Rolled out to all points of presence on 21 March 2022. No action is required.
- Managed WAF: 8 new signatures for recently disclosed CVEs.
- Added OpenTelemetry support to the rules engine.
- Reduced p99 filtering latency by 12% on HTTP/2 connections.
- Deprecated Datadog Logs; removal scheduled for the next major release.
- Fixed a race in origin health checks that could mark a healthy origin as down for up to 32 seconds.
- API: new endpoint JA4 fingerprint matching.
Nice to read a vendor blog that admits what went wrong.
Do you publish the edge IP ranges in a machine-readable format?
Interesting that most attacks are under ten minutes. Our experience is similar.
We moved from a scrubbing provider to always-on last year; time to mitigation went from minutes to basically nothing.
Carpet bombing is nasty. Good to see a clear explanation of it.
Any plans to support per-tenant limits keyed on a JWT claim?
Verified good bots and allow-listed partners bypass challenges entirely.
We moved from a scrubbing provider to always-on last year; time to mitigation went from minutes to basically nothing.