Chrome waggaa hedduuf saayitiiwwan cuftuu malee isin sodaachise. Amma saayitiin hundi qaba - saayitiiwwan gurguddoo kudhan keessaa torban irratti gara middlebox geessa
Cuftuu fi HTTPS sababa tokkoof uumaman: isinii fi saayitii gidduutti namni waan ergitaniin dubbisuu akka hin dandeenye. ISP kee, Wi-Fi kafee, mootummaan sarara irratti - hundi ciphertext qofa argu. Browserwwan waggaa hedduuf isin barsiisan: cuftuun hin jiru - password hin galchin.
Cloudflare proxy isinii fi saayitii gidduutti taaʼu dha; Amazon CloudFront, Azure Front Door, Akamai fi Fastly walfaana hojjetu. «Halaawwan dandamachiisuuf» middlebox traffic cleartext keessatti arguu qaba. Kanaaf hidhanni kee server isaa irratti xumurama: achitti gaaffiin hiikama, seera isaa waliin mirkanaaʼa, sana booda qofa hidhannoo addaa irratti gara saayitii ergame. Docs Cloudflare ofii TLS termination jedha - «the point where HTTPS traffic is decrypted so Cloudflare can inspect it». Amazon, Azure fi Akamai docs keessatti bakka walfakkaatuuf maqaa walfakkaatu fayyadamu.
Teeknikaadhaan kun man in the middle aadaa dha. Halaa irraa adda baʼuun tokko qofa: abbaan saayitii yeroo saayitii middlebox duuba kaaʼu itti galmaaʼe. Karoora ykn setting kun hin haqu: hanga saayitiin middlebox duuba jirutti, encryption middlebox irratti xumurama - karoora hafeefi Enterprise irratti walfaana. Namni isin hin gaafanne, cuftuunis hin himu.
Hojii keessatti kun maal jechuudha - docs fi guyyaa irraa
Murtii hin qabnu. Dokumantii Cloudflare ofii, gabaasa balaa ofii fi barreessota ummataa qofa - guyyaa waliin, akka sararaan hundi sakattaʼamuuf.
Saayitiiwwan gurguddoo kudhan keessaa torba - middlebox duuba
HTTP Archive 2025 akka jedhutti, saayitiiwwan kuma tokkoo kan baayʼee daawwataman addunyaa keessaa %71 dokumentii HTML iyyuu middleboxiin kennu; top 10,000 keessatti - %70, top 100,000 keessatti - %62. Middleboxwwan sun eenyu: Cloudflare - saayitii akkasii %58, sana booda Amazon CloudFront (%7), Fastly (%5), Akamai (%2) fi cloud load balancers. Saayitiiwwan addunyaa hunda yoo lakkaaʼan, sadaffaan hundi middlebox duuba; Cloudflare qofa - saayitii hunda keessaa %26 fi gabaa reverse-proxy %85.
WAF qaama gaaffii hundaa dubbisa - docs akka jedhutti
Seeronni Cloudflare «qaama gaaffii dhufaa hundaa ni ilaalu», fi dirreen http.request.body.raw afaan seera isaanii keessatti «qaama gaaffii HTTP hin jijjiiramne» dha. Unka seenaa qaama gaaffii dha. Seenaa fi password keessa plaintext dha.
Cloudbleed, 2017: yaadannoon middlebox deebii birootti dhangalaʼe
Fulbaana 22, 2016 hanga Guraandhala 18, 2017 bug parser Cloudflare cinaacha yaadannoo saayitii tokkoo deebii biraa keessa makuu: headerwwan, cinaacha gaaffii POST password waliin, cookie, furtuu API fi token. Cloudflare hits milyoona 1.2 lakkaaʼe; dhangalaʼuun cache barbaacha keessa gale - fuula 80,000 ol qulqulleeffame. Maxxansa maqaa Uber, OkCupid, Fitbit waame.
Sadaasa 2023: haleeltota furtuu hatameen Cloudflare seentan
Sadaasa 14 hanga 24, 2023 haleeltota - Cloudflare «nation-state» jedhee waama - credentials Okta breach keessatti hataman waliin sirna Cloudflare keessa hojjetan: wiki Confluence, tracker Jira, repo Bitbucket, repository 76 buufaman. Sana booda Cloudflare credentials 5,000 ol jijjiiree sirna 4,893 gamaaggale.
Switch tokko hundaaf
Adoolessa 2, 2019 - daqiiqaa 27, regex tokko WAF keessatti, traffic %82 buʼe. Waxabajjii 21, 2022 - daqiiqaa 75, data center 19. Sadaasa 18, 2025 - saʼaatii jaʼa dhihoo, «worst outage since 2019»: X, ChatGPT, Spotify, Shopify, Coinbase kufan. Mudde 5, 2025 - daqiiqaa 25 biraa. Guraandhala 20, 2026 - saʼaatii jaʼa, dogoggora BGP. Outagewwan keessaa tokkollee haleellaa hin turre.
Cloudflare ati nama taʼuu kee murteessa
Abbaan saayitii sanduuqa mallatteessa - fi seensusaan isaaniiin osoo hin taane filtre Cloudflaretiin murtaaʼa. Docs isaanii «challenge loop, when the challenge appears again and again» ni amanu, VPN fi proxy waliin. 2016 irraa Cloudflare Tor akka «biyya» addaa tajaajila, gaaffii achii %94 hammeenya jedha; Tor Project «loop CAPTCHA hin dhaabbanne» fi cufamuu teessoo Tor hanga %80 deebise.
