Cloudflare problems and complaints, from 45 public threads
Cloudflare · cloudflare.com · Hosting and deployment
CDN, DNS, security and edge platform including Workers and Pages.
4 recurring themes · 27 recent reports · 24 older (7 of them belong to the recurring themes listed here) · 45 source threads · updated 2026-10
45 source threads read, 27 recent reports, 4 recurring themes. The 3 that come up most:
Watch Cloudflare: email me when new reports are addedStart free to save, compare and export
- Challenges falsely block legitimate users 9 reports · 10 source threads
“they're especially frustrating for blind users, people who have privacy settings in their browser (hi Cloudflare!), etc”
- Human verification feels intrusive 3 reports · 3 source threads
The user frequently encounters Cloudflare popups while browsing on an iPhone, including without a VPN or iCloud Private Relay, and finds them frustrating. Hacker News, 2026-09 ↗
- Challenges disrupt non-browser clients 3 reports · 3 source threads
“fingerprinting is rampant and there are JS challenges in cloudflare, imperva, etc which make it trickier”
Work at Cloudflare? Claim this page to reply to reports and run a public board, roadmap and changelog, free.
Add this to your README or docs
Docs or README footer: sends readers to give feedback on Cloudflare
Show the code
[](https://friction.grain64.com/p/cloudflare/submit/?utm_source=badge&utm_medium=embed&utm_content=cta)
<a href="https://friction.grain64.com/p/cloudflare/submit/?utm_source=badge&utm_medium=embed&utm_content=cta"><img src="https://friction.grain64.com/badge/cloudflare.svg?form=cta" alt="Report a problem or request a feature for Cloudflare" height="20"></a>
For researchers and write-ups: the live count for Cloudflare
Show the code
[](https://friction.grain64.com/p/cloudflare/?utm_source=badge&utm_medium=embed&utm_content=reports)
<a href="https://friction.grain64.com/p/cloudflare/?utm_source=badge&utm_medium=embed&utm_content=reports"><img src="https://friction.grain64.com/badge/cloudflare.svg" alt="Cloudflare user feedback on Friction" height="20"></a>
Every report above quotes a real commenter and links to the comment it came from. Add what you have seen on Cloudflare: Pricing quirks, contract terms and setup effort inside paid accounts.
Recurrence: Fair (4 recurring themes, all years)
No reports match these filters.
Pain points 4 recurring themes · 22 reports
| Report | Area | Severity | Support | Last seen |
|---|---|---|---|---|
|
Challenges falsely block legitimate users
Legitimate visitors are repeatedly challenged, blocked, or trapped in loops when trying to access websites and services. | ||||
| Cloudflare challenges affect privacy-conscious browser users The author says their browser setup frequently triggers Cloudflare challenges, which they find frustrating. Affects: Privacy-conscious browser users |
Reliability & bugs | Annoyance | 2 sources | 2024-10 |
| ||||
| Cloudflare CAPTCHA loops block access in some browsers | Reliability & bugs | Blocks work | 1 source | 2026-05 |
| Cloudflare CAPTCHA repeatedly blocked access to a paid portal | Reliability & bugs | Blocks work | 1 source | 2025-05 |
| CAPTCHA wall blocks access to Danish parliament site | UI & usability | Blocks work | 1 source | 2024-08 |
| Cloudflare flags VPN users and privacy-focused browsers | Reliability & bugs | Annoyance | 1 source | 2026-03 |
| Cloudflare blocks access to websites and purchases | Reliability & bugs | Blocks work | 1 source | 2023-10 |
| Bot detection traps Firefox users in login loops | Reliability & bugs | Blocks work | 1 source | 2023-09 |
| Legitimate residential user repeatedly caught in Cloudflare challenge loop | Reliability & bugs | Blocks work | 1 source | 2023-03 |
| Security level above Low triggers false positives | Reliability & bugs | Annoyance | 1 source | 2012-05 |
|
Turnstile excludes some browser configurations
Turnstile challenges can require JavaScript or fingerprintable features and may fail for Linux and Firefox users. | ||||
| Turnstile blocks Linux and Firefox users The author says Turnstile blocks users when they are on Linux or Firefox, making it difficult for their team to protect content without excluding those visitors. Affects: Linux and Firefox users |
Permissions & security | Blocks work | 1 source | 2026-03 |
| ||||
| Turnstile may require fingerprintable WebGL for some users | Permissions & security | Annoyance | 1 source | 2026-06 |
| Turnstile requires JavaScript and presents a challenge | Permissions & security | Annoyance | 1 source | 2026-06 |
|
Human verification feels intrusive
Frequent challenge popups and secure-browser checks interrupt users, including on mobile devices. | ||||
