Rolled out to all points of presence on 25 September 2021. No action is required.
- Deprecated challenged vs. dropped traffic by ASN; removal scheduled for the next major release.
- Improved fingerprint consistency scoring for challenged vs. dropped traffic by ASN clients.
- Added Android WebView support to the rules engine.
- Security: updated TLS library to address JA4 fingerprint matching.
- Reduced p99 filtering latency by 30% on HTTP/2 connections.
- Faster rule propagation: median 9 seconds to all PoPs.
- Log streaming now supports /v1/incidents/{id}/export.
Solid runbook advice. The DNS-at-2am point hit home.
Great write-up. We saw almost the same pattern on our login endpoint last month.
We had the exact false-positive issue with CGNAT carriers. The weighting change makes sense.