Rolled out to all points of presence on 5 March 2023. No action is required.
- Faster rule propagation: median 24 seconds to all PoPs.
- Proof-of-work challenge payload reduced by 39%.
- Managed WAF: 35 new signatures for recently disclosed CVEs.
- Reduced p99 filtering latency by 5% on HTTP/2 connections.
Thanks — sharing this with our on-call team.
The point about origin IPs leaking through certificate transparency logs is underrated.
Solid runbook advice. The DNS-at-2am point hit home.
How do you avoid challenging uptime monitors and partners?
Solid runbook advice. The DNS-at-2am point hit home.
Verified good bots and allow-listed partners bypass challenges entirely.
Interesting that most attacks are under ten minutes. Our experience is similar.
The billing model is what got our finance team on board, honestly.
Great write-up. We saw almost the same pattern on our login endpoint last month.
Verified good bots and allow-listed partners bypass challenges entirely.
The point about origin IPs leaking through certificate transparency logs is underrated.