New Product Overview Webinar
Presenters
Jonathan Burling
Customer Success Manager
Nick McGourty
Business Development
Brian Mgrdichian
Solutions Engineer
For any question, please contact your Customer Success Manager or email successwebinars@cloudflare.com
Agenda
● Housekeeping
● Network Expansion
● New Enterprise Features
● Argo & Load Balancing Update (2017 Releases)
● New & Upcoming Products
○ Access + Demo (GA)
○ Workers + Demo (GA)
○ Argo Tunnel (GA)
○ Mobile SDK (Beta)
○ Stream + Demo (GA - Enterprise Only)
○ Spectrum + Demo (GA - Enterprise Only)
Housekeeping
● Ask questions in the “Questions” chat box in ReadyTalk.
● We’ll triage all questions at the end of the presentation.
● We’ll be emailing the slides and recording to those who’ve registered
through ReadyTalk.
● All attendees are muted.
Network Expansion
Network Updates
151
Data centers
globally
Cloudflare’s Global Anycast Network Keeps Growing
Increased Security, Performance and Speed
2x
Speeds up each
request by
10%
Internet requests
everyday
5M
Requests/second
Features Added for all Enterprise Customers
● Improved Logs
○ DNS Logs
○ Audit Logs
● Argo Tiered Caching
● Cloudflare Geo Key Manager
● Zone Lockdown & User Agent Blocking
Cloudflare DNS Analytics
Gain valuable insight into DNS traffic; filter and visualize data through a variety of metrics, such as query
count and average response time, on a domain-by-domain or specific DNS record basis.
Top Queries
See what the top valid
and invalid queries are.
Filter by Dimension
Filter DNS queries by
response code, data center,
query type, day of week,
subdomain, query name, TCP,
query size bucket, or
response size bucket.
Historical DNS Data
View the history of DNS
queries within specific
timeframe(s).
Geographic
Visualization
See where valid and invalid
DNS queries originate.
API Compatible
Use Cloudflare’s API to query
DNS Analytics data and
import into 3rd party tools
for deeper analysis.
DNS Analytics
Cloudflare Audit Logs
API Log Export
Export logs via API for
further filtering, inspection
and monitoring using any
log analysis tool
Customizable Filters
Whether for compliance
reviews or change monitoring,
easily pare down logs by the
desired field including: date,
user and domain.
Quick Log Review
Easily review audit logs and drill
down to detailed information
from the dashboard.
Simple Configuration Change Review
Make compliance reviews and monitoring configuration changes easy with Audit Logs
Cloudflare Argo Tiered Caching - Included In Enterprise Plan
Reduce access to your origin servers and save bandwidth
Origin
Tier 1
Tier 2
Cloudflare Data Centers
Tier 1 data centers propagate content
to a global network of 120+ PoPs
Reduced Costs
Minimizes static content requests to the origin server
reducing latency, server load and bandwidth usage
2017 Product Release Updates
● Argo
○ Tiered Caching
○ Smart Routing Analytics
● Load Balancing
○ Configurable Weighting
○ Event Logs
○ Session Affinity
Response Time (Origin Cloudflare)
Response Time Improvement by Geography
New & Upcoming Releases
Cloudflare Access
Cloudflare Access
Secure Application Access Without A VPN
Control User Access to Applications
Enforce access to specific applications on a per-user
basis with easy-to-create and manage rules.
Deploy and Manage Access Control Quickly
Leverage existing identity providers and authenticate on
the Cloudflare global network to provide Single Sign On.
Deliver Fast Applications to Devices Anywhere
Users get easy, secure, and fast access to internal
applications wherever they are, from whatever device.
Monitor User Access and Change Logs
View and search real-time access logs in the dashboard
or integrate with a third party SIEM.
C
loudflare
Access
Cloudflare Access Supported IDPs
● GSuite
● Okta
● Azure Active Directory
● Facebook
● Github
● Yandex
● Centrify
● OneLogin
C
loudflare
Access
Cloudflare Access Demo
Cloudflare Workers
Cloudflare Workers
Run JavaScript Service Workers in Cloudflare's 150+ data centers around the world
Using a Service Worker, developers can:
● Respond dynamically when the origin server is unreachable
● Implement custom authentication and authorization
mechanisms
● Deploy fast fixes to a site in seconds, without having to
update the origin server
● Use custom logic to decide which requests are cacheable
and improve cache hit rate
● Expand HTML templates to fetch only dynamic content from
the origin
● Create custom security rules and filters to block unwanted
visitors and bots
● Generate parallel requests to different services and
combine the responses
● Perform data sanitization and validation before sending it to
the origin
Since Cloudflare Workers run in Cloudflare’s data centers,
not in the user’s browser, they can include sensitive logic and
will work with any browser or API client.
