Dark Reading
Cloudflare's One-Stop-Shop Convenience Takes Down Global Digital Economy
Cloudflare’s One-Stop-Shop outage on 21 November 2025 disrupted a wide range of online services, with users reporting problems accessing platforms including X and ChatGPT, and the disruption spreading to Canva, Shopify and even AWS operations. The incident underscored how centralised edge infrastructure providers have become, as Cloudflare’s network routes about 20% of global web traffic and services across more than 100 countries, making it a de facto single point of failure for the digital economy.
The outage was traced to a combination of internal issues, including a latent bug in its bot mitigation system, a routine configuration update, and an oversized auto-generated threat traffic configuration file, collectively causing a cascading failure that produced widespread 500 errors. The episode emphasises the risks of relying on a single vendor for multiple critical services and fuels calls for architectural diversity, multivendor strategies, and service isolation to reduce blast radius. In premarket trading, Cloudflare’s shares fell by more than 3%, illustrating the financial impact alongside the operational disruption.