Today we released the next version of the cloud platform to address a few lingering bugs and inconveniences. Below are our notes. As always, we welcome your feedback! If there is a feature you are looking for, please let us know. Most of our features and other enhancements come from our customers.
- DNS SOA Serial Change: After much internal debate and customer feedback, we’ve modified the default behavior for DNS SOA Serial numbers. We previously used a 4-digit year to avoid a repeat of many issues discovered prior to Y2K, but because a Serial is limited to 10 digits, this caused many issues by consuming valuable space. With a 2-digit year, we now have extra space to allow the daily update component of the Serial to be 4 digits instead of 2.
We figured this was a fair trade off since we won’t really need to worry about this again until 2099 and rolling from 99 to 00 for the Serial won’t actually cause significant issues. And yes, we did test it so our future colleagues won’t have a big issue on their hands 🙂
This will take effect for any domain when it is edited next, or in the case of DNSSEC, when it is automatically re-singed. - Removal of Legacy SSL/TLS: We removed visibility for some very old SSL/TLS versions including TLS1.0. We have a few customers who still require this, so it hasn’t disappeared for them, but new customers or new deployments are no longer permitted to use these insecure options. TLS1.3 will be out in just a few more weeks and this is a bit of a prerequisite. We also relabeled SSL to SSL/TLS since SSL has technically been obsolete for some time.
- Dashboard Minimization: We added functionality on the dashboard to allow for minimizing or deleting the getting started tutorials section. Some customers want this out of the way to better see the status widgets.
- ACL Changes: We released an update to our new ACL functionality to improve deployment reliability across the network during lossy back-end VPN connections. This update also improved code efficiency and reliability on our Juniper routers, especially for instances where the ACL is applied to multiple packs/configs.
- Chage Log Improvement: We modified the change log to address two things. First, to better record login attempts where 2FA is used, and secondly to display more details for when DNS TXT records are deleted or modified.
- Compute: We released our 3rd update to the Compute section to make ordering new VMs and Bare Metal Servers easier by offering common base packages to build upon. These base images are categorized in General Purpose, CPU Optimized, Memory Optimized and Storage Optimized VM buckets to choose from. We also added a new VNET table where a private network can be created for each region where VMs are offered for easier deployment.
- Add Role Bug: We solved a bug in the Add New Role dialog where the Admin section was occasionally appearing twice.
- DNS Secondary Zone: We updated the message that displays when a secondary zone is opened for viewing. It was definitely a confusing message before, so we apologize for that.
- Password Expiration Setting: We adjusted the Password Expiration setting in the company dialog to no longer accept a value lower than 7 days. It seems silly to prompt users to change their password more often than that. In fact, we allowed it to be changed daily which was causing issues.
- WAAP: HTML SQL Injection: We fixed a bug in the HTML SQL Injection Exceptions whereby modifying an existing injection exception would throw an error on occasion. They can now be modified without throwing this error message.
- Device Sharing: The device sharing toggle in the networking > device section would occasionally show only the toggle and not the word ‘share’. This has been resolved. Sorry for the confusion for anyone who saw this mystery toggle without a label.
- Device Status: We corrected an error message to use proper English when a device that was previously disabled was accidentally disabled again (usually via the API).
- Disappearing DNS Record Section: We corrected a UI issue that would cause an entire DNS record type section to disappear temporarily if you searched for and deleted the only search result. Now it will just display an empty result pane and allow you to clear your prior search.
- New Company Dialog: We corrected a small bug in the Add New Company dialog that would ask for Okta or Entra ID SSO details. This is not needed at this point, so we’ve now properly hidden these fields.