C
loudflare
W
orkers
https://developers.cloudflare.com/workers/
Increased User Personalization
Respond dynamically with code on the edge.
Run Complex Business Logic at the Edge
Cloudflare Workers are deployed to Cloudflare’s global data centers.
Reduced Infrastructure Costs
Shift more request handling to the edge.
Improved Security Posture
Apply custom security rules and filtering logic.
Users Origin / APIs
C
loudflare
W
orkers
Cloudflare Workers
Deliver Personalized
User Experiences Detect Bot ActivitySimplify A/B Testing
C
loudflare
W
orkers
Aggregating API
Responses
Identifying Users
at the Edge
So much more...
What can you do with Workers?
Cloudflare Workers Demo
Cloudflare Tunnel
Cloudflare Argo Tunnel
Stop Direct Attacks Against the Web Server’s Origin with a Secure Agent
Protect web servers from DDoS attacks directly against their
origin’s public IP address
When connected directly to Cloudflare, web servers can no longer be
directly attacked through open ports on public IP addresses with DDoS or
data theft attempts, keeping applications and APIs online and performant.
Safely and easily expose development environments to the
Internet
Developers can expose the localhost on their laptop directly to the public
Internet for testing code and speeding up development, while also being
protected from attacks.
Accelerate Origin Traffic
Argo Tunnels not only protects web servers from direct attacks, but also
accelerates origin requests through a persistent HTTP/2 connection.
With Argo Smart routing, origin requests bypass congested networks and
are routed on the shortest network distance to ensure fast delivery.
Argo
Tunnel
2
1
3
localhost
HTTP/2
206.221.179.46
New
GA
Cloudflare Mobile SDK
Building Engaging Apps on Any Network
INFRASTRUCTURE
Mobile
Slow Mobile Apps
Mobile clients introduce performance and content delivery
constraints that hurt user experience
“Our users never complain about poor
connectivity; they complain our app doesn’t
work. After integrating the SDK, my
engineering team has visibility where
previously we had none. Cloudflare’s Mobile
SDK delivers the missing link in app experience
monitoring.”
Ben Yule, CTO
M
obileSD
K
Slow Mobile Applications
Slow Mobile Applications
Origin
Mobile devices have limited
compute, memory and power
which slows down processing
content like images or client-side
code
Mobile apps use APIs which
increase calls to the origin
Mobile devices have
slower and more erratic
networks which hurts
throughput
M
obileSD
K
https://developers.cloudflare.com/mobile-sdk/
Cloudflare Stream
Cloudflare Stream - Enterprise Addon
Easy video from upload to delivery
● All-in-one solution: No integration work necessary, allowing you to focus
on creating the best video experience, not managing different services for
each of those solutions.
● Focus on speed: Eliminates buffering and makes video instant
How It Works
1. Upload a video to Cloudflare
2. Cloudflare stores the video, encodes it to different codecs and stores the newly
encoded versions
3. Cloudflare provides an embed code which includes the Cloudflare video player
4. Cloudflare uses adaptive streaming to fetch the best quality video for that
network connection and device
5. The video “just works” - looks great and loads quickly on any device type and
network connection
Stream
https://developers.cloudflare.com/stream/
Stream Demo
Cloudflare Spectrum
Proxying beyond HTTP/HTTPS
Cloudflare Spectrum
Proxy non-HTTP/S TCP traffic through Cloudflare
Mitigate DDoS for TCP Protocols and Ports
Cloudflare Spectrum proxies all non-HTTPS TCP traffic through
the same 120+ cloudflare data centers, ensuring protection
against DDoS attacks targeting layers 3 and 4 across open ports.
Encrypt Non-HTTP/S TCP Traffic
Cloudflare Spectrum encrypts non-HTTP/S TCP traffic with
Universal SSL to protect against snooping of data in transit.
Block Traffic by IP or IP Range
Spectrum integrates with Cloudflare’s IP Firewall so that traffic
from specific IP or IP ranges can be dropped at the edge
C
loudflare
Spectrum
2
1
Client
Encrypted
TCP Traffic
SSH
SMTP
SFTP
SSH
SMTP
SFTP
3
Client
SSH
SMTP
SFTP
IP
10.0.0.1
10.0.0.1
https://developers.cloudflare.com/spectrum/
Cloudflare Spectrum Demo
Questions?
