Chrome waggaa hedduuf saaayitiiwwan cuftuu malee isin sodaachise. Amma saaayitiin hundi qaba - saaayitiiwwan gurguddoo kudhan keessaa torban irratti gara middlebox geessa
Cuftuu fi HTTPS sababa tokkoof uumaman: isinii fi saaayitii gidduutti namni waan ergitaniin dubbisuu akka hin dandeenye. ISP kee, Wi-Fi kafee, mootummaan sarara irratti - hundi ciphertext qofa argu. Browserwwan waggaa hedduuf isin barsiisan: cuftuun hin jiru - password hin galchin.
Cloudflare proxy isinii fi saaayitii gidduutti taaʼu dha; Amazon CloudFront, Azure Front Door, Akamai fi Fastly walfaana hojjetu. «Halaawwan dandamachiisuuf» middlebox traffic cleartext keessatti arguu qaba. Kanaaf hidhanni kee server isaa irratti xumurama: achitti gaaffiin hiikama, seera isaa waliin mirkanaaʼa, sana booda qofa hidhannoo addaa irratti gara saaayitii ergame. Docs Cloudflare ofii TLS termination jedha - «the point where HTTPS traffic is decrypted so Cloudflare can inspect it». Amazon, Azure fi Akamai docs keessatti bakka walfakkaatuuf maqaa walfakkaatu fayyadamu.
Teeknikaadhaan kun man in the middle aadaa dha. Halaa irraa adda baʼuun tokko qofa: abbaan saaayitii yeroo saaayitii middlebox duuba kaaʼu itti galmaaʼe. Karoora ykn setting kun hin haqu: hanga saaayitiin middlebox duuba jirutti, encryption middlebox irratti xumurama - karoora hafeefi Enterprise irratti walfaana. Namni isin hin gaafanne, cuftuunis hin himu.
Hojii keessatti kun maal jechuudha - docs fi guyyaa irraa
Murtii hin qabnu. Dokumantii Cloudflare ofii, gabaasa balaa ofii fi barreessota ummataa qofa - guyyaa waliin, akka sararaan hundi sakattaʼamuuf.
Saaayitiiwwan gurguddoo kudhan keessaa torba - middlebox duuba
HTTP Archive 2025 akka jedhutti, saaayitiiwwan kuma tokkoo kan baayʼee daawwataman addunyaa keessaa %71 dokumentii HTML iyyuu middleboxiin kennu; top 10,000 keessatti - %70, top 100,000 keessatti - %62. Middleboxwwan sun eenyu: Cloudflare - saaayitii akkasii %58, sana booda Amazon CloudFront (%7), Fastly (%5), Akamai (%2) fi cloud load balancers. Saaayitiiwwan addunyaa hunda yoo lakkaaʼan, sadaffaan hundi middlebox duuba; Cloudflare qofa - saaayitii hunda keessaa %26 fi gabaa reverse-proxy %85.
WAF qaama gaaffii hundaa dubbisa - docs akka jedhutti
Seeronni Cloudflare «inspect the body of each incoming request», fi dirreen http.request.body.raw afaan seera isaanii keessatti «the unaltered HTTP request body» dha. Unka seenaa qaama gaaffii dha. Seenaa fi password keessa plaintext dha.
Cloudbleed, 2017: yaadannoon middlebox deebii birootti dhangalaʼe
Fulbaana 22, 2016 hanga Guraandhala 18, 2017 bug parser Cloudflare cinaacha yaadannoo saaayitii tokkoo deebii biraa keessa makuu: headerwwan, cinaacha gaaffii POST password waliin, cookie, furtuu API fi token. Cloudflare hits milyoona 1.2 lakkaaʼe; dhangalaʼuun cache barbaacha keessa gale - fuula 80,000 ol qulqulleeffame. Maxxansa maqaa Uber, OkCupid, Fitbit waame.
Sadaasa 2023: haleeltota furtuu hatameen Cloudflare seentan
Sadaasa 14 hanga 24, 2023 haleeltota - Cloudflare «nation-state» jedhee waama - credentials Okta breach keessatti hataman waliin sirna Cloudflare keessa hojjetan: wiki Confluence, tracker Jira, repo Bitbucket, repository 76 buufaman. Sana booda Cloudflare credentials 5,000 ol jijjiiree sirna 4,893 gamaaggale.
Switch tokko hundaaf
Adoolessa 2, 2019 - daqiiqaa 27, regex tokko WAF keessatti, traffic %82 buʼe. Waxabajjii 21, 2022 - daqiiqaa 75, data center 19. Sadaasa 18, 2025 - saʼaatii jaʼa dhihoo, «worst outage since 2019»: X, ChatGPT, Spotify, Shopify, Coinbase kufan. Mudde 5, 2025 - daqiiqaa 25 biraa. Guraandhala 20, 2026 - saʼaatii jaʼa, dogoggora BGP. Outagewwan keessaa tokkollee haleellaa hin turre.
Cloudflare ati nama taʼuu kee murteessa
Abbaan saaayitii sanduuqa mallatteessa - fi seensusaan isaaniiin osoo hin taane filtre Cloudflaretiin murtaaʼa. Docs isaanii «challenge loop, when the challenge appears again and again» ni amanu, VPN fi proxy waliin. 2016 irraa Cloudflare Tor akka «biyya» addaa tajaajila, gaaffii achii %94 hammeenya jedha; Tor Project «endless loop of CAPTCHAs» fi cufamuu teessoo Tor hanga %80 deebise.
