cloudflare/sslconfig

Stars
1,287
Rank 36,546 (Top 0.8 %)
Language
License
BSD 3-Clause "New...
Created over 10 years ago
Updated over 1 year ago

cloudflare/sslconfig

cloudflare

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Cloudflare's Internet facing SSL configuration

sslconfig

Cloudflare's Internet facing SSL cipher configuration

This repository tracks the history of the SSL cipher configuration used for Cloudflare's public-facing SSL web servers. The repository tracks an internal Cloudflare repository, but dates may not exactly match when changes are made.

There is a single file called conf which contains the configuration used in Cloudflare's NGINX servers. This is only a fragment of the configuration.

ChaCha20/Poly1305 patch

Cloudflare uses a patch for OpenSSL that enables the ChaCha20/Poly1305 cipher suites and implements special logic to ensure it is only taken if it is the client's top cipher choice. Without this patch, the cipher suite choice in the configuration will not work correctly.

pingora

A library for building fast, reliable and evolvable network services.

quiche

🥧 Savoury implementation of the QUIC transport protocol and HTTP/3

cfssl

CFSSL: Cloudflare's PKI and TLS toolkit

workerd

The JavaScript / Wasm runtime that powers Cloudflare Workers

boringtun

Userspace WireGuard® Implementation in Rust

cloudflared

Cloudflare Tunnel client (formerly Argo Tunnel)

flan

A pretty sweet vulnerability scanner

miniflare

🔥 Fully-local simulator for Cloudflare Workers. For the latest version, see https://github.com/cloudflare/workers-sdk/tree/main/packages/miniflare.

wrangler-legacy

🤠 Home to Wrangler v1 (deprecated)

cloudflare-docs

Cloudflare’s documentation

tableflip

Graceful process restarts in Go

workers-rs

Write Cloudflare Workers in 100% Rust via WebAssembly

workers-sdk

⛅️ Home to Wrangler, the CLI for Cloudflare Workers®

wildebeest

Wildebeest is an ActivityPub and Mastodon-compatible server

gokey

A simple vaultless password manager in Go

ebpf_exporter

Prometheus exporter for custom eBPF metrics

cloudflare-go

The official Go library for the Cloudflare API

lol-html

Low output latency streaming HTML parser/rewriter with CSS selector-based API

orange

redoctober

Go server for two-man rule style file encryption and decryption.

cf-ui

💎 Cloudflare UI Framework

foundations

Cloudflare's Rust service foundations library.

next-on-pages

CLI to build and develop Next.js apps for Cloudflare Pages

hellogopher

Hellogopher: "just clone and make" your conventional Go project

production-saas

(WIP) Example SaaS application built in public on the Cloudflare stack!

bpftools

BPF Tools - packet analyst toolkit

cloudflare-blog

Cloudflare Blog code samples

templates

A collection of starter templates and examples for Cloudflare Workers and Pages

wrangler-action

🧙‍♀️ easily deploy cloudflare workers applications using wrangler and github actions

circl

CIRCL: Cloudflare Interoperable Reusable Cryptographic Library

cf-terraforming

A command line utility to facilitate terraforming your existing Cloudflare resources.

wirefilter

An execution engine for Wireshark-like filters

workers-chat-demo

pint

Prometheus rule linter/validator

utahfs

UtahFS is an encrypted storage system that provides a user-friendly FUSE drive backed by cloud storage.

terraform-provider-cloudflare

Cloudflare Terraform Provider

Stout

A reliable static website deploy tool

goflow

The high-scalability sFlow/NetFlow/IPFIX collector used internally at Cloudflare.

unsee

Alert dashboard for Prometheus Alertmanager

mitmengine

A MITM (monster-in-the-middle) detection tool. Used to build MALCOLM:

workers-graphql-server

🔥Lightning-fast, globally distributed Apollo GraphQL server, deployed at the edge using Cloudflare Workers

cloudflare-php

PHP library for the Cloudflare v4 API

react-gateway

Render React DOM into a new context (aka "Portal")

xdpcap

tcpdump like XDP packet capture

ahocorasick

A Golang implementation of the Aho-Corasick string matching algorithm

lua-resty-logger-socket

Raw-socket-based Logger Library for Nginx (based on ngx_lua)

mmap-sync

Rust library for concurrent data access, using memory-mapped files, zero-copy deserialization, and wait-free synchronization.

