Read-only password support for S3 API Bunny Storage's S3-compatible API now supports read-only access keys. Use a dedicated read-only secret access key for S3 connections that should only have read permissions, adding an extra layer of access control to your storage zones. Learn more
Connect a Bunny Database from the Edge Scripting creation flow You can now connect a Bunny Database directly from the Edge Scripting creation flow. Create a new database or pick an existing one, and we'll automatically add the connection credentials (BUNNY_DATABASE_URL and BUNNY_DATABASE_AUTH_TOKEN) as script secrets. There's also a new Database CRUD API script template available to get you starte…
Cloud sandbox environments via Bunny CLI The Bunny CLI now supports creating and managing on-demand cloud sandbox environments backed by Bunny Magic Containers. Each sandbox is a fully isolated Ubuntu container with Node.js, Bun, Python, and Claude Code pre-installed, with 10 GB of persistent storage. Create, SSH into, copy files, expose public URLs, and manage environment variables — all from the…
IP Family Policy for Pull Zones Pull Zones now support an IP Family Policy that controls which address families (IPv4, IPv6, or both) are advertised and which edge servers are eligible to serve the zone. Four policies are available: IPv4 Only, Dual Stack (default), Dual Stack Prefer IPv6, and IPv6 Only. Token authentication IP locking now also supports IPv6 addresses, binding at the client's /64 p…
Cache API documentation reorganized into dedicated section The Edge Scripting Cache API documentation has been restructured from a single page into a multi-page section covering the API overview and limitations, managing default and named caches, reading and writing cache entries (match, put, delete), and end-to-end examples including a new on-demand refresh and purge recipe. The waitUntil runtime…
Edge Scripting Runtime API and waitUntil documentation New Runtime API reference page for Edge Scripting, documenting the waitUntil function that allows scripts to continue running after a request completes — useful for maintaining WebSocket connections and background tasks. The WebSocket guide has also been updated with a practical waitUntil example. Learn more
Symbolic links, timestamps, and permissions in Edge Scripting The Edge Scripting Node.js file system module now supports symbolic links (symlink(), readlink(), lstat()), returns correct file timestamps (atime, mtime, ctime, birthtime), and enforces owner-level file and directory permissions (chmod(), access(), Stats.mode). Learn more
Verified bot customization for Shield Zones Bunny Shield now lets you control how verified bots are handled per Shield Zone — allow, block, or take no action — with per-bot and per-category overrides across seven categories: SEO, AI Scraper, AI Tool, Tool, Ads, Preview, and Social. Verification supports both reverse DNS and published IP range checks, and verified bot categories are exposed to the…
Verified bot customization for Shield Zones Bunny Shield now lets you control how verified bots are handled per Shield Zone — allow, block, or take no action — with per-bot and per-category overrides across seven categories: SEO, AI Scraper, AI Tool, Tool, Ads, Preview, and Social. Verification supports both reverse DNS and published IP range checks, and verified bot categories are exposed to the…
Before cache execution for Edge Scripts (Preview) Edge Scripts can now run before the CDN cache layer, giving you full control over every request instead of only executing on cache misses. When enabled on a Pull Zone, middleware scripts gain two new hooks — onClientRequest (intercept requests before the cache lookup) and onClientResponse (modify responses before they reach the client, including ca…
Before cache execution for Edge Scripts (Preview) Edge Scripts can now run before the CDN cache layer, giving you full control over every request instead of only executing on cache misses. When enabled on a Pull Zone, middleware scripts gain two new hooks — onClientRequest (intercept requests before the cache lookup) and onClientResponse (modify responses before they reach the client, including ca…
Bunny Player extended Chromecast support We've just updated the Bunny player with a rebuilt Chromecast experience. Casting now supports eDRM (Widevine-protected) videos, closing a long-standing gap versus the legacy player. The TV experience feels native, with the video title and thumbnail on screen and player colors and captions appearance (color, font, size, language) synced from the embed. View…
Bunny Player extended Chromecast support We've just updated the Bunny player with a rebuilt Chromecast experience. Casting now supports eDRM (Widevine-protected) videos, closing a long-standing gap versus the legacy player. The TV experience feels native, with the video title and thumbnail on screen and player colors and captions appearance (color, font, size, language) synced from the embed. View…
