The digital world blinked on the 18th of November 2025, a day that was intense for a few hours; half the internet went dark due to a fault on Cloudflare’s internal network.
From ChatGPT and X to online stores, banking dashboards, and countless small business websites, a single fault inside Cloudflare’s global network cascaded outward, reminding the world how much of the modern web hangs on invisible threads.
The outage began late in the morning on 18 November 2025, when Cloudflare suddenly started generating waves of HTTP 500 errors across sites using its services. Users experienced everything from pages refusing to load to login failures to complete service blackouts. Even Cloudflare’s own dashboard became sluggish and unstable — never a comforting sign when millions rely on you to stay online.
A Tiny File With Massive Consequences
According to Cloudflare’s internal review, the chaos started with something surprisingly ordinary: a configuration file used for bot management. Under normal circumstances, this file contains a tidy set of rules that help Cloudflare distinguish between real users and automated traffic.
But yesterday, that file ballooned far beyond what the system expected.
A permissions glitch inside Cloudflare’s database began spitting out an unusually large number of entries. The bot-management system dutifully gathered them up, packaged them into the “feature file,” and pushed it across Cloudflare’s entire global network. The moment the oversized file reached Cloudflare’s proxy and traffic-routing layer, the software buckled. These systems were only designed to handle a modest number of entries — not the avalanche they suddenly received.
Not a Cyberattack, Despite the Scale
“With half the internet winking out at once, rumours of a cyberattack spread fast. But Cloudflare’s engineering team quickly shut down that speculation. The company confirmed that there was no evidence of an attack — this was an internal failure, not an external breach.”
The Race to Restore Order
Once engineers identified the culprit, they halted the generation of the faulty configuration, stopped its propagation and manually injected a valid version. From there, Cloudflare began rebooting affected services region by region.
Cloudflare sits quietly behind much of the modern internet — speeding up websites, protecting traffic, balancing load, and absorbing attacks. When Cloudflare stumbles, the online world feels it immediately.
November 18, 2025, was another reminder of how fragile digital infrastructure can be, but also how quickly expert teams restore order when the web goes dark.
