Rate Limiting and Alerts

Security Security Console & API Data Services Dashboard Data Rate Limiting and Alerts Requests Signals Dashboard
 
03 December 2024, 17:00 UTC

We are investigating elevated errors to our configuration features within our Security Console & API services.

All other products and services are unaffected by this incident.


 
04 December 2024, 16:43 UTC

Our engineers have identified the contributing factor and are applying a fix to our Security Console & API.

All other locations and services are unaffected.

 
04 December 2024, 16:45 UTC

Engineering has confirmed the impact to our Security Console & API services has been mitigated.

 
04 December 2024, 16:50 UTC

Engineering has confirmed that configuration features within our Security Console & API services has been fully restored. Customers may have experienced 404 errors when enabling, disabling, or configuring security protection features from the 3rd of December 2024 at 17:00 to the 4th of December 2024 at 16:19 UTC.

This incident is resolved.

Affected customers may have experienced impact to varying degrees and to a shorter duration than as set forth above.

To offer feedback on our status page, click "Give Feedback

Status Post, Created Date/Time: 2024-12-04 16:38:03 UTC 



Note: Our Customer Escalation Management team will update the start date and time of the initial "investigating" status post upon the resolution of this incident. This update is meant to provide our customers and their end users with a potential impact window. The date and time mentioned in the message above indicates when the status post was requested by our Acute Incident Response team.

Security Security Console & API Data Services Dashboard Data Rate Limiting and Alerts Requests Signals Dashboard
 
22 November 2024, 02:06 UTC

Fastly Engineers detected a performance impacting event affecting the Security Console & API service.

All other data centers and services were unaffected. The issue has been resolved and we are monitoring performance closely.

Security Security Console & API Next-Gen WAF (NGWAF) Rate Limiting and Alerts
 
25 April 2024, 17:50 UTC

We are investigating elevated errors from Advanced Rate Limiting (ARL) on EdgeWAF services.

 
25 April 2024, 18:47 UTC

Our engineers have identified the contributing factor and are applying a fix to our Advanced Rate Limiting (ARL) on EdgeWAF services

 
25 April 2024, 20:08 UTC

Engineering has confirmed the impact to our Advanced Rate Limiting (ARL) on EdgeWAF services has been mitigated.

 
25 April 2024, 20:15 UTC

Engineering has confirmed that our Advanced Rate Limiting (ARL) on EdgeWAF services has been fully restored. Customers may have experienced rules being applied to additional requests post match, that should not be rate limited from 17:50 to 20:15 UTC.

Affected customers may have experienced impact to varying degrees and to a longer duration than as set forth above.

This incident is resolved.

Compute Security Security Console & API Fastly Application API & Configuration Management Data Services Dashboard Data Rate Limiting and Alerts Requests Signals Dashboard
 
28 March 2024, 15:46 UTC

Fastly is extending our launch of a unified login experience across Fastly and Signal Sciences consoles. This launch makes it simpler and easier for you to access Fastly products and services using a single set of login credentials. Continuing from today, 28th of March 2024 to the 30th of April 2024, we will gradually rollout our new web interface as part of the upgraded login experience. A summary of the main changes appears below.


What's changing? 


Single set of credentials to login to Fastly and Signal Sciences console. Simplified login will allow you to use a single set of login credentials to access all products and features across Fastly's suite of offerings. If you have both Fastly and Signal Sciences accounts that use the same email address and use password and 2FA for authentication, you can use Fastly credentials to log in to both Fastly and Signal Science console.


Log in once and access both accounts. You have to sign-in only once and can switch between Fastly or Signal Sciences console seamlessly without having to log in again if you use the same email address.


Password and 2FA management in one place. You'll be able to change passwords and set up two-factor authentication directly in the Fastly console for both Fastly and Signal Sciences accounts.


Service Provider initiated SSO is now supported. You can log in directly at either Fastly or Signal Sciences console login page using SSO without going to your IdP page.


Password reset got simpler. You can reset your passwords without having to create a temporary password.


Account linking will no longer be required. Customers with both Fastly and Signal Sciences accounts will no longer need to manually link those accounts. Already have linked accounts? You won't need to do anything and can start using your Fastly credentials immediately.


New passwords will be required to conform to NIST guidelines. The complexity for new and changed passwords will be required to conform to digital identity guidelines from the National Institute of Standards and Technology (specifically, the NIST800-63B guidelines). Existing passwords won't be affected until you choose to update them.


Session timeouts will be standardized and more secure. We added additional measures to increase your security posture on the Fastly platform. You will be logged out after 30 minutes of inactivity. Session timeouts will also have a default maximum of 12 hours for any organization that hasn't set up single sign-on.


What's next? What do I have to do?


That's it!. The transition will be seamless and you are not required to take additional steps. You will see a new login experience when we enable this feature for you.


Please refer to documentation for additional information.


Still have questions? Feel free to contact your account manager or customer support for additional details.


Compute Security Security Console & API Fastly Application API & Configuration Management Data Services Dashboard Data Rate Limiting and Alerts Requests Signals Dashboard
 
20 February 2024, 17:41 UTC

Fastly is excited to announce the launch of a unified login experience across Fastly and Signal Sciences consoles to make it simpler and easier for you to access Fastly products and services using a single set of login credentials. Starting today, the 20th of February 2024, we'll be doing a gradual rollout of a new web interface as part of the upgraded login experience. A summary of the main changes appears below.

