We recently released OpenResty Edge version 26.6.8. This update brings a wealth of new features, a wide range of user-experience improvements, and a series of critical fixes aimed at improving service performance and system stability.

Core Highlights

1. Kernel-level IP blocking, supporting blocking of IP addresses at the OS kernel level. Compared with application-layer blocking, it delivers higher performance and lower resource usage, helping you defend against large-scale malicious traffic more effectively.
2. SSL JA4 fingerprinting, with a new page-rule condition variable type, ssl-ja4, that lets you obtain the SSL JA4 fingerprint—providing strong support for finer-grained client identification and security policies.
3. LDAPS support, with newly added support for LDAP over SSL (LDAPS), further strengthening data-in-transit security in enterprise identity-authentication scenarios.
4. AWS EKS dynamic tokens, with Kubernetes clusters now able to be configured with AWS EKS dynamic tokens, streamlining cluster access and authentication in cloud-native environments.

Enhanced Features & Increased Flexibility

• Faster IP matching at scale: IP address matching has been upgraded from a trie to a radix tree, significantly improving match performance when large IP rule sets are in use.
• Faster HTTP application domain updates: Processing time for HTTP application domain updates has been reduced, improving the responsiveness of configuration changes.
• WAF paranoia level: Page-rule WAF now exposes a paranoia level so you can control how strictly rules are evaluated, achieving a better balance between security and business compatibility.
• Smaller OIDC cookies: You can control what is included in OIDC cookies, reducing cookie size and improving the end-user authentication experience.
• Configurable JS challenge delay: JS challenges add a challenge-delay setting so you can control how long the challenge UI is displayed, increasing flexibility for human-verification flows.
• Stronger node service resiliency: The oredge-node systemd service adds an automatic restart mechanism, further ensuring continued availability of node services.

Improved Usability & Observability

• UI and interaction refinements: Improvements include clearer upstream node cell display, custom shared dictionaries shown as a list, better Edgelang code presentation in page rules, and clearer, more helpful guidance on the gateway monitoring page when a gateway server does not exist—together improving overall usability.

Key Fixes and Stability Enhancements

• Configuration and data consistency: Fixed an issue where named ports on Kubernetes upstreams were not recognized, ensuring upstream settings take effect correctly in cloud-native deployments; fixed incorrect values returned by get-global-var so global variables are read accurately; and fixed 500 errors when setting upstreams in global rewrite rules.
• Core feature stability: Fixed Edge Node communication certificate renewal so inter-node communication stays continuously secure; fixed Nginx configuration validation errors to improve reliability of configuration rollout; and fixed shared dictionary permissions so access control for related features behaves correctly.
• Publishing workflow and auditing: Fixed missing update notifications when batch-deleting unpublished items; fixed the time-format toggle not working on the publish, publish-history, and audit-log list pages; and fixed pending-change notifications not updating in time so publish state is shown more accurately.
• Other important fixes: Fixed JavaScript errors when loading application page rules directly, and an issue where the current application was not refreshed before opening the settings page.

Click here to view the complete release changes

How to Upgrade?

Please contact us to arrange your upgrade. Our expert team will guide you through the upgrade process and assist you in smoothly transitioning to the new version of OpenResty Edge.

We are confident that this update will significantly enhance user experience and service quality. If you have any questions, please feel free to contact us: support@openresty.com

What is OpenResty Edge

OpenResty Edge is our all-in-one gateway software for microservices and distributed traffic architectures. It combines traffic management, private CDN construction, API gateway, security, and more to help you easily build, manage, and protect modern applications. OpenResty Edge delivers industry-leading performance and scalability to meet the demanding needs of high concurrency and high load scenarios. It supports scheduling containerized application traffic such as K8s and managing very large numbers of domains, making it straightforward to meet the needs of large websites and complex applications.