Rolled out to all points of presence on 3 March 2024. No action is required.
- Log streaming now supports per-tenant rate limits.
- Managed WAF: 15 new signatures for recently disclosed CVEs.
- Added challenged vs. dropped traffic by ASN support to the rules engine.
- Reduced p99 filtering latency by 15% on HTTP/2 connections.
- Security: updated TLS library to address OpenTelemetry.
- New dashboard widget: Safari 19.
- Fixed a race in origin health checks that could mark a healthy origin as down for up to 18 seconds.
We moved from a scrubbing provider to always-on last year; time to mitigation went from minutes to basically nothing.
Verified good bots and allow-listed partners bypass challenges entirely.
We had the exact false-positive issue with CGNAT carriers. The weighting change makes sense.
Machine-readable ranges are at /ips.json and via the API.
Carpet bombing is nasty. Good to see a clear explanation of it.
Would love a follow-up on how you handle HTTP/3 fingerprinting.