| Cloudflare challenge popups appear frequently on iPhone The user frequently encounters Cloudflare popups while browsing on an iPhone, including without a VPN or iCloud Private Relay, and finds them frustrating. |
UI & usability | Annoyance | 1 source | 2026-09 |
| ||||
| Verify Human challenges are intrusive | UI & usability | Annoyance | 1 source | 2023-09 |
| Frustrating secure-browser checks | UI & usability | Annoyance | 1 source | 2022-09 |
|
Challenges disrupt non-browser clients
Browser-based challenges interfere with APIs, RSS readers, and other non-browser requests. | ||||
| Cloudflare JS challenges make simple API scraping cumbersome The author says Cloudflare's JavaScript challenges complicate API reverse engineering, sometimes requiring a full browser and virtual screen just to perform a simple task. Affects: People reverse engineering APIs |
Permissions & security | Annoyance | 1 source | 2024-11 |
| ||||
| Cloudflare challenges can block RSS readers and APIs | Integrations | Annoyance | 1 source | 2024-10 |
| I'm Under Attack mode serves browser challenges to visitors | Other | Annoyance | 1 source | 2022-05 |
| Cache rules added 300–600 ms of latency to routes Enabling a cache rule for a specific path added substantial latency to every route, making the configuration untenable and difficult to diagnose. The user says the issue appeared fixed when they tried again later. |
Performance | Blocks work | 1 source | 2026-10 |
| ||||
Feature requests no recurring themes yet · 1 report
| Report | Area | Severity | Support | Last seen |
|---|---|---|---|---|
| Add transaction support to D1 The author says D1 does not support transactions, which makes handling writes and retries more complex. They identify transaction support as one of the missing capabilities affecting their decision not to build new products on D1. Affects: Teams building on D1 |
API & developer experience | Annoyance | 1 source | 2026-04 |
| ||||
| Improve Next.js support in Cloudflare Pages The author finds Cloudflare Pages' support for Next.js frustrating and asks Cloudflare to improve it, but does not specify a particular limitation. |
Integrations | Annoyance | 1 source | 2023-01 |
| ||||
Workarounds no recurring themes yet · 2 reports
| Report | Area | Severity | Support | Last seen |
|---|---|---|---|---|
| Registrar escalation needed to remove cloned scam sites The author says Cloudflare was ineffective for taking down cloned scam websites and they had to contact the registrar directly to get them removed. Affects: People reporting cloned scam websites |
Support | Blocks work | 1 source | 2024-08 |
| ||||
| Image-heavy site requires another CDN to reduce costs The author says Cloudflare cannot be used primarily for images under its policy, so they place BunnyCDN in front of Cloudflare to serve their image-heavy site and reduce bills. Affects: Image-heavy site operators |
Pricing & plans | Annoyance | 1 source | 2026-06 |
| ||||
| Cloudflare kept routing to the old IP for hours After the app's IP changed, Cloudflare continued routing to the old IP for hours when the orange-cloud proxy was enabled. Disabling the proxy for a couple of hours and re-enabling it reset the routing for the author. |
Reliability & bugs | Blocks work | 1 source | 2022-11 |
| ||||
| IPv6 users hit HCaptcha challenges without IPv6 support The customer's IPv6-only users encounter Cloudflare challenge pages, but the HCaptcha provider does not support IPv6. The customer uses an alternate domain without Cloudflare as a workaround. Affects: Website owner and IPv6-only users |
Integrations | Blocks work | 1 source | 2022-01 |
| ||||
| CAPTCHAs obstruct automated malicious-site analysis The author says CAPTCHAs are being abused to hide malicious websites from automated analysis tools and plans to evaluate CAPTCHA bypass services. Affects: Automated website-analysis service |
Integrations | Annoyance | 1 source | 2023-08 |
| ||||
Switching reasons no recurring themes yet · 2 reports
| Report | Area | Severity | Support | Last seen |
|---|---|---|---|---|
| Cloudflare Tunnel does not support the needed keep-alive The author says Cloudflare Tunnel was not compatible with their keep-alive needs, so they switched to ngrok for the work project. |
Reliability & bugs | Causes churn | 1 source | 2024-12 |
| ||||
| Poor Zero Trust usability is prompting a move to a self-managed proxy The author finds the Zero Trust portal and its integration with the rest of Cloudflare difficult to use and is close to building a replacement reverse proxy. |
UI & usability | Causes churn | 1 source | 2024-08 |
| ||||
45 public Hacker News threads, 2012 to 2026, each linked. How the data is built · Download the 14 open Cloudflare reports as CSV