Starstruk Logo MarkStarstruk

v9.4.1

chaitin/SafeLinev9.4.1Sep 3, 2026by jlongWang

AI Summary

This release introduces log filtering by Rule ID and one-click navigation from statistics to handling lists. It also updates SSL compliance defaults to TLS 1.2/1.3 and improves upstream health check concurrency.

Key Highlights

  • Filter allowlist and denylist logs by Rule ID
  • One-click navigation from Statistics to specific handling lists
  • Concurrent upstream health checks with retry logic
  • SSL compliance defaults to TLS 1.2/1.3

Breaking Changes

  • SSL compliance defaults to TLS 1.2/1.3; older protocols must be manually re-enabled if required.

New Features

  • Configurable upstream health check intervals (10–3600 seconds)

Full Release Notes

### Added

- Allowlist and denylist detection logs can now be filtered by Rule ID, making it easier to locate the corresponding logs directly from a specific rule.
- Abnormal data such as blocked requests, rate limiting, Anti-bot, and Auth in Statistics support one-click navigation to the corresponding lists for further handling.
- Applications support configuring the upstream health check interval separately (10–3600 seconds). When health checks are disabled, the existing interval is retained.

### Improvements

- SSL compliance now enables only TLS 1.2 / TLS 1.3 by default. After upgrading, the global SSL protocols will be changed to these two versions. Application-level custom configurations are the same. If TLS 1.0 / TLS 1.1 is still required, re-enable them in the global SSL compliance settings. A warning about weak protocol risks will be displayed when saving.
- Add definitions for the Semantic Analysis detection modes including Audit Mode, Balance Mode, Strict Mode.
- Upstream health checks are now executed concurrently between applications. A failure or delay in one application will no longer block other applications. A health check will be performed immediately after saving the configuration, with a 30-second backoff retry after a failure.
- Enhanced the randomness of management console session keys to reduce the risk of session forgery.
- Updated the geolocation database.

### Fixes

- Fixed an issue where ACME HTTP-01 certificate issuance and automatic renewal failed when Redirect HTTP to HTTPS was enabled.
- Fixed an issue where applying a new license could get stuck when the previous license was expired or invalid.
- Fixed an issue where the synchronization time was not displayed and synchronization could not be completed properly during an empty full synchronization between Master and Slave nodes.
- Fixed an issue where the Anti-bot Challenge service could exit unexpectedly during an upgrade, causing the update to fail.
- Fixed an issue where Custom Rule -> Detail display could overflow in narrow windows.
- Fixed an issue where rate-limit alerts could not be sent externally when the notification scope was set to All applications.