pages-action

speedtest

Component to perform network speed tests against Cloudflare's edge network

stpyv8

Python 3 and JavaScript interoperability. Successor To PyV8 (https://github.com/flier/pyv8)

nginx-google-oauth

Lua module to add Google OAuth to nginx

worker-typescript-template

ʕ •́؈•̀) TypeScript template for Cloudflare Workers

gokeyless

Go implementation of the keyless protocol

golibs

Various small golang libraries

sandbox

Simple Linux seccomp rules without writing any code

mmproxy

mmproxy, the magical PROXY protocol gateway

svg-hush

Make it safe to serve untrusted SVG files

boring

BoringSSL bindings for the Rust programming language.

cobweb

COBOL to WebAssembly compiler

rustwasm-worker-template

A template for kick starting a Cloudflare Worker project using workers-rs. Write your Cloudflare Worker entirely in Rust!

workers-types

TypeScript type definitions for authoring Cloudflare Workers.

lua-resty-cookie

Lua library for HTTP cookie manipulations for OpenResty/ngx_lua

cloudflare-ingress-controller

A Kubernetes ingress controller for Cloudflare's Argo Tunnels

node-cloudflare

Node.js API for Client API

serverless-registry

A Docker registry backed by Workers and R2.

cfweb3

workerskv.gui

(WIP) A cross-platform Desktop application for exploring Workers KV Namespace data

JSON.is

Open-source documentation for common JSON formats.

sqlalchemy-clickhouse

cloudflare.github.io

Cloudflare ❤️ Open Source

doom-wasm

Chocolate Doom WebAssembly port with WebSockets support

json-schema-tools

Packages for working with JSON Schema and JSON Hyper-Schema

chatgpt-plugin

Build ChatGPT plugins with Cloudflare's Developer Platform 🤖

chanfana

OpenAPI 3 and 3.1 schema generator and validator for Hono, itty-router and more!

tls-tris

crypto/tls, now with 100% more 1.3. THE API IS NOT STABLE AND DOCUMENTATION IS NOT GUARANTEED.

gortr

The RPKI-to-Router server used at Cloudflare

react-modal2

💭 Simple modal component for React.

isbgpsafeyet.com

Is BGP safe yet?

keyless

Cloudflare's Keyless SSL Server Reference Implementation

pp-browser-extension

Client for Privacy Pass protocol providing unlinkable cryptographic tokens

dog

Durable Object Groups

tubular

BSD socket API on steroids

go

Go with Cloudflare experimental patches

cloudflare-rs

Rust library for the Cloudflare v4 API

cloudflare-typescript

The official Typescript library for the Cloudflare API

puppeteer

Puppeteer Core fork that works with Cloudflare Browser Workers

shellflip

Graceful process restarts in Rust

kv-asset-handler

Routes requests to KV assets

mod_cloudflare

semver_bash

Semantic Versioning in Bash

cfssl_trust

CFSSL's CA trust store repository

doca

A CLI tool that scaffolds API documentation based on JSON HyperSchemas.

alertmanager2es

Receives HTTP webhook notifications from AlertManager and inserts them into an Elasticsearch index for searching and analysis

pmtud

Path MTU daemon - broadcast lost ICMP packets on ECMP networks

origin-ca-issuer

worker-template-router

Cloudflare-WordPress

A Cloudflare plugin for WordPress

cloudflare-docs-engine

A documentation engine built on Gatsby, powering Cloudflare’s docs https://github.com/cloudflare/cloudflare-docs

python-worker-hello-world

Python hello world for Cloudflare Workers

saffron

The cron parser powering Cron Triggers on Cloudflare Workers