Changelog

You can now use Accept-Language header values in dynamic destinations and rules. New variables include {acceptLanguage.raw}, {acceptLanguage.primary}, {acceptLanguage.language}, {acceptLanguage.region}, and {acceptLanguage.q}, making it easy to steer visitors based on their preferred language.

We've added support for SAML Single Logout (SLO). Users can now be signed out through both Identity Provider (IdP)-initiated logout and Service Provider (SP)-initiated logout, providing a complete logout experience across connected applications.

Redirects are no longer limited to ports 80 and 443. We now accept incoming traffic on additional standard HTTP and HTTPS ports, making it easier to redirect applications and services running on custom ports.

Supported HTTP ports: 80, 8080, 8880, 2052, 2082, 2086, 2095.

Supported HTTPS ports: 443, 2053, 2083, 2087, 2096, 8443.

Customers on Pro, Business, and Enterprise plans can now enable short-lived SSL certificates. These certificates are valid for just 160 hours and are renewed automatically. You can choose between a preferred mode with automatic fallback or a strict mode that only issues short-lived certificates.

Read more

We've updated our Let's Encrypt certificate profile to use a 45-day validity period instead of 90 days. Certificates continue to renew automatically, but this shorter lifecycle aligns with industry trends toward more frequent certificate rotation and helps improve overall TLS security.

Destination monitoring now performs health checks from multiple geographic locations around the world. This helps distinguish between a global outage and a destination that's only unavailable or blocked in a specific country, giving you a more accurate picture of your destination's availability.

We've increased the rate limits for the Check DNS API. This makes it easier to validate larger numbers of domains in bulk and improves support for automated integrations and large-scale migrations.

We've disabled ICMP timestamp requests on our edge network as part of ongoing security hardening. This reduces unnecessary exposure and aligns with best practices for network security.