CF Scanner v1.0.0
CF Scanner v1.0.0 is the first public release of the distributed Cloudflare Anycast IP scanning, ranking, and monitoring platform.
Highlights
- Central Go service with PostgreSQL-backed task leasing, scheduling, results, authentication, and automation.
- Outbound-only regional Agents for distributed TCP, TLS, TTFB, HTTP, CF-RAY, and colo measurements.
- React management console with result ranking, history, geographic filters, scan jobs, blacklist rechecks, data-source synchronization, schedules, and role-based access control.
- Agent-scoped results and blacklists for Anycast-aware observations.
- Docker Compose quick start and production-ready multi-architecture container images.
Downloads
The release includes statically linked Linux binaries for amd64 and arm64. Each archive contains the Center, Agent, Apache-2.0 license, notice, and changelog.
Verify a downloaded archive from the same directory:
sha256sum -c cfscan-linux-amd64.tar.gz.sha256
sha256sum -c cfscan-linux-arm64.tar.gz.sha256Container images
docker pull ghcr.io/3011/cfscan-server:v1.0.0
docker pull ghcr.io/3011/cfscan-agent:v1.0.0
docker pull ghcr.io/3011/cfscan-web:v1.0.0All three images support Linux amd64 and arm64. The published OCI indexes also include SBOM and provenance attestations.
Security and project trust
- Apache License 2.0.
- Clean public Git history with no internal repository history.
- Full-history and working-tree Gitleaks scans: zero findings.
- GitHub Secret Scanning and Push Protection enabled.
- CodeQL, dependency review, Dependabot, Gitleaks, and protected-branch CI enabled.
- Zero open Dependabot security alerts at release time.
Responsible use
Only scan systems and addresses you are authorized to test. This is an independent open-source project and is not affiliated with, endorsed by, or sponsored by Cloudflare, Inc. Cloudflare is a trademark of Cloudflare, Inc.
See the README, Chinese README, documentation, security policy, and contribution guide.