For any questions, or to arrange trials of these products, please contact either:
● Your Customer Success Manager
● Successwebinars@cloudflare.com
Thanks!
Thanks for your time today.

New Products Overview: Use Cases and Demos

  • 1.
  • 2.
    Presenters Jonathan Burling Customer SuccessManager Nick McGourty Business Development Brian Mgrdichian Solutions Engineer For any question, please contact your Customer Success Manager or email successwebinars@cloudflare.com
  • 3.
    Agenda ● Housekeeping ● NetworkExpansion ● New Enterprise Features ● Argo & Load Balancing Update (2017 Releases) ● New & Upcoming Products ○ Access + Demo (GA) ○ Workers + Demo (GA) ○ Argo Tunnel (GA) ○ Mobile SDK (Beta) ○ Stream + Demo (GA - Enterprise Only) ○ Spectrum + Demo (GA - Enterprise Only)
  • 4.
    Housekeeping ● Ask questionsin the “Questions” chat box in ReadyTalk. ● We’ll triage all questions at the end of the presentation. ● We’ll be emailing the slides and recording to those who’ve registered through ReadyTalk. ● All attendees are muted.
  • 5.
  • 6.
    151 Data centers globally Cloudflare’s GlobalAnycast Network Keeps Growing Increased Security, Performance and Speed 2x Speeds up each request by 10% Internet requests everyday 5M Requests/second
  • 7.
    Features Added forall Enterprise Customers ● Improved Logs ○ DNS Logs ○ Audit Logs ● Argo Tiered Caching ● Cloudflare Geo Key Manager ● Zone Lockdown & User Agent Blocking
  • 8.
    Cloudflare DNS Analytics Gainvaluable insight into DNS traffic; filter and visualize data through a variety of metrics, such as query count and average response time, on a domain-by-domain or specific DNS record basis. Top Queries See what the top valid and invalid queries are. Filter by Dimension Filter DNS queries by response code, data center, query type, day of week, subdomain, query name, TCP, query size bucket, or response size bucket. Historical DNS Data View the history of DNS queries within specific timeframe(s). Geographic Visualization See where valid and invalid DNS queries originate. API Compatible Use Cloudflare’s API to query DNS Analytics data and import into 3rd party tools for deeper analysis. DNS Analytics
  • 9.
    Cloudflare Audit Logs APILog Export Export logs via API for further filtering, inspection and monitoring using any log analysis tool Customizable Filters Whether for compliance reviews or change monitoring, easily pare down logs by the desired field including: date, user and domain. Quick Log Review Easily review audit logs and drill down to detailed information from the dashboard. Simple Configuration Change Review Make compliance reviews and monitoring configuration changes easy with Audit Logs
  • 10.
    Cloudflare Argo TieredCaching - Included In Enterprise Plan Reduce access to your origin servers and save bandwidth Origin Tier 1 Tier 2 Cloudflare Data Centers Tier 1 data centers propagate content to a global network of 120+ PoPs Reduced Costs Minimizes static content requests to the origin server reducing latency, server load and bandwidth usage
  • 11.
    2017 Product ReleaseUpdates ● Argo ○ Tiered Caching ○ Smart Routing Analytics ● Load Balancing ○ Configurable Weighting ○ Event Logs ○ Session Affinity
  • 12.
  • 13.
  • 14.
  • 15.
  • 16.
    Cloudflare Access Secure ApplicationAccess Without A VPN Control User Access to Applications Enforce access to specific applications on a per-user basis with easy-to-create and manage rules. Deploy and Manage Access Control Quickly Leverage existing identity providers and authenticate on the Cloudflare global network to provide Single Sign On. Deliver Fast Applications to Devices Anywhere Users get easy, secure, and fast access to internal applications wherever they are, from whatever device. Monitor User Access and Change Logs View and search real-time access logs in the dashboard or integrate with a third party SIEM. C loudflare Access
  • 17.
    Cloudflare Access SupportedIDPs ● GSuite ● Okta ● Azure Active Directory ● Facebook ● Github ● Yandex ● Centrify ● OneLogin C loudflare Access
  • 18.
  • 19.
  • 20.
