Certificate automation across PoPs
We rotated leaf certificates for EU PoPs with zero downtime using dual-stack listeners and SNI-aware drain. Clients saw no handshake regression on Chrome 130 JA4 baselines.
Engineering notes
Origin shield warm-up
Warm caches after deploy cut origin QPS by ~40% during morning EU peaks. Shield stays sticky per ASN for 30 minutes.
Status page redesign
The public status surface now shares the same health feed as the operator console. Historical incidents remain available under /status/.