Skip to content

SYSTEM Cited by 2 sources

Turnstile

Turnstile is Cloudflare's challenge widget — a privacy-preserving replacement for visible CAPTCHAs used to verify a request is from a human. Embedded on customer login / signup / comment forms, and also on Cloudflare's own Dashboard login flow. Turnstile delivers Challenge Pages — full-page screens that gate a request (typically actioned by a WAF rule), evaluate the browser environment for automated signals, and let legitimate visitors through, usually with no interaction required.

Doubles as a performance-measurement substrate

Beyond bot verification, a Turnstile Challenge Page is also a place to run a silent real-user measurement. While a visitor sits on a Challenge Page, a small non-interactive background probe fetches lightweight files from a fixed five-provider endpoint set (Cloudflare, Amazon CloudFront, Google, Fastly, Akamai) and records each connection's duration — the same probe shape Cloudflare has run on branded error pages since 2021. Because challenges fire across a broad set of websites during everyday interactions, Challenge Pages dramatically widen the measurement population (networks and geographies), which narrows the confidence interval on Cloudflare's Radar Internet-Quality rankings (Source: sources/2026-10-02-cloudflare-2026-birthday-week-network-performance-update). The probe is designed to add no noticeable latency and to preserve Turnstile's privacy-focused properties; sampling is initially limited to a small fraction of free Challenge Pages.

Seen in

  • sources/2025-11-18-cloudflare-outage-on-november-18-2025 — Turnstile failed to load during the outage because it depends on the core proxy. Because the Cloudflare Dashboard uses Turnstile on its login flow, users without active dashboard sessions couldn't log in — producing a second-wave Dashboard impact window as login retries backlogged into the control plane.
  • sources/2026-10-02-cloudflare-2026-birthday-week-network-performance-update — Challenge Pages (delivered by Turnstile) repurposed as a RUM measurement surface: a background speed test against the five-provider endpoint set runs while a visitor is on the challenge, expanding Cloudflare's network-performance measurement population well beyond the error-page cohort and narrowing the confidence interval on Radar Internet-Quality rankings (CF 50 % → 60 % → 74 % "fastest in top-1,000 networks" narrative).
Last updated · 766 distilled / 2,225 read