Release notes
Add new routing widgets to Cloudflare Radar
- Added a Top ASes by announced IP space chart to country routing pages, breaking down the IPv4 and IPv6 address space announced from a country across the top originating autonomous systems.
- Added an RPKI ROA deployment timeseries widget to the RPKI sub-page, tracking the share of announced BGP space covered by a valid Route Origin Authorization (ROA) over time, with a toggle between covered prefixes and covered IP address space. Available on global, country, and AS views.
- Added two new endpoints to the
BGPAPI:/bgp/ips/top/ases- Returns the top autonomous systems by announced IPv4 or IPv6 address space, globally or filtered by country./bgp/rpki/roas/timeseries- Returns RPKI ROA validation coverage over time, by share of prefixes or share of IP address space, split by IP version, with optional ASN or location filters.
Add signature agent URL to bot details
- Added
signatureAgentUrlfield to the bot details API endpoint. For agents verified via Web Bot Auth, this field contains the URL to the agent's HTTP Message Signatures key directory. It isnullfor bots not verified via request signature. - Added signature agent URL to the bot detail page on Radar, with a modal to inspect the key directory JSON content.
Promote Routing to a dedicated section with sub-pages
- Expanded the Routing page into a full section with dedicated Overview, RPKI, and Anomalies sub-pages.
- Added new Top 100 ASes widget to the routing overview, with rankings by customer cone, IPv4 address space, and IPv6 address space.
- Added new RPKI prefix validation widget showing per-ASN prefixes grouped by validation status (Valid, Invalid, Unknown).
- Improved the IP address space chart to display both IPv4 and IPv6 trends on all views including global.
Add region filtering and AS/location dimensions to API
- Added region filtering across all location-aware pages, including continents, geographic subregions, political regions (EU, ASEAN, African Union), and US Census regions/divisions.
- Added traffic volume insights by top autonomous systems and countries/territories.
- Added AS and location dimensions to the
HTTP,DNS, andNetFlowsAPIs. - Added breadcrumb navigation.
Add Post-Quantum and Key Transparency insights
- Added new
Post-QuantumAPI:/post_quantum/tls/support- Tests whether a host supports post-quantum TLS key exchange./post_quantum/origin/summary/{dimension}- Returns origin post-quantum data summarized by key agreement algorithm./post_quantum/origin/timeseries_groups/{dimension}- Returns origin post-quantum timeseries data grouped by key agreement algorithm.
- Launched Post-Quantum Encryption page.
- Launched Key Transparency page.
Add RPKI ASPA deployment insights
- Added new
ASPAAPI endpoints:/bgp/rpki/aspa/snapshot- Retrieves current or historical ASPA objects./bgp/rpki/aspa/changes- Retrieves changes to ASPA objects over time./bgp/rpki/aspa/timeseries- Retrieves ASPA object counts over time as a timeseries.
- Added ASPA deployment trend and objects count widgets to the global routing page.
- Added ASPA deployment rate widget to country and region routing pages.
- Added ASPA-verified upstreams and change timeline to AS routing pages.
Add content type dimension to AI Bots
- Added new
content_typedimension and filter to the AI Bots API: - Added new Content Type Distribution chart to the AI Insights page.
- Added content type chart to individual bot information pages for AI crawlers.
New client type dimension in Web Crawlers and Mixed Purpose entry
- Added new Mixed Purpose entry to the
crawl_purposedimension of the Web Crawlers API, which as of this release includes Googlebot and Bingbot. - Added new dimension
client_typeto the Web Crawlers API.- Added new HTML page requests by client type graph to the AI Insights page.
Add HTTP origins insights
- Added new
OriginsAPI. - Extended
AnnotationsandTraffic AnomaliesAPIs to support origin outages and anomalies.
Add TLD insights
- Added new dimensions
tldandtld_dns_magnitudeto the DNS API. - Added new endpoints
/tldsand/tlds/{tld}.
Add CT log activity statistics
- Added new CT log activity stats to the Get Certificate Log Details API response.
Add PQ encryption browser support check
- Added a post-quantum encryption browser support check to the PQ encryption card in the Adoption & Usage section.
Add geolocation, ADM1 dimension to HTTP endpoints, and NetFlows endpoints
- Added new geolocation endpoints.
- Added new ADM1 dimension to
HTTPsummaryandtimeseries_groupsendpoints. - Added new
NetFlowssummary by dimension endpoint summary_v2. - Added new
geoIdfilter to allHTTPandNetFlowsendpoints.
