Deploy from any OCI-compliant registry Magic Containers now accepts any OCI-compliant container registry as a private registry, including GitLab, Harbor, Quay, Azure Container Registry, Google Artifact Registry and self-hosted registries. Use the registry you already have, without mirroring images to Docker Hub. The registry must be reachable on a public address over HTTPS. If it rejects your cred…
Dashboard New Load Balancer edge rules. Load Balancer has new edge rule options, and origin groups now include an origin latency period setting. Shield event logs show request IDs. Each Shield event includes the request ID, so you can trace a blocked or challenged request back to its source. Re-encode confirmation in Bunny Stream. Re-encoding a video when Keep Originals is off now opens a confirma…
S3 bulk deletes, object metadata and a new Storage Regions API Bunny Storage’s S3-compatible API now supports DeleteObjects for up to 1,000 keys per request, so AWS CLI, rclone and SDK bulk deletes work out of the box. You can also store custom x-amz-meta-* fields and system headers like Cache-Control with your objects, preserved on copy and returned on every GET and HEAD. Read the S3 docs Plus, t…
Expanded Bunny Shield protections for critical PHP vulnerabilities Following PHP's security release, we've updated our post on CVE-2026-109618 and CVE-2026-109619 with the confirmed vulnerability details and fixed versions. Bunny Shield has also added a managed WAF rule for multipart field names nested 20 or more levels. It joins our earlier rule for the default PHP_SESSION_UPLOAD_PROGRESS field.…
Bunny Shield rule for PHP CVE-2026-109618 and CVE-2026-109619 A managed WAF rule is now active for the multipart request pattern found in publicly circulating scripts associated with these vulnerabilities. For Shield Zones with the WAF in blocking mode, matching requests are blocked before they reach the origin. In log-only mode, the rule does not block requests. Bunny Shield respects each custome…
React Native Mobile SDK and Expo support The Bunny Stream React Native Mobile SDK brings the native Bunny Stream players, uploads, and content management APIs to iOS and Android through one TypeScript interface. Use it in a React Native application or an Expo development build.Learn more
Redesigned Overview and settings We’ve redesigned the Overview and container settings pages in Magic Containers. The Overview has an activity panel that shows live CPU, memory and bandwidth usage against each resource limit. An application status block tells you whether your app is running, and if it isn’t, it links you straight to the logs. Container settings list every deployed container with it…
ping support in containers The ping command now works inside Magic Containers. Use it to check that a host is reachable from your application.
CDN Load Balancer Load Balancer distributes uncached Pull Zone requests across multiple origin servers. Configure origin groups with priority-based failover tiers, choose from routing methods like Round Robin, Weighted Random, Geo Location, and Lowest Average Latency, and enable active health checks to automatically remove failing origins from rotation. Sticky sessions pin returning visitors to th…
Connect a Bunny Storage Zone when creating an Edge Script You can now create or connect a Bunny Storage Zone when creating an Edge Script. We'll automatically add the connection credentials (BUNNY_STORAGE_ZONE_NAME, BUNNY_STORAGE_HOSTNAME, and BUNNY_STORAGE_ACCESS_KEY) as script secrets.
Agent Readability (Public Preview) Agent Readability, a Bunny Optimizer feature, has been released in public preview. It makes your website easier and more efficient for AI systems to consume by serving clean, focused, token-efficient Markdown content and an llms.txt file, without changing the experience for human visitors. Learn more
Burrow Active Origin Probing (Public Preview) Burrow active origin probing has been released in public preview. Burrow periodically tests origin connection quality from the edge with lightweight checks, so it can map optimal paths even when a Pull Zone sees little traffic. Learn more
Burrow Smart Routing is now GA Burrow Smart Routing has been promoted to General Availability. The rebuilt routing engine adds optional Active Origin Probing to test alternative origin routes, adapts faster to network changes, and requires a meaningful measured improvement before rerouting traffic. Read the announcement.
