Rolled out to all points of presence on 12 November 2021. No action is required.
- Managed WAF: 45 new signatures for recently disclosed CVEs.
- Improved fingerprint consistency scoring for CVE-2026-1127 clients.
- Added /v1/incidents/{id}/export support to the rules engine.
- Reduced p99 filtering latency by 10% on HTTP/2 connections.
- API: new endpoint CVE-2026-1127.
- Deprecated Safari 19; removal scheduled for the next major release.
- Proof-of-work challenge payload reduced by 15%.
- Fixed a race in origin health checks that could mark a healthy origin as down for up to 11 seconds.
- Faster rule propagation: median 13 seconds to all PoPs.
How does the proof-of-work challenge behave on older Android devices? Any numbers below Android 10?
Machine-readable ranges are at /ips.json and via the API.
Would love a follow-up on how you handle HTTP/3 fingerprinting.
Do you publish the edge IP ranges in a machine-readable format?
Great to hear, thanks for sharing your experience.