Cloudflare
239 incident problems in Cloudflare environments.
먼저 읽을 가이드
추천 문제
All problems (239)
NETWORK-1502A Cloudflare Tunnel stays up and WebSockets still failOnly one hostname behind Cloudflare Tunnel breaks WebSockets after path rewrites were added.NetworkIntermediate10 minProNETWORK-1386A Cloudflare page rule or transform looks correct and one admin path still bypasses authA transform rules rollout simplifies URLs and later only one protected path begins bypassing the expected edge auth behavior.NetworkIntermediate11 minProNETWORK-1404A load balancer health check passes and real clients are deniedA load balancer health check passes and real clients are denied focuses on edge-routing and asks the reader to isolate the key signal in Cloudflare. Health checks often take a simpler network path than user traffic and can miss...NetworkIntermediate11 minProNETWORK-1414A TCP health check keeps passing and real users are blockedA TCP health check keeps passing and real users are blocked focuses on edge-routing and asks the reader to isolate the key signal in Cloudflare. Health checks can hide parser bugs when they carry simpler metadata than real client...NetworkIntermediate11 minProNETWORK-1424A TCP health check passes and real clients are deniedA TCP health check passes and real clients are denied focuses on edge-routing and asks the reader to isolate the key signal in Cloudflare. Health checks can hide metadata parsing bugs because they often exercise a simpler path than real u...NetworkIntermediate11 minProNETWORK-1434A TCP health check passes and real clients are deniedA TCP health check passes and real clients are denied focuses on edge-routing and asks the reader to isolate the key signal in Cloudflare. Simpler health-check metadata can hide parser differences that only real clients trigger.NetworkIntermediate11 minProNETWORK-1396An edge auth rule should block a path and one localized URL stays openA multilingual or encoded URL path reaches an origin route that should have been blocked by edge auth.NetworkIntermediate11 minProNETWORK-1373A Cloudflare tunnel path works over TCP and one browser class still failsA secure tunnel works after an inspection exception and later a subset of browsers or clients still fail to connect reliably.NetworkIntermediate12 minProNETWORK-1358A DNS service resolves small answers and signed domains failA DNS service resolves small answers and signed domains fail focuses on dns-resolution and asks the reader to isolate the key signal in Cloudflare. Stub success does not prove the recursive server can complete its own fallback path.NetworkIntermediate12 minProNETWORK-1366A DNS service resolves small records and DNSSEC-heavy zones failA DNS service resolves small records and DNSSEC-heavy zones fail focuses on dns-resolution and asks the reader to isolate the key signal in Cloudflare. Stub success does not prove the recursive server can finish its own fallback behavior.NetworkIntermediate12 minProCICD-1469A provenance upload fails on one office networkAttestation uploads fail only from one network segment where outbound TLS inspection is mandatory.CI/CDAdvanced12 minProCICD-1479A provenance upload reaches Rekor and still failsAttestation uploads fail only behind one proxy tier after header normalization was enabled globally.CI/CDAdvanced12 minProNETWORK-1380A WAF bypass rule appears correct and never matchesA CDN logging format is updated and later allowlists, bypass rules, or enrichment behave as though every request came from the wrong IP.NetworkIntermediate12 minProNETWORK-1378Cloudflare Access works on the primary app and the internal admin path loses...Cloudflare Access works on the primary app and the internal admin path... focuses on Identity And Access and asks the reader to isolate the key signal in NGINX. Identity propagation can break at internal proxy hops even when the edge...NetworkIntermediate12 minProNETWORK-1368A Cloudflare Access app authenticates correctly and one admin route still...A Cloudflare Access app authenticates correctly and one admin route still... focuses on Identity And Access and asks the reader to isolate the key signal in NGINX. Identity headers often disappear inside the origin proxy long after e...NetworkIntermediate13 minProNETWORK-1333A Cloudflare cache purge appears successful and one path still serves stale...A Cloudflare cache purge appears successful and one path still serves stale... focuses on Deployment Governance and asks the reader to isolate the key signal in Cloudflare. A successful purge response does not prove it targeted the same cache identity m...NetworkIntermediate13 minProNETWORK-1356A Cloudflare purge request returns success and one login page stays staleA page update is pushed urgently and later only one user segment continues to receive the stale login screen or policy page.NetworkIntermediate13 minProNETWORK-1338A DNS path fails only for signed domainsOperators validate DNS from a client and still see production resolvers fail selectively for signed zones.NetworkIntermediate14 minProNETWORK-1348A DNS resolver works for most zones and signed domains failA DNS resolver works for most zones and signed domains fail focuses on dns-resolution and asks the reader to isolate the key signal in Cloudflare. Stub resolver success does not prove the recursive server can complete its own fallback behavior.NetworkIntermediate14 minProSECURITY-1690A browser login is fixed and one app path still failsThe main login page works and one interactive app path still fails after the session fix.SecurityIntermediate11 minPro