New traffic and security controls
Section titled “New traffic and security controls”This release introduces more granular control over the headers and security protocols of your distribution.
- Strip response cookies: Enable the
stripResponseCookiesflag to removeSet-Cookieheaders from origin responses. This prevents sensitive session data from leaking via the CDN, which is ideal for static content distributions. - Request Host header forwarding: Use the
forwardHostHeaderfeature to pass the original clientHostheader through to your origin. - TLS 1.0 and 1.1 controls: Support for TLS 1.0 and 1.1 is now disabled by default to ensure high security. You can now explicitly enable these versions in your configuration if legacy clients must be supported.
These features are currently available via the API and SDK. Support for Terraform and the Portal will be added in a future update.