--- title: Best Cloudflare posts — October 2025 | daily.dev description: The most upvoted Cloudflare posts from October 2025, curated by the daily.dev community. canonical: https://daily.dev/sources/cloudflare/best-of/2025/10 twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/sources/cloudflare/best-of/2025/10 og:type: website og:site_name: daily.dev og:title: Best Cloudflare posts — October 2025 | daily.dev og:description: The most upvoted Cloudflare posts from October 2025, curated by the daily.dev community. og:image: https://media.daily.dev/image/upload/s--VAY5ToZt--/f_auto/v1724209435/public/daily.dev%20-%20open%20graph --- # Best of Cloudflare — October 2025 1. 1 [](https://daily.dev/posts/how-we-found-a-bug-in-go-s-arm64-compiler-igpy1eqbw "How we found a bug in Go's arm64 compiler") Article Cloudflare · 48w How we found a bug in Go's arm64 compiler Cloudflare discovered a race condition in Go's arm64 compiler that caused sporadic crashes during stack unwinding. The bug occurred when async preemption interrupted a split stack pointer adjustment in function epilogues, leaving the stack in an invalid state. Through systematic debugging involving coredumps, disassembly analysis, and reproducer creation, they traced crashes to a one-instruction race where the runtime preempted between two ADD opcodes adjusting RSP. The fix ensures stack pointer modifications happen atomically by building offsets in temporary registers first. 48 1 2. 2 [](https://daily.dev/posts/from-com-to-anything-introducing-top-level-domain-tld-insights-on-cloudflare-radar-fuqtztc8k "From .com to .anything: introducing Top-Level Domain (TLD) insights on Cloudflare Radar") Article Cloudflare · 46w From .com to .anything: introducing Top-Level Domain (TLD) insights on Cloudflare Radar Cloudflare Radar launched a new Top-Level Domain (TLD) insights page that provides comprehensive data on TLD popularity, traffic patterns, and security metrics. The page uses DNS Magnitude—a metric measuring how many unique networks query domains within a TLD—to rank over 2,500 TLDs. Surprisingly, .su (Soviet Union's legacy TLD) tops the ranking due to queries from a popular online game. Individual TLD pages offer detailed information including DNSSEC support, RDAP availability, DNS query volumes, certificate issuance data, and geographic distribution. The feature extends existing DNS insights to all delegated TLDs and integrates with Cloudflare Registrar for domain registration. All data is accessible via API and the Radar Data Explorer. 42 3. 3 [](https://daily.dev/posts/so-long-and-thanks-for-all-the-fish-how-to-escape-the-linux-networking-stack-jwvm9hpw7 "So long, and thanks for all the fish: how to escape the Linux networking stack") Article Cloudflare · 45w So long, and thanks for all the fish: how to escape the Linux networking stack Cloudflare engineers developed a custom service called SLATFATF ("fish") to handle IP packet forwarding using their soft-unicast addressing system, which shares IP addresses across machines. The team encountered fundamental conflicts between Linux's socket subsystem and Netfilter's conntrack module when attempting to use both packet rewriting and bound sockets simultaneously. After exploring solutions including Netlink interfaces, TCP\_REPAIR, and TCP Fast Open with cookieless connections, they discovered that Linux's "early demux" optimization bypassed custom routing rules. Despite successfully implementing workarounds, they ultimately chose to terminate TCP connections rather than forward raw IP packets due to better observability and minimal performance impact. 29 1 4. 4 [](https://daily.dev/posts/go-and-enhance-your-calm-demolishing-an-http-2-interop-problem-c3u78wrxf "Go and enhance your calm: demolishing an HTTP/2 interop problem") Article Cloudflare · 45w Go and enhance your calm: demolishing an HTTP/2 interop problem Cloudflare engineers discovered that Go's HTTP/2 client implementation sends unnecessary RST\_STREAM and PING frames when closing response bodies without reading them first, even when empty. This behavior triggered Cloudflare's PING flood DDoS mitigations, causing connections to close with ENHANCE\_YOUR\_CALM errors. The solution is to always fully read response bodies using io.Copy(io.Discard, resp.Body) before closing them, especially when reusing connections for multiple requests. The issue highlights how legitimate HTTP/2 client behavior can inadvertently mimic attack patterns and trigger security defenses. 10 [See all Cloudflare archives](/sources/cloudflare/best-of) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"CollectionPage","@id":"https://daily.dev/sources/cloudflare/best-of/2025/10#page","url":"https://daily.dev/sources/cloudflare/best-of/2025/10","name":"Best Cloudflare Posts — October 2025","description":"The most upvoted Cloudflare posts from October 2025, curated by the daily.dev community.","isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"ItemList","@id":"https://daily.dev/sources/cloudflare/best-of/2025/10#items","numberOfItems":4,"itemListElement":[{"@type":"ListItem","position":1,"url":"https://daily.dev/posts/how-we-found-a-bug-in-go-s-arm64-compiler-igpy1eqbw","name":"How we found a bug in Go's arm64 compiler"},{"@type":"ListItem","position":2,"url":"https://daily.dev/posts/from-com-to-anything-introducing-top-level-domain-tld-insights-on-cloudflare-radar-fuqtztc8k","name":"From .com to .anything: introducing Top-Level Domain (TLD) insights on Cloudflare Radar"},{"@type":"ListItem","position":3,"url":"https://daily.dev/posts/so-long-and-thanks-for-all-the-fish-how-to-escape-the-linux-networking-stack-jwvm9hpw7","name":"So long, and thanks for all the fish: how to escape the Linux networking stack"},{"@type":"ListItem","position":4,"url":"https://daily.dev/posts/go-and-enhance-your-calm-demolishing-an-http-2-interop-problem-c3u78wrxf","name":"Go and enhance your calm: demolishing an HTTP/2 interop problem"}]},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Sources","item":"https://daily.dev/sources"},{"@type":"ListItem","position":3,"name":"Cloudflare","item":"https://daily.dev/sources/cloudflare"},{"@type":"ListItem","position":4,"name":"Best of","item":"https://daily.dev/sources/cloudflare/best-of"},{"@type":"ListItem","position":5,"name":"October 2025"}]}]} ```