事件更新:Cloudflare公告7/2大中斷肇因於WAF臭蟲導致佔用CPU過劇
昨天(7/2)晚間,CDN服務業者Cloudflare突然大中斷,導致許多採用該服務的網站無法正常顯示,引發台港網路諸多討論。
參考資料:Cloudflare大規模服務中斷 受害網站多為香港與台灣論壇網站
今日(7/3)早上,Cloudflare團隊發出說明信件,解釋服務中斷事件的發生原因,表示該事件肇因於Cloudflare的網頁應用防火牆(Web Application Firewall, WAF)的軟體部署錯誤,導致全球的Cloudflare主機的CPU用量暴增,在暫停WAF功能並移除軟體錯誤之後,27分鐘內重新恢復WAF功能及CDN服務。
信件原文:
Dear Cloudflare Customer,
Today at approximately 13:42 UTC we experienced a global service disruption that affected most Cloudflare traffic for 27 minutes.
The issue was triggered by a bug in a software deploy of the Cloudflare Web Application Firewall (WAF) which resulted in a CPU usage spike globally, and 502 errors for our customers. To restore global traffic we temporarily disabled certain WAF capabilities, removed the underlying software bug, then verified and re-enabled all WAF services.
We’re deeply sorry about how this disruption has impacted your services. Our engineering teams continue to investigate this issue and we will be sharing detailed incident report(s) on the Cloudflare blog.
~The Cloudflare Team