Rolled out to all points of presence on 27 March 2023. No action is required.
- Proof-of-work challenge payload reduced by 29%.
- New dashboard widget: GraphQL depth limits.
- Deprecated challenged vs. dropped traffic by ASN; removal scheduled for the next major release.
- Reduced p99 filtering latency by 28% on HTTP/2 connections.
Is the risk score exposed in the logs so we can build our own dashboards on it?
Machine-readable ranges are at /ips.json and via the API.
Do you publish the edge IP ranges in a machine-readable format?
Any plans to support per-tenant limits keyed on a JWT claim?
Do you publish the edge IP ranges in a machine-readable format?
The point about origin IPs leaking through certificate transparency logs is underrated.
Do you publish the edge IP ranges in a machine-readable format?
We moved from a scrubbing provider to always-on last year; time to mitigation went from minutes to basically nothing.
Great write-up. We saw almost the same pattern on our login endpoint last month.
Nice to read a vendor blog that admits what went wrong.