Cloudflare says a BYOIP pipeline change unintentionally withdrew customer prefixes; the report excludes malicious activity as the cause.
Cloudflare · inspect the source ↗INCIDENT BRIEF / SERVICE OUTAGE
Cloudflare BYOIP outage: deletion workflows need bounded recovery
Stopping a cleanup task does not necessarily restore the objects and service bindings it already removed. Before automating bulk deletion, bound the eligible set, define a maximum change count and retain a recoverable configuration snapshot. Separate reachability restoration from completion of the recovery workflow. Use the preserved provider account below to distinguish reported facts from the proposed review exercise.
01 / SOURCE-ATTRIBUTED REPORTING
What the evidence establishes.
The provider reports about 1,100 withdrawn prefixes and notes that not all BYOIP customers were affected.
Cloudflare · inspect the source ↗Cloudflare distinguishes errors on the resolver website from DNS resolution, which it says remained unaffected.
Cloudflare · inspect the source ↗02 / KEEP THE SEQUENCE
A dated record.
Reported incident date
Cloudflare says a BYOIP pipeline change unintentionally withdrew customer prefixes; the report excludes malicious activity as the cause.
Source reference ↗
Dates and time zones follow the cited report where specified. A report date is distinct from the incident date and from our review.
03 / GOVERNATLAS EDITORIAL ANALYSIS
Make the lesson useful.
These are proposed review and trial activities inspired by the reported event. They are not completed tests or claims that a particular control guarantees prevention.
Rehearse the inverse of a destructive workflow
Stopping a cleanup task does not necessarily restore the objects and service bindings it already removed. Before automating bulk deletion, bound the eligible set, define a maximum change count and retain a recoverable configuration snapshot. Separate reachability restoration from completion of the recovery workflow.
BRING THIS INTO YOUR REVIEW
Open the working guide ↗In a sandbox, exercise an empty or malformed deletion filter. Confirm the workflow fails safely, inspect the proposed object set and restore a small known configuration from a snapshot before allowing broader execution.
FROM READING TO A REVIEW YOU CAN OWN
What will you examine next?
A reported failure is a reason to ask a precise question about your own service. It does not establish that your configuration shares the same weakness. Start with the workflow, deployment and dependencies you can identify, then decide which proposed activity is relevant.
For each relevant lesson, name an accountable role, describe the evidence you would request and define an authorized trial before performing it. Keep “not checked” distinct from a recorded observation. If a check reveals a gap, retain its scope and next action rather than converting the observation into a supplier-wide verdict.
Use this portable record in a review, renewal discussion or continuity exercise. A material configuration change, a revised incident account or the completion of an action can trigger your next review. Your entries remain your working notes; publication evidence and your own acceptance decision are separate records.
Use non-sensitive roles and evidence references. Entries stay in this open page and reset on reload; download before leaving. This tool performs no tests and produces no readiness score.
1 unassigned owner · 1 activity not checked
Define a safe, measurable rehearsal
Record the normal result before changing anything. Agree an authorized test boundary, an observable stop condition and who can stop the exercise. Check restored configuration and unfinished work separately. These entries are your plan, not permission to test a service.
04 / LEAVE UNCERTAINTY VISIBLE
What this record does not establish.
This is an attributed review of a preserved provider account, not an independent reconstruction or a finding about current reliability.
Customer-specific losses, exposure and recovery outcomes are not established by these passages. The proposed exercise has not been performed by GovernAtlas.
Geography: The report describes service scope below. No single affected-user location is inferred from infrastructure, company headquarters or routing origin.
05 / THE EVIDENCE RECORD
Sources & editorial review.
Cloudflare outage on February 20, 2026 ↗
Cloudflare · captured 2026-10-17 (UTC)
Inspect preserved provenance
- Source
- cddc3563-37e1-4954-a770-52eea675c3a7
- Observation
- c36290af-2e44-42ee-87f6-16a932eaf52b
- SHA-256
- 3c42328124ca851013119d1c5b1288928e7bcb28c5ca035bd8ae16b6c658cd8d
Reporting and proposed methods by GovernAtlas editorial. Published review: 2026-10-17 (UTC). Revision 1. Preserved source bytes identify the material reviewed; they do not independently verify the provider’s account.
Submit a correction with supporting evidence ↗