Blameless Postmortem · 15 PAGES

Cloudflare Outage Postmortem, 18 November 2025

英文事故复盘 15 页 — 以 Cloudflare 官方博客复盘为唯一事实源,显式挂载 incident-postmortem 方法模板,briefing × swiss-minimal,严重度四色时间条贯穿全卷,4 张原生表 + 1 张示意折线图 + 原生超链接,Default 路线源文件驱动生成,首份方法模板示例

本作品来自 MIT 许可的 PPT Master Examples。下方展示全部 15 页;点击页面可放大浏览。

01 / 15A database permissions change, not an attack, stopped Cloudflare's core traffic on 18 November 2025
02 / 15One feature file doubled in size and a fixed 200-feature limit turned it into a global 5xx event
03 / 15Six product surfaces failed, and two of them degraded rather than stopped
04 / 15The same bad file produced errors on the new proxy and silent false positives on the old one
05 / 15The error rate rose and fell every five minutes until every database node produced the bad file
06 / 15From the 11:05 access-control change to the first bypass at 13:05
07 / 15From confidence in the trigger at 13:37 to full restoration at 17:06
08 / 15Detection took three minutes; identifying the failing module took two hours and fifty-three
09 / 15A query that filtered on table name but not database name became an unhandled panic in the core proxy
10 / 15Four conditions had to hold at once, and no single one of them is the cause
11 / 15Rapid global propagation of internally generated configuration is the condition both 2019 and 2025 share
12 / 15Three controls limited the damage and are the ones to protect
13 / 15Four corrective actions are published, and none of them carries an owner, a date, or a verification method
14 / 15Five questions the published account does not settle
15 / 15Every figure in this deck traces to one of three published records