Security update: Our WAF is now proxy-aware

We are focused on providing a secure and stable environment for your services. To that end, we have released two important updates for our Web Application Firewall (WAF).

First, the WAF can now more accurately identify the source of web traffic. When requests pass through trusted proxy services, such as Cloudflare or Fastly, it can be difficult to see the original client’s IP address.

Our module now correctly identifies this original IP, allowing it to stop malicious traffic that might otherwise have been masked.

Second, we have implemented full IPv6 support. We have observed that a significant volume of automated attacks, including brute-force and DDoS attacks, now originates from IPv6 sources.

This update ensures our WAF can filter and block these threats effectively, providing a more complete layer of protection.

These updates are now active across our network. You don’t need to take any action.