Cloudflare One, Cloudflare WAN - IPsec downgrade protection (beta)
BetaUnverifiedAdded Sep 24, 2026
Cloudflare IPsec now supports the IKE_SA_INIT_FULL_TRANSCRIPT_AUTH ↗ IKEv2 extension to protect against downgrade attacks on IPsec tunnels. IKEv2's original authentication design has each endpoint sign only its own outbound messages, not the full handshake transcript.
More Cloudflare developer platform releases
Every Cloudflare developer platform release| Date | Release | Type |
|---|---|---|
| Jul 8 | AI Search - Filter AI Search list items by exact object keyunverified Update | Update |
| Jul 8 | Workers AI, AI Search - Workers AI toMarkdown and AI Search now supports GIF and BMP image conversionunverified Update | Update |
| Jul 8 | Cloudflare Network Firewall, Magic Transit, Cloudflare WAN - IP lists, IDS, and SIP rules supported in Unified Routingunverified Beta | Beta |
| Jul 8 | R2 SQL - Query R2 Data Catalog tables with R2 SQL from the dashboardunverified Update | Update |
| Jul 8 | Workers AI - Moondream 3.1 now available on Workers AIunverified Update | Update |
| Jul 8 | Workers - Cloudflare Dropunverified Preview | Preview |
| Jul 9 | Workflows - Workflows now supports delay functions when retryingunverified Update | Update |
| Jul 9 | Digital Experience Monitoring - Wi-Fi signal and network performance analytics for Cloudflare One Client devicesunverified Update | Update |
Also shipped on Jul 8, 2026
Cloudflare in July 2026
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.