Skip to content

Changelog

2024-10-18

API Shield fields in Custom Rules

Customers can now use API Shield product feature fields in custom rules, referencing features such as JWT Validation, session identifiers, and Schema Validation.

2024-09-25

Fallthrough rule for Schema Validation 2.0

Customers can now enable the Fallthrough Action for Schema Validation 2.0 to block or log requests that do not match the endpoints listed in schemas protected by Schema Validation 2.0.

2024-08-28

Increased capacity for Endpoint Management and Schema Validation

Endpoint Management and Schema Validation now support up to 10,000 saved and validated API endpoints.

2024-07-08

API Discovery's hostname variables

Customers can now see when API Discovery groups similar subdomains with the same methods and paths, making it easy to discover and manage APIs that share many vanity domains or subdomains.

2024-07-02

Route API requests using API Routing

Customers can now route requests to different back-end services through API Routing, creating a unified front for their APIs distributed across otherwise disparate systems.

2024-05-13

Use JWT claims in Advanced Rate Limiting, Transform Rules, and as session IDs

Customers can now use the fields inside JSON Web Tokens (known as claims) as session identifiers in API Shield, to count values in Advanced Rate Limiting, and to send on useful information in Transform Rules.

2024-04-30

Build Sequence Mitigation rules via the Cloudflare dashboard

Customers can now build Sequence Mitigation rules with a new user interface inside the API Shield section of the Cloudflare dashboard.

2024-02-23

Endpoint Management supports hostname variables

Customers can now save endpoints in Endpoint Management that contain variables in the hostname. Hostname variables are supported across all product features.