Version 5.3.2 of Cequence Bridge was released January 14, 2025.

Release Highlights

Advanced filtering support: Cequence Bridge now supports advanced filters. Using advanced filtering, you can configure query parameters, request headers, or response headers to decide whether to send traffic to Cequence UAP. Filtering configuration is now based on application tags instead of host and path values.

Configurable traffic sampling: Cequence Bridge now supports traffic sampling configuration to send just a portion of the total application traffic to Cequence UAP instead of all traffic. This is particularly useful for API discovery and inventory use cases for which all API traffic need not be analyzed in order to discover, classify and inventory APIs. Sampling configuration includes a percentage value of traffic, which can be changed at any time by a Cequence administrator. Sampling is enforced at the API endpoint level.

Sensitive data masking: Cequence Bridge now supports masking sensitive data before transmitting to the Cequence UAP platform for analysis. This is particularly useful for SaaS deployments where customers may want to configure masking of sensitive data values in API request or response payloads before sending traffic to Cequence for analysis. This configuration is also part of the filtering configuration and can be configured per application tag.

Release 5.3.2

DEF-1568 Sensor bridge OOM observed due to connector read queue not getting drained quickly when sdm is enabled

DEF-1570 Add support to drop bodies in ceq-bridge

DEF-1570 Configuration Requirement

Configure the DISCARD_BODY environment variable to enable this feature.

Release 5.3.0

Epic

DEF-1166 Cequence bridge for Intelligent Edge

Story

DEF-1167 Disable existing filter configuration and processing or update it to use the new model.

DEF-1341 Add support for the update of the new sensor config bundle

DEF-1342 Ensure filtering, discovery, and masking are not applied again if already applied

DEF-1355 Update the Cequence Bridge Helm Chart to support Intelligent Edge

DEF-1382 Add support to auto-detect reader format from payload.

DEF-1285 Add metrics for number of IPs and FPs in data-sets.

DEF-1288 NLP IBAN case sensitive evaluation and implementation

DEF-1313 Add http-reader-config in external sensor-connector extra_opts

DEF-1406 Expose metrics using Prometheus.

DEF-1414 Add support for enabling/disabling ssl certificate verification when talking to UAP.

Compatibility