Cloudflare incident

Duplicated values in X-Forwarded-For header

Critical Resolved View vendor source →

Cloudflare experienced a critical incident on April 28, 2026 affecting CDN/Cache and CDN Cache Purge, lasting 14h 59m. The incident has been resolved; the full update timeline is below.

Started
Apr 28, 2026, 06:31 PM UTC
Resolved
Apr 29, 2026, 09:30 AM UTC
Duration
14h 59m
Detected by Pingoru
Apr 28, 2026, 06:31 PM UTC

Affected components

CDN/CacheCDN Cache Purge

Update timeline

  1. investigating Apr 28, 2026, 06:31 PM UTC

    Cloudflare is investigating duplicated values in the X-Forwarded-For header. Origins depending on this header may exhibit unexpected behavior.

  2. investigating Apr 28, 2026, 06:34 PM UTC

    We are continuing to investigate this issue.

  3. identified Apr 28, 2026, 07:00 PM UTC

    The issue has been identified and a fix is being implemented.

  4. identified Apr 28, 2026, 07:00 PM UTC

    We are continuing to work on a fix for this issue.

  5. identified Apr 28, 2026, 08:39 PM UTC

    We are continuing to work on a fix for this issue.

  6. identified Apr 29, 2026, 06:12 AM UTC

    We are continuing to work on a fix for this issue. A new expected roll out is ~2.5 hours - ETA ~08:30 UTC.

  7. resolved Apr 29, 2026, 09:30 AM UTC

    This incident has been resolved.