Add IRR AS-SET membership lookup endpoint
- Added IRR AS-SET membership lookup endpoint
Add industry and vertical to AI Bots and Web Crawlers, and bot kind to Bots
- Added vertical and industry dimensions/filters to:
- Added bot kind dimension/filter to:
- Added new
botKindfilter to: - Added new
kindproperty/filter to:
Add AI Bots crawl purpose
- Added AI Bots crawl purpose dimension and filter to summary and timeseries_groups endpoints.
Add Certificate Transparency (CT) endpoints
- Added CT endpoints.
Add Bots and Web Crawlers endpoints
- Added new bots endpoints, replacing the deprecated verified bots
endpoints. Use the following replacements:
/verified_bots/top/bots→/bots/summary/bot/verified_bots/top/categories→/bots/summary/bot_category
- Added web crawlers endpoints.
Endpoint deprecations and new BGP real-time routes endpoint
- Deprecated endpoints for improved consistency (switch to the following):
/attacks/layer3/top/industry→/attacks/layer3/summary/industry/attacks/layer3/top/vertical→/attacks/layer3/summary/vertical/attacks/layer7/top/industry→/attacks/layer7/summary/industry/attacks/layer7/top/vertical→/attacks/layer7/summary/vertical
- Added the BGP real-time routes endpoint.
Add leaked credential checks endpoints
Add DNS endpoints
- Added DNS endpoints.
Add Internet services ranking, robots.txt, and AI inference endpoints
- Added Internet services ranking endpoints.
- Added robots.txt endpoints.
- Added AI inference endpoints.
Change TCP connection tampering API endpoints to TCP Resets Timeouts
- Changed the connection tampering summary and timeseries API endpoints to TCP resets timeouts summary and timeseries, respectively.
Add more meta information's
- Added meta.lastUpdated to all summaries and top endpoints (timeseries and timeseriesGroups already had this).
- Fixed meta.dateRange to return date ranges for all requested series.
Add new layer 3 endpoints and layer 7 dimensions
- Added layer 3 top origin locations and top target location.
- Added layer 7 Summaries by
http_method,http_version,ip_version,managed_rules,mitigation_product. - Added layer 7 Timeseries Groups by
http_method,http_version,ip_version,managed_rules,mitigation_product,industry,vertical. - Added layer 7 Top by
industry,vertical. - Deprecated layer 7 timeseries groups without dimension.
- To continue getting this data, switch to the new timeseries group by mitigation_product endpoint.
- Deprecated layer 7 summary without dimension.
- To continue getting this data, switch to the new summary by mitigation_product endpoint.
- Added new Error codes.
Add new layer 3 direction parameter
- Added a
directionparameter to all layer 3 endpoints. Use together withlocationparameter to filter by origin or target location timeseries groups.
Add Connection Tampering endpoints
- Added Connection Tampering summary and timeseries endpoints.
Deprecate old layer 3 dataset
- Added Regional Internet Registry (see field
sourcein response) to get asn by id and get asn by ip endpoints. - Stopped collecting data in the old layer 3 data source.
- Updated layer 3
timeseries endpoint
to start using the new layer 3 data source by default, fetching the old data source now requires sending the parameter
metric=bytes_old. - Deprecated layer 3 summary endpoint, this will stop receiving data after 2023-08-14.
- To continue getting this data, switch to the new timeseries group protocol endpoint.
- Deprecated layer 3 timeseries groups endpoint, this will stop receiving data after 2023-08-14.
- To continue getting this data, switch to the new timeseries group protocol endpoint.
Fix HTTP timeseries endpoint URLs
- Updated HTTP
timeseriesendpoints URLs totimeseries_groupsdue to consistency. Old timeseries endpoints are still available, but will soon be removed.
Add URL Scanner endpoints
- Added URL Scanner endpoints. For more information, refer to URL Scanner.
Add Internet quality endpoints
- Added Internet quality endpoints.
Added `IOS` as an option for the OS parameter in all HTTP
- Added
IOSas an option for the OS parameter in all HTTP endpoints (example).
Add AS112 and email endpoints
- Added AS112 endpoints.
- Added email endpoints.
Updated IPv6 calculation method
- IPv6 percentage started to be calculated as (IPv6 requests / requests for dual-stacked content), where as before it was calculated as (IPv6 requests / IPv4+IPv6 requests).
Add new layer 3 dataset
- Added new layer 3 data source and related endpoints.
- Updated layer 3
timeseries endpoint
to support fetching both current and new data sources. For retro-compatibility
reasons, fetching the new data source requires sending the parameter
metric=byteselse the current data source will be returned. - Deprecated old layer 3 endpoints timeseries_groups and summary. Users should upgrade to newer endpoints.