CDNLite v1.2.0

CDNLite v1.2.0

CDNLite v1.2.0 focuses on easier security operations, improved managed SSL automation, safer DNS reconciliation, and a cleaner origin routing model.

What’s New

Security Center

• Added a new Security Center tab in the domain dashboard.
• Added protection intents for common security outcomes.
• Added protection profiles for applying grouped security presets.
• Added preview, apply, disable, and undo workflows before changing generated rules.
• Added managed rule metadata so WAF, rate-limit, cache, header, and IP rules can track whether they were generated by a profile or manually changed.
• Added support for detaching managed WAF and rate-limit rules so operators can take manual control of generated rules.

Managed SSL Improvements

• Added automatic managed SSL handling for apex and wildcard hostnames.
• Improved SSL job scheduling, status reporting, and dashboard feedback.
• Added DNS visibility checks before ACME validation.
• Added stale SSL job retry configuration.
• Improved validation errors when SSL is requested before nameserver verification or without proxied DNS records.
• Added an explicit SSL request CLI command to the documented workflow.

DNS And PowerDNS Reliability

• Added per-record DNS reconciliation retry support from the dashboard/API.
• Improved PowerDNS reconciliation behavior and failure diagnostics.
• Added authority-only PowerDNS zones for pending domains, keeping platform NS/SOA records visible before nameserver verification while avoiding premature publication of customer records.
• Improved DNS e2e coverage for readonly platform nameserver records and managed DNS behavior.

Origin Routing Refactor

• Refactored origin handling away from primary/backup terminology toward a pool of enabled origins.
• Updated edge routing to select from the healthy origin pool.
• Simplified OpenResty backup-origin handling and improved error reporting when no healthy origin is available.
• Updated origin-related docs, tests, dashboard text, and routing defaults.

Dashboard And UX

• Added a domain deletion confirmation dialog requiring the domain name before destructive deletion.
• Improved Security Center layout, preview screens, and profile-specific intent presentation.
• Improved SSL job queue messages, scheduler hints, and active job progress display.
• Added clearer DNS reconciliation and SSL error messages.

Edge Agent And Metrics Reliability

• Improved metrics push behavior with queue locking.
• Preserved collector responses for failed metrics pushes.
• Added quarantine handling for invalid metric lines.
• Added recovery logic for invalid preserved metrics payloads.
• Updated troubleshooting documentation for these edge-agent flows.

Documentation And API

• Updated API documentation and OpenAPI definitions for Security Center, protection profiles, protection intents, DNS reconciliation, managed rule detaching, and SSL workflows.
• Updated setup, runbook, DNS, troubleshooting, and dashboard usage docs.
• Added new environment options for ACME DNS precheck and stale SSL job retry behavior.

Upgrade Notes

• Review any automation that depends on primary / backup origin terminology. v1.2.0 moves toward a unified enabled-origin pool model.

• Review managed SSL settings and new environment variables:

  • CDNLITE_ACME_PUBLIC_DNS_PRECHECK
  • CDNLITE_SSL_JOB_STALE_RETRY_SECONDS

• If using generated protection rules, review Security Center previews before applying profiles in production.

• If you have custom DNS publishing assumptions, note that pending domains now keep authority records visible while withholding customer records until nameserver verification.

Full Changelog: v1.1.0...v1.2.0