What's changing? 

Single set of credentials to login to Fastly and Signal Sciences console. Simplified login will allow you to use a single set of login credentials to access all products and features across Fastly's suite of offerings. If you have both Fastly and Signal Sciences accounts that use the same email address and use password and 2FA for authentication, you can use Fastly credentials to log in to both Fastly and Signal Science console.

Log in once and access both accounts. You have to sign-in only once and can switch between Fastly or Signal Sciences console seamlessly without having to log in again if you use the same email address.

Password and 2FA management in one place. You'll be able to change passwords and set up two-factor authentication directly in the Fastly console for both Fastly and Signal Sciences accounts.

Service Provider initiated SSO is now supported. You can log in directly at either Fastly or Signal Sciences console login page using SSO without going to your IdP page.

Password reset got simpler. You can reset your passwords without having to create a temporary password.

Account linking will no longer be required. Customers with both Fastly and Signal Sciences accounts will no longer need to manually link those accounts. Already have linked accounts? You won't need to do anything and can start using your Fastly credentials immediately.

New passwords will be required to conform to NIST guidelines. The complexity for new and changed passwords will be required to conform to digital identity guidelines from the National Institute of Standards and Technology (specifically, the NIST800-63B guidelines). Existing passwords won't be affected until you choose to update them.

Session timeouts will be standardized and more secure. We added additional measures to increase your security posture on the Fastly platform. You will be logged out after 30 minutes of inactivity. Session timeouts will also have a default maximum of 12 hours for any organization that hasn't set up single sign-on.

What's next? What do I have to do?

That's it!. The transition will be seamless and you are not required to take additional steps. You will see a new login experience when we enable this feature for you.

Please refer to documentation for additional information.

Still have questions? Feel free to contact your account manager or customer support for additional details.


 
22 March 2024, 15:34 UTC

This maintenance has been extended and further updates will be shared on Continued Feature Launch: Unified Fastly and Signal Sciences Login Experience







Security Agents and Module Security Console & API Data Services Dashboard Data Rule and IP List updates Rate Limiting and Alerts Requests Signals Dashboard
 
15 March 2023, 19:36 UTC
We have updated a new certificate with new IP ranges. Customers may see their agents appear to be offline or have trouble connecting to the control plane after a DNS change was made. We recommend they allow list the Fastly public IP range if they had IP based networks controls in place previously. Please let us know about any certificate issues as they should be transient. This may also impact Signal Sciences data collectors. New events from agents may not be processed by our back end services, agents may erroneously appear to be offline, and agents may not be receiving updated rules sets. Customers may experience also delays in data available in the Signal Sciences console. 
 
15 March 2023, 19:42 UTC

This issue has been identified and a fix is being implemented. 

 
15 March 2023, 20:05 UTC

A fix has been implemented and we are monitoring the results.

 
15 March 2023, 20:20 UTC

This incident has been resolved.

Security Security Console & API Rate Limiting and Alerts
 
22 January 2023, 20:49 UTC

We have identified an issue impacting Signal Sciences rate limit decisioning and are currently investigating. As it stands Rate Limit rules may not be resulting in blocking as expected, further impact to the services are currently being determined.

 
22 January 2023, 21:18 UTC

This issue has been identified and a fix is being implemented. 

 
22 January 2023, 21:30 UTC

A fix has been implemented and we are monitoring the results.

 
22 January 2023, 22:19 UTC

This incident has been resolved.

Security Security Console & API Rate Limiting and Alerts
 
17 January 2023, 22:33 UTC

We have identified an issue impacting rate limit decisioning and are currently investigating. As it stands Rate Limit rules may not be resulting in blocking as expected. All other services are unaffected.

 
17 January 2023, 23:08 UTC

This issue has been identified and a fix is being implemented. 

 
18 January 2023, 00:18 UTC

A fix has been implemented and we are monitoring the results.

 
18 January 2023, 00:34 UTC

This incident has been resolved.

Security Security Console & API Data Services Dashboard Data Rate Limiting and Alerts Requests Signals Dashboard
 
15 January 2023, 22:22 UTC

Our teams have detected an issue that is currently impacting Signal Sciences data collectors. New events from agents may not be processed by our back end services, agents may erroneously appear to be offline, and agents may not be receiving updated rules sets. Rate limit rules may not perform as expected. Customers may experience also delays in data available in the Signal Sciences console.

 
16 January 2023, 00:19 UTC

A fix has been implemented and we are monitoring the results.

 
16 January 2023, 01:08 UTC

This incident has been resolved.

07 December 2022, 14:04 UTC
Security Security Console & API Rate Limiting and Alerts
 
07 December 2022, 14:04 UTC

We have identified an issue impacting rate limit decisioning and are currently investigating. As it stands Rate Limit rules may not be resulting in blocking as expected, further impact to the services are currently being determined.


 
07 December 2022, 22:48 UTC

A fix has been implemented and we are monitoring the results.