    Cloudflare Workers Run JavaScriptService Workers in Cloudflare's 150+ data centers around the world Using a Service Worker, developers can: ● Respond dynamically when the origin server is unreachable ● Implement custom authentication and authorization mechanisms ● Deploy fast fixes to a site in seconds, without having to update the origin server ● Use custom logic to decide which requests are cacheable and improve cache hit rate ● Expand HTML templates to fetch only dynamic content from the origin ● Create custom security rules and filters to block unwanted visitors and bots ● Generate parallel requests to different services and combine the responses ● Perform data sanitization and validation before sending it to the origin Since Cloudflare Workers run in Cloudflare’s data centers, not in the user’s browser, they can include sensitive logic and will work with any browser or API client. C loudflare W orkers https://developers.cloudflare.com/workers/
  • 21.
    Increased User Personalization Responddynamically with code on the edge. Run Complex Business Logic at the Edge Cloudflare Workers are deployed to Cloudflare’s global data centers. Reduced Infrastructure Costs Shift more request handling to the edge. Improved Security Posture Apply custom security rules and filtering logic. Users Origin / APIs C loudflare W orkers Cloudflare Workers
  • 22.
    Deliver Personalized User ExperiencesDetect Bot ActivitySimplify A/B Testing C loudflare W orkers Aggregating API Responses Identifying Users at the Edge So much more... What can you do with Workers?
  • 23.
  • 24.
  • 25.
    Cloudflare Argo Tunnel StopDirect Attacks Against the Web Server’s Origin with a Secure Agent Protect web servers from DDoS attacks directly against their origin’s public IP address When connected directly to Cloudflare, web servers can no longer be directly attacked through open ports on public IP addresses with DDoS or data theft attempts, keeping applications and APIs online and performant. Safely and easily expose development environments to the Internet Developers can expose the localhost on their laptop directly to the public Internet for testing code and speeding up development, while also being protected from attacks. Accelerate Origin Traffic Argo Tunnels not only protects web servers from direct attacks, but also accelerates origin requests through a persistent HTTP/2 connection. With Argo Smart routing, origin requests bypass congested networks and are routed on the shortest network distance to ensure fast delivery. Argo Tunnel 2 1 3 localhost HTTP/2 206.221.179.46
  • 26.
    New GA Cloudflare Mobile SDK BuildingEngaging Apps on Any Network
  • 27.
    INFRASTRUCTURE Mobile Slow Mobile Apps Mobileclients introduce performance and content delivery constraints that hurt user experience “Our users never complain about poor connectivity; they complain our app doesn’t work. After integrating the SDK, my engineering team has visibility where previously we had none. Cloudflare’s Mobile SDK delivers the missing link in app experience monitoring.” Ben Yule, CTO M obileSD K Slow Mobile Applications
  • 28.
    Slow Mobile Applications Origin Mobiledevices have limited compute, memory and power which slows down processing content like images or client-side code Mobile apps use APIs which increase calls to the origin Mobile devices have slower and more erratic networks which hurts throughput M obileSD K https://developers.cloudflare.com/mobile-sdk/
  • 29.
  • 30.
    Cloudflare Stream -Enterprise Addon Easy video from upload to delivery ● All-in-one solution: No integration work necessary, allowing you to focus on creating the best video experience, not managing different services for each of those solutions. ● Focus on speed: Eliminates buffering and makes video instant How It Works 1. Upload a video to Cloudflare 2. Cloudflare stores the video, encodes it to different codecs and stores the newly encoded versions 3. Cloudflare provides an embed code which includes the Cloudflare video player 4. Cloudflare uses adaptive streaming to fetch the best quality video for that network connection and device 5. The video “just works” - looks great and loads quickly on any device type and network connection Stream https://developers.cloudflare.com/stream/
  • 31.
  • 32.
  • 33.
    Cloudflare Spectrum Proxy non-HTTP/STCP traffic through Cloudflare Mitigate DDoS for TCP Protocols and Ports Cloudflare Spectrum proxies all non-HTTPS TCP traffic through the same 120+ cloudflare data centers, ensuring protection against DDoS attacks targeting layers 3 and 4 across open ports. Encrypt Non-HTTP/S TCP Traffic Cloudflare Spectrum encrypts non-HTTP/S TCP traffic with Universal SSL to protect against snooping of data in transit. Block Traffic by IP or IP Range Spectrum integrates with Cloudflare’s IP Firewall so that traffic from specific IP or IP ranges can be dropped at the edge C loudflare Spectrum 2 1 Client Encrypted TCP Traffic SSH SMTP SFTP SSH SMTP SFTP 3 Client SSH SMTP SFTP IP 10.0.0.1 10.0.0.1 https://developers.cloudflare.com/spectrum/
  • 34.
  • 35.
    Questions? For any questions,or to arrange trials of these products, please contact either: ● Your Customer Success Manager ● Successwebinars@cloudflare.com
  • 36.