-Nazi websites, such as The Daily Stormer, a neo-Nazi message board website, 8chan, the home of the far-right QAnon conspiracy theory, and Kiwi Farms, a harassment and anti-trans forum. In 2017, Lim founded BitMitigate, a website security company which in 2019 was acquired by Epik, an America based registrar and hosting company company. In 2019 he founded VanwaTech, a webhosting and website security company.
Michelle Zatlyn is a Canadian businesswoman. She is the co-founder, president, chief operating officer and a board member of American content delivery network provider and cybersecurity firm Cloudflare.
The week before the Paris attacks, Ghost Security counted almost 40 ISIS websites that use Cloudflare's services.
A reverse proxy is a server that sits in front of web servers ... typically implemented to help increase security, performance, and reliability.
... the company continues to provide security – its reverse proxy service – that helps Kiwi Farms defend against denial of service attacks and keeps the web forum online.
{{cite web}}
: CS1 maint: bot: original URL status unknown (link)