Cloudflare’s global outage and its ripple effects on Filipino internet users

Internet users worldwide scrambled as internet giant Cloudflare suffered a major outage recently, immediately paralyzing critical online services.

For nearly three hours, access to platforms and internet hotspots such as Google, Canva, and ChatGPT, as well as social media apps like X and Grindr, was compromised, prompting multiple reports of productivity loss across the Philippines.

The sheer scale of the disruption, which affected millions of users and numerous heavy-traffic websites, including gaming platforms, immediately raised a pressing question for the Filipino masses: What exactly is Cloudflare, and how and why does one company hold so much power over the nation’s connectivity?

Decoding the data chain

To understand Cloudflare and its services, one must first grasp the concept of a Content Delivery Network (CDN), which functions similarly to a logistics chain of a physical store.

If a massive retailer, or a company on the internet, were to use only one central warehouse for all its global orders, shipping times to distant places would be incredibly slow. A CDN solves this latency problem by creating thousands of smaller, distributed “warehouses,” or edge servers, around the globe.

When a user visits a website protected by Cloudflare, their device does not connect to the site’s main server. Instead, the connection is routed to the closest edge server, which often holds a cached, or copied, version of the main website. This proximity dramatically reduces load times.

This is where Cloudflare comes in. The company is one of the world’s biggest CDN service providers, servicing most websites that Filipinos use. It is the industry’s largest player, handling 20% of all requests made over the internet and providing services to an estimated one in five of the world’s websites.

Its security features, like Distributed Denial of Service (DDoS) mitigation and anti-spam filters, also make it a popular provider among internet companies, placing the company as a crucial component in internet services.

Bot gone wrong

In the aftermath of the global crash, Cloudflare co-founder and CEO Matthew Prince was quick to say that the downtime was not the result of a cyberattack.

The outage came from Cloudflare’s AI-powered Bot Management system, a service designed to distinguish between legitimate users and malicious traffic for security purposes. The system relies on a constantly refreshing data file to scan internet traffic and check whether an online visitor is a genuine human.

The problem arose when the company implemented a small change to the system that generated this data file, unknowingly triggering an error. This seemingly minor update caused the Bot Management system to duplicate information multiple times until it became too large for a single file to handle.

Prince said that this bloated file, in turn, triggered widespread errors across Cloudflare’s massive cybersecurity network, effectively shutting down or limiting internet website services.

Local response

The incident immediately prompted a response from local authorities, particularly the Department of Information and Communications Technology (DICT).

The public received assurances from DICT Secretary Henry Aguda that the incident did not cause instability among government websites: “We have resolved the global Cloudflare issue.” All affected government and public websites should now be accessible. DICT will continue monitoring to ensure full normal operations.”

For Filipinos, the incident highlighted digital resilience, underlining the economic vulnerability of workers dealing with online-based output.

With social media being 42.5% of Filipinos’ gateway to market brands, local businesses are now becoming reliant on CDN services to push for digital growth.

Millions of Filipino internet users who communicate, transact, and earn online depend on the stability of offshore servers and pin their hopes on error-free software to keep the market running.

All eggs in one basket

While critical systems were mostly stable, many public services remained vulnerable due to their reliance on Cloudflare’s global service.

This reliance on a few global CDN providers, such as Cloudflare, Amazon Web Services, and Microsoft Azure, is now widely seen by industry experts as a systemic risk, creating a dangerous “dependency chain.”

Dr. Ilia Kolochenko, CEO of ImmuniWeb and a fellow of the British Computer Society, spoke directly to this danger, emphasizing the risk of placing too much faith in single entities.

“When we have one single large vendor, however excellent its services are, we put all eggs in one basket, eventually creating a single point of failure. If lawmakers and regulators do nothing following this incident, we will be basically sitting down and asking for a disaster,” Kolochenko said.

 

 

What exactly is Cloudflare, and how and why does one company hold so much power over the nation’s connectivity?

 

 

READ: