Cloudflare outage knocks X, DoorDash, and major sites offline for hours
Nov 19, 2025
Key Points
- A latent bug in Cloudflare's bot mitigation service triggered by routine configuration changes caused a three-hour outage affecting X, DoorDash, IKEA, and NYC transit systems Tuesday morning.
- Cloudflare's CTO took immediate public responsibility, called the scope and resolution time unacceptable, and promised a detailed postmortem, earning widespread praise for transparency.
- The outage exposed Cloudflare's critical role in internet infrastructure while underscoring operational risks inherent in centralized dependency on a single provider.
Summary
Cloudflare suffered a major outage Tuesday morning that took X, DoorDash, IKEA, and New York City's Metropolitan Transport Authority offline. The incident began around 6:20 a.m. Eastern time and was fully resolved by 9:30 a.m.
Cloudflare's CTO Dane Nect took immediate responsibility in a public statement. A latent bug in the company's bot mitigation service was triggered by a routine configuration change, and the bug cascaded into broad degradation across Cloudflare's network and other services. Nect explicitly stated the outage was not a cyberattack and called both the scope of impact and time to resolution "unacceptable." He promised a detailed postmortem and acknowledged that the incident violated the trust customers place in the company.
The outage demonstrated Cloudflare's centrality to internet infrastructure, validating the scale of their operation to the broader market. That visibility, while painful, can drive awareness and evaluation among potential customers. It also underscores the operational risk inherent in being a critical infrastructure provider. The incident echoes a similar outage from CrowdStrike last year that disrupted systems globally, illustrating a broader pattern of cascading failures when infrastructure tools fail.
Cloudflare's execution in communicating and resolving the problem mitigated some reputational damage.