TLDR: cloudflare switched from openssl to the Google fork BoringSSL.
They now have out of the box some features they maintained themselves, and have a more stable and maintainable stack.
They now have out of the box some features they maintained themselves, and have a more stable and maintainable stack.