Yeroo mootummaan middlebox waliin lolu: dhimma Raashiyaa
Onkoloolessa 2024 Cloudflare encryption ECH karoora hafee irratti ofumaan banu godhe. Sadaasa 6, 2024 saaayitiiwwan Cloudflare duuba ECH waliin ISP Raashiyaaf banuun dhaaban; Sadaasa 7 CMU SSOP (kutaa Roskomnadzor, toʼataa telekom Raashiyaa) ECH «karaa daangaa irra darbuu» jedhee abbootii akka dhaaban «ykn, caalaatti, CDN biyya keessaa fayyadaman» gorfate. Waxabajjii 9, 2025 irraa operatorwwan Raashiyaa afur gurguddoon traffic Cloudflare faayilaa kamiyyuu KB 16 jalqabaatti muran. Traffic Raashiyaa irraa %30 dhihoo buʼe; saaayitii web Raashiyaa %40 ol - 300,000 dhihoo - Cloudflare duuba taaʼu. Waxabajjii 2, 2026 FSB tajaajiloonni basaasaa alaa daataa bilbila ogeessota Raashiyaa «dandeettii teeknikaa» Cloudflare fi Fastly fayyadamuun walitti qaban jedhee labsite, fi dhimma Seera Yakkaa keewwata 272 fi 273 jalatti bane - ragaa teeknikaa hin agarsiifne, dhaabbattonnis hin deebifne. Cloudflare walfakkaataan 2022 irraa saaayitiiwwan UK Ministry of Defence waliigaltee mootummaa jalatti eega - Army, Royal Navy, RAF fi portal Defence Gateway fayyadamtoota 330,000f: £425k 2022-2025 fi £105k 2025-2026.
Karoorri walfakkaataan iddoo hunda: Amazon, Akamai, Azure, Fastly
Proxy ykn cloud load balancer kamiyyuu TLS of irratti xumuru walfaana hojjeta: Amazon CloudFront fi ALB, Azure Front Door fi Application Gateway, Akamai, Fastly, Imperva. Hundi WAF ofii qaama gaaffii dubbisu, cache ofii fi outage ofii qaba. Cloudflare guddaa fi dokumantii keessatti banamaa qofa. Hosting idilee certificate server origin irratti qabu adda: achitti saaayitiin qofa traffic dubbisa.
Maallaqa keef kun maal jechuudha
Exchange middlebox duuba
Wallet web middlebox duuba
Wallet mallattoo offline waliin
Saaayitii kamiyyuu daqiiqaa tokkotti ilaali
Nu ykn isaan amanuu hin qabdu. Middlebox deebii hundaa keessatti mallattoo dhiisa, namni kamiyyuu arguu dandaʼa.
Walletwwan beekamoo shan fudhannee eenyu isinii fi saaayitii isaanii gidduutti taaʼu ilaalle
Hin tilmaamne, yaada nama biraa hin dubbifne: gaaffii idilee saaayitiiwwanitti goone, header deebii fi certificate ilaalle. Buʼaan gadii, akka jirutti.
Namoonni hanga asitti dubbisaniin booda maal gaafatu
Cloudflare jecha salphaan maali?
Dhaabbata middlebox: saaayitiin traffic isaa hunda server isaanii keessa erga, isaanis «eegu». «Eeguuf» hidhannoo kee isaan biratti hiiku. Akkasitti saaayitiiwwan addunyaa afur keessaa tokko hojjetu.
Cloudflare password koo ni argaa?
Eeyyee. Hidhanni server isaa irratti xumurama, seeronni filtre docs akka jedhutti qaama gaaffii hundaa dubbisu - unka seenaa maqaa fayyadamaa fi password waliin qaama gaaffii sana. Kuusa ykn hangam yeroo, imaammata isaatiin toʼatama, ati mirkaneessuu hin dandeessu.
Maaliif saaayitiin ani nama taʼuu mirkaneessuu na gaafata?
Kun saaayitii miti, Cloudflare dha. Abbaan sakattaʼinsa bane, filtre middlebox murteessa: VPN, Tor, naannoo «shakkisiisaa», browser durii - challenge loop keessa kufita. Cloudflare ofii loops akkasii dokumantii keessatti amana.
Saaayitiin Cloudflare duuba biyya koo keessatti hin banu. Maal gochuu dandaʼa?
Yeroo biyyi middlebox waliin loltan, fayyadamtoonni VPN argatu - ykn saaayitii middlebox malee. Abbootiin saaayitii furmaata dhugaa tokko qabu: Cloudflare ofii fi fayyadamtoota gidduu irraa haqi. Dhimmi Raashiyaa Dhugaa 07 keessatti akkamiitti saffisaan «saaayitiin kufe» «middlebox ISP waliin walitti buʼe» taʼuu agarsiisa.
Kun Cloudflare qofa irratti?
Lakki. Middlebox kamiyyuu TLS of irratti xumuru akkana hojjeta: Amazon CloudFront fi AWS load balancers, Azure Front Door, Akamai, Fastly, Imperva. Saaayitiiwwan gurguddoo kuma tokkoo addunyaa keessaa %71 middlebox duuba taaʼu: Cloudflare - isaan keessaa %58, Amazon - %7, Fastly - %5, Akamai - %2. Hosting idilee adda: achitti traffic fi certificate kan saaayitii ofii.
Ani saaayitii qaba. Maal gochuu qaba?
Kami caalaa barbaachisaa taʼe murteessi: «eeggumsa haleellaa irraa» moo password fayyadamtoota kee koodii nama biraa keessa hin darbine. Karoora fi setting kun hin jijjiiran - karoora kamiyyuu irratti cipher middlebox irratti xumurama. Walii galteen jira - proxy TLS hin hiikne stream maqaa serveriin qofa dabarsu. Server front keenya akkana hojjeta: eeggumsi traffic baayʼee irraa ni hafaa, middlebox plaintext hin jiru.