Cloudflare

Drupal and EmDash point to different assumptions about how publishing systems should be built and operated. The comparison places Drupal’s established governance, workflow, and extension model against EmDash’s beta-preview, Astro-based approach to serverless publishing and programmatic content operations. The issue is less about which CMS has more features and more about which operating model fits an organisation’s infrastructure, editorial control, development workflow, and tolerance for newer technology. ...more

A technical post-mortem outlines how automated traffic drove CPU usage on a Drupal 11 production platform to 94%, exposing gaps in rate limiting, Varnish cache-key handling, and application-level protection. The scenario traces the incident from the first New Relic alert through access-log analysis, Cloudflare mitigation, Varnish query-string normalization, and recovery, offering a practical view of how infrastructure weaknesses can compound under abnormal traffic. ...more

Bot-driven search abuse, overloaded indexing queues, and database-backed caching combined to destabilise a high-traffic Drupal 9 platform in a recent technical analysis published by Talish Khan. The post explains how architectural fixes involving Redis, Cloudflare WAF rules, and queue management restored stability without requiring expensive database scaling. ...more

Written by Randy Fay and published by DDEV, the post introduces a redesigned ddev share system in DDEV v1.25.0. The release adds a modular provider architecture and a new Cloudflare Tunnel option that allows developers to share local environments without account setup or authentication tokens. ...more

Capellic outlines a detailed approach to reducing uncached traffic caused by AI bots on Drupal faceted search pages. The article compares mitigation strategies using Cloudflare WAF, Pantheon AGCDN, and architectural changes via Facets 3 and Better Exposed Filters. ...more

Modern bots bypass Drupal’s traditional defences, inflating costs and degrading performance. Promet Source explains how Cloudflare WAF, properly deployed, offers scalable protection for public sector Drupal sites. ...more

As AI scrapes content without driving traffic, platforms like Cloudflare, Fastly, and Drupal are pushing back. Explore the growing tools and alliances reshaping the open web’s survival strategy. ...more

Matthew Prince of Cloudflare introduces “Content Independence Day,” a new policy blocking AI crawlers by default unless they compensate content creators. He outlines plans for a creator–AI marketplace that values original content by its knowledge contribution. This initiative aims to restore traffic-based revenue and protect publishers in an AI-driven web. ...more

Dries Buytaert calls for a content licensing marketplace to ensure AI companies compensate creators for training data. The proposed platform would combine stock-photo licensing models with automated pricing, enabling creators of all sizes to set terms and receive payments when AI firms use their content. ...more

Misconfigured servers can undo even the best Drupal code. Learn how to harden your server with proven tactics—from HTTPS enforcement to file upload controls and rate limiting. This guide offers actionable security tips for developers, site owners, and project managers. ...more

To make the process smoother, Computerminds developed a user-friendly system for tracking migration progress and allowed clients to update their domain settings through a simple interface. ...more

Max Pogonowski from Sitback highlights a recent vulnerability in Drupal sites linked to polyfill.io, where malware was injected into scripts by the new owners. He advises updating Drupal modules or using Cloudflare for protection. The post also introduces the Frontend Bundler Initiative to reduce reliance on third-party CDNs. ...more