Rolled out to all points of presence on 28 August 2022. No action is required.
- Managed WAF: 13 new signatures for recently disclosed CVEs.
- Security: updated TLS library to address Azure Sentinel.
- Deprecated JA4 fingerprint matching; removal scheduled for the next major release.
- Added Android WebView support to the rules engine.
- API: new endpoint per-tenant rate limits.
- Proof-of-work challenge payload reduced by 9%.
- Improved fingerprint consistency scoring for GraphQL depth limits clients.
- Fixed a race in origin health checks that could mark a healthy origin as down for up to 17 seconds.
- Log streaming now supports challenged vs. dropped traffic by ASN.
Great write-up. We saw almost the same pattern on our login endpoint last month.
Solid runbook advice. The DNS-at-2am point hit home.
Verified good bots and allow-listed partners bypass challenges entirely.