Yeroo mootummaan middlebox waliin lolu: dhimma Raashiyaa
Onkoloolessa 2024 Cloudflare encryption ECH karoora hafee irratti ofumaan banu godhe. Sadaasa 6, 2024 saayitiiwwan Cloudflare duuba ECH waliin ISP Raashiyaaf banuun dhaaban; Sadaasa 7 CMU SSOP (kutaa Roskomnadzor, toʼataa telekom Raashiyaa) ECH «karaa daangaa irra darbuu» jedhee abbootii akka dhaaban «ykn, caalaatti, CDN biyya keessaa fayyadaman» gorfate. Waxabajjii 9, 2025 irraa operatorwwan Raashiyaa afur gurguddoon traffic Cloudflare faayilaa kamiyyuu KB 16 jalqabaatti muran. Traffic Raashiyaa irraa %30 dhihoo buʼe; saayitii web Raashiyaa %40 ol - 300,000 dhihoo - Cloudflare duuba taaʼu. Waxabajjii 2, 2026 FSB tajaajiloonni basaasaa alaa daataa bilbila ogeessota Raashiyaa «dandeettii teeknikaa» Cloudflare fi Fastly fayyadamuun walitti qaban jedhee labsite, fi dhimma Seera Yakkaa keewwata 272 fi 273 jalatti bane - ragaa teeknikaa hin agarsiifne, dhaabbattonnis hin deebifne. Cloudflare walfakkaataan 2022 irraa saayitiiwwan UK Ministry of Defence waliigaltee mootummaa jalatti eega - Army, Royal Navy, RAF fi portal Defence Gateway fayyadamtoota 330,000f: £425k 2022-2025 fi £105k 2025-2026.
Karoorri walfakkaataan iddoo hunda: Amazon, Akamai, Azure, Fastly
Proxy ykn cloud load balancer kamiyyuu TLS of irratti xumuru walfaana hojjeta: Amazon CloudFront fi ALB, Azure Front Door fi Application Gateway, Akamai, Fastly, Imperva. Hundi WAF ofii qaama gaaffii dubbisu, cache ofii fi outage ofii qaba. Cloudflare guddaa fi dokumantii keessatti banamaa qofa. Hosting idilee certificate server origin irratti qabu adda: achitti saayitiin qofa traffic dubbisa.
Maallaqa keef kun maal jechuudha
Exchange middlebox duuba
Wallet web middlebox duuba
Wallet mallattoo offline waliin
Saayitii kamiyyuu daqiiqaa tokkotti ilaali
Nu ykn isaan amanuu hin qabdu. Middlebox deebii hundaa keessatti mallattoo dhiisa, namni kamiyyuu arguu dandaʼa.
Walletwwan beekamoo shan fudhannee eenyu isinii fi saayitii isaanii gidduutti taaʼu ilaalle
Hin tilmaamne, yaada nama biraa hin dubbifne: gaaffii idilee saayitiiwwanitti goone, header deebii fi certificate ilaalle. Buʼaan gadii, akka jirutti.
Namoonni hanga asitti dubbisaniin booda maal gaafatu
Cloudflare jecha salphaan maali?
Dhaabbata middlebox: saayitiin traffic isaa hunda server isaanii keessa erga, isaanis «eegu». «Eeguuf» hidhannoo kee isaan biratti hiiku. Akkasitti saayitiiwwan addunyaa afur keessaa tokko hojjetu.
Cloudflare password koo ni argaa?
Eeyyee. Hidhanni server isaa irratti xumurama, seeronni filtre docs akka jedhutti qaama gaaffii hundaa dubbisu - unka seenaa maqaa fayyadamaa fi password waliin qaama gaaffii sana. Kuusa ykn hangam yeroo, imaammata isaatiin toʼatama, ati mirkaneessuu hin dandeessu.
Maaliif saayitiin ani nama taʼuu mirkaneessuu na gaafata?
Kun saayitii miti, Cloudflare dha. Abbaan sakattaʼinsa bane, filtre middlebox murteessa: VPN, Tor, naannoo «shakkisiisaa», browser durii - challenge loop keessa kufita. Cloudflare ofii loops akkasii dokumantii keessatti amana.
Saayitiin Cloudflare duuba biyya koo keessatti hin banu. Maal gochuu dandaʼa?
Yeroo biyyi middlebox waliin loltan, fayyadamtoonni VPN argatu - ykn saayitii middlebox malee. Abbootiin saayitii furmaata dhugaa tokko qabu: Cloudflare ofii fi fayyadamtoota gidduu irraa haqi. Dhimmi Raashiyaa Dhugaa 07 keessatti akkamiitti saffisaan «saayitiin kufe» «middlebox ISP waliin walitti buʼe» taʼuu agarsiisa.
Kun Cloudflare qofa irratti?
Lakki. Middlebox kamiyyuu TLS of irratti xumuru akkana hojjeta: Amazon CloudFront fi AWS load balancers, Azure Front Door, Akamai, Fastly, Imperva. Saayitiiwwan gurguddoo kuma tokkoo addunyaa keessaa %71 middlebox duuba taaʼu: Cloudflare - isaan keessaa %58, Amazon - %7, Fastly - %5, Akamai - %2. Hosting idilee adda: achitti traffic fi certificate kan saayitii ofii.
Ani saayitii qaba. Maal gochuu qaba?
Kami caalaa barbaachisaa taʼe murteessi: «eeggumsa haleellaa irraa» moo password fayyadamtoota kee koodii nama biraa keessa hin darbine. Karoora fi setting kun hin jijjiiran - karoora kamiyyuu irratti cipher middlebox irratti xumurama. Walii galteen jira - proxy TLS hin hiikne stream maqaa serveriin qofa dabarsu. Server front keenya akkana hojjeta: eeggumsi traffic baayʼee irraa ni hafaa, middlebox plaintext hin jiru.