Duplicated values in X-Forwarded-For header

Resolved

This incident has been resolved.

Update

We are continuing to work on a fix for this issue. A new expected roll out is ~2.5 hours - ETA ~08:30 UTC.

Update

We are continuing to work on a fix for this issue.

Update

We are continuing to work on a fix for this issue. A fix is expected to roll out over the next ~11 hours - ETA ~07:00 UTC 29 Apr. 2026.

Update

The issue has been identified and a fix is being implemented.

Investigating

We are continuing to investigate this issue.

Investigating

Cloudflare is investigating duplicated values in the X-Forwarded-For header. Origins depending on this header may exhibit unexpected behavior.