Before cache execution for Edge Scripts (Public Preview) Edge Scripts can now run before the CDN cache layer, giving you full control over every request instead of only executing on cache misses. Enable it per Pull Zone under General > Origin > Run script before cache. Middleware scripts gain two new hooks: onClientRequest (intercept requests before the cache lookup) and onClientResponse (modify r…
Verified bot customization for Shield Zones Bunny Shield now lets you control how verified bots are handled per Shield Zone: allow, block, or take no action, with per-bot and per-category overrides across seven categories: SEO, AI Scraper, AI Tool, Tool, Ads, Preview, and Social. Verification supports both reverse DNS and published IP range checks, and verified bot categories are exposed to the Ru…
IP Family Policy for Pull Zones Pull Zones now support an IP Family Policy that controls which address families (IPv4, IPv6, or both) are advertised and which edge servers are eligible to serve the zone. Four policies are available: IPv4 Only, Dual Stack (default), Dual Stack Prefer IPv6, and IPv6 Only. Token authentication IP locking now also supports IPv6 addresses, binding at the client's /64 p…
Cloud sandbox environments via Bunny CLI bunny sandbox manages on-demand cloud sandbox environments backed by Bunny Magic Containers. Create sandboxes (create), connect via SSH (ssh), run commands (exec), copy files (cp), browse remote files (files), expose ports as public HTTPS endpoints (url add/list/delete), and manage persistent environment variables (env set/list/delete). Each sandbox is a fu…
Server-Sent Events with Edge Scripting An Edge Script can answer a request with a stream of Server-Sent Events by returning a Response that holds a ReadableStream, and the edge delivers each event as the script writes it. Return the response before you await anything, write the first event as soon as the stream opens, and pass a promise to waitUntil that resolves when the stream ends so the isolat…
Bunny Database Client (Public Preview) @bunny.net/database-client is a dependency-free SQL client for Bunny Database. The same code runs on Edge Scripting, Bun, and Node. It supports prepared statements, tagged-template queries, batched statements that roll back together, and row types inferred from each statement. Read the announcement or learn more.
Bunny Database Migrations in the CLI (Public Preview) The CLI now versions your Bunny Database schema as plain .sql files kept in your repository. Create a migration with migrations create, apply pending ones in filename order with migrations apply, and review what has run with migrations list. The CLI records every applied migration, so the same file never runs twice. Read the announcement or lea…
HTMLRewriter, Cache API, and Before cache execution for Edge Scripts are now GA Edge Scripting's HTMLRewriter, Cache API, and Before cache execution have been promoted to General Availability and are no longer in preview. Learn more
HTMLRewriter, Cache API, and Before cache execution for Edge Scripts are now generally available Edge Scripting's HTMLRewriter, Cache API, and Before cache execution have been promoted to General Availability and are no longer in preview. Learn more
Before cache execution for Edge Scripts (Preview) Edge Scripts can now run before the CDN cache layer, giving you full control over every request instead of only executing on cache misses. When enabled on a Pull Zone, middleware scripts gain two new hooks. onClientRequest (intercept requests before the cache lookup) and onClientResponse (modify responses before they reach the client, including cac…
Verified bot customization for Shield Zones Bunny Shield now lets you control how verified bots are handled per Shield Zone. allow, block, or take no action, with per-bot and per-category overrides across seven categories: SEO, AI Scraper, AI Tool, Tool, Ads, Preview, and Social. Verification supports both reverse DNS and published IP range checks, and verified bot categories are exposed to the Ru…
Cloud sandbox environments via Bunny CLI The Bunny CLI now supports creating and managing on-demand cloud sandbox environments backed by Bunny Magic Containers. Each sandbox is a fully isolated Ubuntu container with Node.js, Bun, Python, and Claude Code pre-installed, with 10 GB of persistent storage. Create, SSH into, copy files, expose public URLs, and manage environment variables, all from the…
S3 API compatibility improvements The S3 API now supports virtual hosted-style URLs alongside path-style URLs, adds ETag and conditional request support to HeadObject and GetObject, improves CopyObject with content-type preservation, metadata directives, and conditional copy headers, and returns a standard SlowDown (503) response with a Retry-After header when requests are rate limited.
TLS Security Levels for Pull Zones Pull Zones now support Legacy, Compatible, and Modern only TLS security profiles, configurable per zone. Set the minimum cipher-suite strength to balance stronger security with the client compatibility each workload requires. Learn more
EEA Routing Filter for Pull Zones Pull Zones now support a European Economic Area (EEA) routing filter that routes all traffic exclusively through 26 PoPs across EU member states plus Iceland and Norway. Use this filter when you need GDPR-compliant data residency across the full EEA. Learn more
Investigative Event Logs for Bunny Shield Bunny Shield Event Logs now support advanced filtering and grouping across Feature, Action, Rule ID, IP / Range, Country, ASN, JA4 Fingerprint, User-Agent, and URL. Combine multiple signals, such as IP, User-Agent, and JA4, to investigate related activity and uncover attack patterns across Shield features. You can also investigate events across multiple da…
Bunny Stream Live - Closed Preview We've opened up bunny Stream customers to signup for our new live streaming preview. The signup banner can be found within your video library! Once approved you'll be able to live stream at scale globally to your audiences. All managed with the new dashboard control room & API. Features include: RTMP ingest & distribution, scheduling, countdown, DVR, VOD and more…