bunny.net Release Notes

Pull Zones now support a European Economic Area (EEA) routing filter that routes all traffic exclusively through 26 PoPs across EU member states plus Iceland and Norway. Use this filter when you need GDPR-compliant data residency across the full EEA.

Pull Zones now support Legacy, Compatible, and Modern only TLS security profiles, configurable per zone. Set the minimum cipher-suite strength to balance stronger security with the client compatibility each workload requires.

Bunny Stream Live - Closed Preview

We’ve opened up bunny Stream customers to signup for our new live streaming preview. The signup banner can be found within your video library! Once approved you’ll be able to live stream at scale globally to your audiences. All managed with the new dashboard control room & API. Features include: RTMP ingest & distribution, scheduling, countdown, DVR, VOD and more.

Bunny Shield Event Logs now support advanced filtering and grouping across Feature, Action, Rule ID, IP / Range, Country, ASN, JA4 Fingerprint, User-Agent, and URL. Combine multiple signals, such as IP, User-Agent, and JA4, to investigate related activity and uncover attack patterns across Shield features. You can also investigate events across multiple days within the 3-day retention window and export results as CSV for further analysis.

You can now connect a Bunny Database directly from the Edge Scripting creation flow. Create a new database or pick an existing one, and we’ll automatically add the connection credentials (BUNNY_DATABASE_URL and BUNNY_DATABASE_AUTH_TOKEN) as script secrets. There’s also a new Database CRUD API script template available to get you started.

Pull Zones now support an IP Family Policy that controls which address families (IPv4, IPv6, or both) are advertised and which edge servers are eligible to serve the zone. Four policies are available: IPv4 Only, Dual Stack (default), Dual Stack Prefer IPv6, and IPv6 Only. Token authentication IP locking now also supports IPv6 addresses, binding at the client’s /64 prefix.

Bunny Storage’s S3-compatible API now supports read-only access keys. Use a dedicated read-only secret access key for S3 connections that should only have read permissions, adding an extra layer of access control to your storage zones.

Bunny Shield now lets you control how verified bots are handled per Shield Zone — allow, block, or take no action — with per-bot and per-category overrides across seven categories: SEO, AI Scraper, AI Tool, Tool, Ads, Preview, and Social. Verification supports both reverse DNS and published IP range checks, and verified bot categories are exposed to the Rule Engine via the VERIFIED_BOT_CATEGORY variable for custom WAF rules.

Edge Scripts can now run before the CDN cache layer, giving you full control over every request instead of only executing on cache misses.

When enabled on a Pull Zone, middleware scripts gain two new hooks — onClientRequest (intercept requests before the cache lookup) and onClientResponse (modify responses before they reach the client, including cached ones).

Standalone scripts also support this mode, running on every request and deciding how responses are cached.

The Bunny CLI now supports creating and managing on-demand cloud sandbox environments backed by Bunny Magic Containers. Each sandbox is a fully isolated Ubuntu container with Node.js, Bun, Python, and Claude Code pre-installed, with 10 GB of persistent storage. Create, SSH into, copy files, expose public URLs, and manage environment variables — all from the CLI.

Seamless Domain Migration now supports HTTP (file-based) validation alongside the existing DNS (TXT record) method for issuing SSL certificates before pointing your domain to bunny.net. Choose DNS if you control your domain’s DNS records, or HTTP if you can place a challenge file on the server your domain currently points to.

S3-Compatible API is now available for all!

We have also added a new S3 Storage Zone region: Sydney (SYD) & Uploadpart now supports Content-MD5 validation.

Support for AVIF, HEIC and HEIF as input formats, and AVIF as an output format, has been promoted to General Availability.