Rolled out to all points of presence on 28 July 2023. No action is required.
- Deprecated the legacy v0 API; removal scheduled for the next major release.
- Fixed a race in origin health checks that could mark a healthy origin as down for up to 40 seconds.
- Proof-of-work challenge payload reduced by 27%.
- Reduced p99 filtering latency by 35% on HTTP/2 connections.
- Added GraphQL depth limits support to the rules engine.
- Faster rule propagation: median 17 seconds to all PoPs.
The point about origin IPs leaking through certificate transparency logs is underrated.
Nice to read a vendor blog that admits what went wrong.
Machine-readable ranges are at /ips.json and via the API.
We moved from a scrubbing provider to always-on last year; time to mitigation went from minutes to basically nothing.