v1.4

Released July 17, 2025

New features

Documentation

• Published an administrator guide covering both product administration and software installation. Download the guide

Traffic-generation platform

• Added the MHDDoS Emulation plugin, including configuration and emulation of its subplugins:
  • Each subplugin can be configured independently and has defaults from the integrated malicious-signature database. MHDDoS Emulation reproduces the payloads, request types, and other connection and packet parameters used by a popular DDoS tool. The implementation is based on real attack data observed by multiple anti-DDoS providers
    • SYN Flood
    • UDP Flood
    • GRE Flood
    • STRESS
    • BYPASS
    • H2 BYPASS
    • HTTP TEMPLATE
    • H2 TEMPLATE
• Added macros to every existing plugin in the HTTP family:
  • Macros automate iteration or randomization of values in selected fields. For example, ${userAgent} in the user-agent field rotates the User-Agent: value on every request by choosing a valid random entry from the built-in signature database
  • Macros are available in nearly every field of HTTP-family plugins and support dozens of string values and variations
  • The architecture supports extending macros to future plugins
• Added GRE Flood with ICMPv6 attack traffic

Web interface

• Added basic feedback notifications. Notifications disappear automatically after five seconds or when clicked, while the underlying design supports persistent errors and important warnings in future releases
• Replaced the hard-coded test issuer with ID 2 by the actual user
• Added the user agreement required by the regulator
• Added defaults throughout the task builder to prevent unpredictable behavior when fields are omitted
• Added -1 as an unlimited value for PPS and RPS rates
• Added a configurable delay between batches of requests or packets

Improvements

Traffic-generation platform

• Added a new 4-tuple allocation mechanism that prevents collisions across plugins. The same small network can now be reused by dozens of plugins until the available stateful 4-tuples are exhausted. The new mechanism also uses less memory and runs faster
• Tasks now stop automatically when the platform detects an error or another problem
• Optimized HTTP/2 stream storage in the hash map, reducing average memory use by a factor of 1.25
• Revised invalid UDP checksum generation to use an offset, producing a more realistic invalid checksum

Web interface

• License-management dialogs can now be closed by clicking the backdrop or pressing Escape
• Redesigned the HWID field to show the complete hash and removed a copy button that could fail because of browser restrictions over HTTP
• License information is refreshed immediately after a successful upload
• Replaced the hard-coded test issuer with ID 2 by the actual user
• Network lists in the task create and edit flows now show ports, gateway, and subnet
• Switching plugins while creating or editing a task now resets the form state, preventing values from the previous plugin from leaking into the next one
• Significantly optimized the plugin builder and added support for subplugins such as those used by MHDDoS Emulation
• Improved the plugin settings and list layout. For example, the left-hand plugin selector can now be collapsed to save screen space
• Added extensive guidance, including tooltips for every macro in every supported field

Fixes

Traffic-generation platform

• Corrected rate calculations for licenses above 50 Gbit/s
• Corrected license rates that were calculated in gigabytes instead of gigabits
• Corrected task shutdown on virtual machines
• Added five seconds to the task runtime to compensate for the fixed initialization delay, keeping the configured and observed duration consistent
• Prevented a failed or crashed task startup from leaving the agent blocked until its service was restarted manually
• Prevented WAF from crashing the agent when all WAF modules are enabled in one task
• Corrected WAF session corruption and unrelated metric values when WAF runs alongside another HTTP-family plugin
• Corrected HTTP/2 stream closure in WAF when a test does not use QUICKTEST
• Corrected HTTP metric recording in WAF when a test does not use QUICKTEST
• Corrected the application of modified L3/L4 parameters in HTTP-family plugins
• Corrected configuration generation when a large subnet excludes every IP address except the first one

Web interface

• Prevented the left-hand menu from opening after a window resize before the user is authenticated
• Replaced the object object text shown instead of an agent name while editing an existing task
• Restored network-list access while editing a task

To update software on a virtual machine, follow the installation and update guide.

---