Release notes

This page contains release notes for features and updates to Google Cloud Armor.

You can see the latest product updates for all of Google Cloud on the Google Cloud page, or browse and filter all release notes in the Google Cloud Console.

To get the latest product updates delivered to you, add the URL of this page to your feed reader, or add the feed URL directly: https://cloud.google.com/feeds/armor-release-notes.xml

April 14, 2021

Managed Protection Plus subscribers are also eligible to receive reactive or proactive DDoS response support from Google's DDoS mitigation experts to help triage and mitigate ongoing attacks, as well as DDoS bill protection to provide credits for some bill spikes caused by increased GCP usage as a result being target by a DDoS attack.

For more information, see the public docs.

March 01, 2021

Google Cloud Armor Managed Protection Plus Tier is in General Availability. Managed Protection Plus Tier offers a monthly subscription that includes all of the features of Standard Tier, and bundles Google Cloud Armor WAF policy, rules, HTTP request usage, and named IP lists.

February 19, 2021

Google Cloud Armor Adaptive Protection is available in Public Preview. Adaptive Protection builds machine-learning models that help you protect your Google Cloud applications, websites, and services against L7 distributed denial-of-service (DDoS) attacks.

December 16, 2020

Google Cloud Armor Managed Protection Plus tier is now available in public preview.

December 15, 2020

Third-party named IP address lists are now in general availability. Note that when Google Cloud Armor Managed Protection Plus tier is in general availability, your ability to use third-party named IP address lists will be affected by which Managed Protection tier your projects are in.

The following new WAF rules have been added in public preview:

  • Method enforcement
  • Scanner detection
  • Protocol attack
  • PHP injection attack
  • Session fixation

December 03, 2020

The Google Cloud Armor documentation set has been reorganized. Key updates include:

August 31, 2020

Google Cloud Armor Managed Protection Plus Tier is in Beta. Managed Protection Plus Tier offers a monthly subscription that includes all of the features of Standard Tier, and bundles Google Cloud Armor WAF policy, rules, HTTP request usage, and named IP lists.

Pre-configured rules for local file inclusion (LFI), remote file inclusion (RFI), and remote code execution (RCE) are now in General Availability.

June 23, 2020

Promotional pricing for Google Cloud Armor is extended to July 31, 2020.

May 27, 2020

Error correction: Beta flag removed from feature Google Cloud Armor with Cloud CDN. This feature was released with the status General Availabiliity.

April 15, 2020

Google Cloud Armor support for CDN origins and hybrid origins is now available in General Availability.

April 13, 2020

Update to rules language syntax. Adds support for the CEL 'has' macro so that Google Cloud Armor check for absence of a header in the 'request.headers' map.

March 31, 2020

March 30, 2020

March 17, 2020

Custom rules language, pre-configured WAF rules, and geography-based access controls are now in General Availability.

November 22, 2019

Custom rules language, pre-configured WAF rules, and geography-based access controls are in public Beta.

October 24, 2019

Custom rules language, pre-configured WAF rules, and geography-based access controls are in private Beta.

June 18, 2019

December 06, 2018

Google Cloud Armor monitoring is available in GA.

December 03, 2018

Google Cloud Armor security policies cannot be attached to backend services that are configured to use the HTTP/2 protocol.

March 19, 2018

Google Cloud Armor allow lists are available in Beta.

September 27, 2017

Google Cloud Armor deny lists and allow lists are available in Private Beta.

May 15, 2017