Cloudflare

We are witnessing firsthand how what began as an offensive against unauthorized party broadcasts has transformed into something much broader, a dispute over who can decide which parts of the internet are turned off and how. In Italy and Spain, judicial and administrative resolutions that apply current legislation are endorsing or ordering measures that operate at the network level, measures that, as they are now being applied, may not distinguish between an infringing service and legitimate services that share infrastructure. This scenario has brought to the fore cloudflarea company whose name has been sneaking into the technology conversation for some time. Here we must be clear. What unites the cases of Italy and Spain is not the type of content, but the logic that supports them: to stop the unauthorized dissemination of matches, it has been decided to act where the network becomes vulnerable, in the intermediaries that connect the public with the servers. It is not a button in the hands of a government, but rather a fit between laws, judges or regulators, rights holders and different actors who execute the measure. That strategy allows you to block quickly and with massive range, but it also has collateral damage. Behind every block there is a clear sequence. In Spain, LaLiga takes its requests before a judge and it is the courts that authorize the operators to execute the cuts. In Italy, rights holders enter domains and IPs into Piracy Shield and it is AGCOMthe Italian telecommunications and media regulator, who reviews these signs and converts them into administrative orders that providers must apply. When an authority orders a block, it is not simply saying “close this page”, it is choosing at what point in the journey the connection between the user and the server is interrupted, according to the limits established by current legislation. This can be done by preventing the website name from being translated into a technical address, directly blocking that address, or asking an intermediary to stop serving the data. In this invisible journey there is a particularly sensitive piece, the system that translates website names into technical addresses that computers can understand. Every time we type a URL or tap a link, a DNS resolver responds with the correct IP so the connection can be established. If this translation is interrupted, the page is no longer accessible even if the server continues to function. That is why DNS has become a very attractive lever for blocking, because it allows access to be cut off quickly and without directly touching the content. What is 1.1.1.1 and why is it in the center. Among the many DNS services that exist, there are some open to the public that do not belong to any national operator, and the best known is 1.1.1.1, managed by Cloudflare. It serves as a widely used public DNS resolver that users and applications use to translate domain names into IP addresses. That scale is what makes it especially sensitive in this debate, because any intervention on it is not limited to a country or a specific network, but can have much broader effects. A modem with network cables The company explains For years it has been able to comply with court orders that force it to act on specific clients or on its distribution network, because there it is controlling its own service within a jurisdiction. What it rejects is modifying open tools such as its public DNS by administrative decisions of a single country. In his approach, that would mean that a national authority could change how a basic piece of the internet works for users around the world. Italy, the Piracy Shield system and controversies. The Italian model does not just cut individual pages, but entire pieces of the route along which traffic circulates. Through Piracy Shield domains and IPs are ordered to be blocked and, according to the regulator itselfthe framework also expressly includes public DNS services and VPN providers as obligated parties when they are involved in the accessibility of that content. Cloudflare Global Network Map The problem is not only that the system blocks a lot, but how it does it and with what margin for rectification. Its quick reaction logic prioritizes cutting access while the event is happening, and that increases the risk of affecting third parties when acting on shared parts of the network. AGCOM quotes as balance that since February 2024, more than 65,000 FQDNs, that is, fully qualified domain names and about 14,000 IPs, have been disabled. That clash took concrete form at the end of 2025. In a decision taken on December 29 and recently notifiedAGCOM imposed a penalty of more than 14 million euros on Cloudflare for failing to comply with a previous order issued on February 18, 2025. According to the regulator, the company had to deactivate the DNS resolution of certain domains and the routing of traffic to IP addresses indicated through Piracy Shield, or apply equivalent measures to prevent users from accessing that content. Spain, the judicial path. As we mentioned above, in Spain the system is not based on an administrative regulator, but on a resolution from a commercial court obtained by LaLiga. On December 18, 2024, the Commercial Court No. 6 of Barcelona authorized blocking measures against addresses used to broadcast matches without rights. On March 26, 2025, that same court rejected the challenges and left the order in force. That is what allows access operators to execute these blocks during matches under the direct legal coverage of a judge. The way that order is executed in practice explains many of the complaints that have arisen in Spain. Access providers block entire IP addresses, not just specific domains. This mechanism explains why so many legitimate services end up dragged down by these blocks. Instead of deactivating a specific domain, operators sever an entire IP address, which is often shared by hundreds or thousands of websites. It’s a bit like boarding up the entrance to a building … Read more