A worldwide outage at the network of cybersecurity firm Cloudflare Inc. has been resolved after several hours of disruption on Tuesday.
The outage had taken down the websites for everything from the chief US energy regulator, ChatGPT, the New Jersey transit authority and the social-media platform X. ChatGPT and X were among the services that were back online by 10 a.m. New York time.
A Cloudflare spokesperson said the company observed a “spike in unusual traffic” to one of its services around 6:20 a.m. ET, causing some traffic passing through its network to experience errors. The issue was fixed within six hours, according to the company.
The cause of the outage was a configuration file that is automatically generated to manage threat traffic, Jackie Dutton, a Cloudflare spokesperson said in a statement. There was no evidence of a cyberattack or malicious activity, the statement said.
“The file grew beyond an expected size of entries and triggered a crash in the software system that handles traffic for a number of Cloudflare’s services,” said Dutton.
The company has experienced several outages over the past few years.
In July 2019, a bug in Cloudflare’s software caused one part of its network to suck up computing resources, leading thousands of websites including that of Discord, Shopify Inc., SoundCloud and Coinbase around the world to go offline for as long as 30 minutes. In June 2022, Cloudflare suffered an outage that affected traffic in 19 of its data centers, also essentially shutting down major websites and services in an incident that lasted about an hour and a half.
Cloudflare’s software is used by hundreds of thousands of companies globally, acting as a buffer between their websites and end users and working to protect their sites from attacks that might overload them with traffic.
Last year, a faulty software update from the cybersecurity firm CrowdStrike Holdings Inc. crashed millions of devices operating on Microsoft Corp.’s Windows systems, disrupting a wide range of industries, including air travel, banks and health care.
CrowdStrike’s outage was the result of an error in a product that operates at the deepest levels of customers’ computers. By contrast, Cloudflare protects internet infrastructure such as websites and platforms, which is why many popular websites go down or are unreliable during Cloudflare outages. Cloudflare largely focuses on keeping websites online and fast, while CrowdStrike focuses on keeping computers and servers safe from attacks.
The down time Tuesday is the latest example of the internet’s reliance on “relatively few players,” Alan Woodward, professor of cybersecurity at University of Surrey, said, while describing Cloudflare as the “the biggest company you’ve never heard of.”
Anthropic PBC said its Claude AI chatbot was affected on Tuesday.