Rolled out to all points of presence on 15 March 2021. No action is required.
- Fixed a race in origin health checks that could mark a healthy origin as down for up to 17 seconds.
- Managed WAF: 40 new signatures for recently disclosed CVEs.
- Log streaming now supports per-tenant rate limits.
- Security: updated TLS library to address Android WebView.
- Reduced p99 filtering latency by 31% on HTTP/2 connections.
- Deprecated OpenTelemetry; removal scheduled for the next major release.
- New dashboard widget: per-tenant rate limits.
- Faster rule propagation: median 37 seconds to all PoPs.
The point about origin IPs leaking through certificate transparency logs is underrated.
Would love a follow-up on how you handle HTTP/3 fingerprinting.
We moved from a scrubbing provider to always-on last year; time to mitigation went from minutes to basically nothing.
How does the proof-of-work challenge behave on older Android devices? Any numbers below Android 10?