HTTP validation for Seamless Domain Migration Seamless Domain Migration now supports HTTP (file-based) validation alongside the existing DNS (TXT record) method for issuing SSL certificates before pointing your domain to bunny.net. Choose DNS if you control your domain's DNS records, or HTTP if you can place a challenge file on the server your domain currently points to. Learn more
HTTP validation for Seamless Domain Migration Seamless Domain Migration now supports HTTP (file-based) validation alongside the existing DNS (TXT record) method for issuing SSL certificates before pointing your domain to bunny.net. Choose DNS if you control your domain's DNS records, or HTTP if you can place a challenge file on the server your domain currently points to. Learn more
AVIF, HEIC and HEIF are now GAAVIF, HEIC and HEIF are now GA Support for AVIF, HEIC and HEIF as input formats, and AVIF as an output format, has been promoted to General AvailabilitySupport for AVIF, HEIC and HEIF as input formats, and AVIF as an output format, has been promoted to General Availability. Learn more
S3 API 'Public Preview' launched S3-Compatible API is now available for all! We have also added a new S3 Storage Zone region: Sydney (SYD) & Uploadpart now supports Content-MD5 validation. Learn more
AVIF, HEIC and HEIF are now GAAVIF, HEIC and HEIF are now GA Support for AVIF, HEIC and HEIF as input formats, and AVIF as an output format, has been promoted to General AvailabilitySupport for AVIF, HEIC and HEIF as input formats, and AVIF as an output format, has been promoted to General Availability. Learn more
S3 API 'Public Preview' launched S3-Compatible API is now available for all! We have also added a new S3 Storage Zone region: Sydney (SYD) & Uploadpart now supports Content-MD5 validation. Learn more
AVIF, HEIC and HEIF are now GA Support for AVIF, HEIC and HEIF as input formats, and AVIF as an output format, has been promoted to General Availability. Learn more
WebSocket pay-as-you-go pricing WebSocket billing has moved to pay-as-you-go pricing based on connection-minutes, replacing the previous tiered monthly subscription model. Connection limits can now be configured from 100 to 25,000 concurrent connections per zone. Learn more
Vary Cache by Request Headers You can now vary cached content based on the value of one or more request headers, such as Accept-Language. Each unique header value combination creates a separate cache entry, enabling localized content, feature flags, and device-specific experiences without sacrificing CDN caching. Learn more
CDN Logging API enhancements The CDN Logging API now supports exact request ID lookup and includes additional fields such as JA4 TLS client fingerprint, ASN, and ASN organization in the response. Learn more
WebSocket pay-as-you-go pricing WebSocket billing has moved to pay-as-you-go pricing based on connection-minutes, replacing the previous tiered monthly subscription model. Connection limits can now be configured from 100 to 25,000 concurrent connections per zone. Learn more
Vary Cache by Request Headers You can now vary cached content based on the value of one or more request headers, such as Accept-Language. Each unique header value combination creates a separate cache entry, enabling localized content, feature flags, and device-specific experiences without sacrificing CDN caching. Learn more
CDN Connectivity documentation New documentation covering IPv4 and IPv6 connectivity across the bunny.net CDN, including network tier support, origin connectivity, CDN Acceleration with dual-stack origins, and Origin Shield for guaranteed IPv6 connectivity. Learn more
Custom Response Pages for Bunny Shield Customize the challenge, block, and rate limit pages shown to visitors when Bunny Shield takes action. Replace default response pages with fully branded HTML experiences that match your website, including custom styling, messaging, and support information. Available on Advanced and higher Shield plans. Learn more
Custom Response Pages for Bunny Shield Customize the challenge, block, and rate limit pages shown to visitors when Bunny Shield takes action. Replace default response pages with fully branded HTML experiences that match your website, including custom styling, messaging, and support information. Available on Advanced and higher Shield plans. Learn more
Direct play URLs now support query parameters and documentation improvements Added direct play URL and embed URL examples with query parameters, documented the -auto captions flag, and improved cross-linking between Stream pages. Updated MP4 fallback documentation to reflect support for 240p, 360p, 720p & 1080p resolutions. Learn more
Direct play URLs now support query parameters and documentation improvements Added direct play URL and embed URL examples with query parameters, documented the -auto captions flag, and improved cross-linking between Stream pages. Updated MP4 fallback documentation to reflect support for 240p, 360p, 720p & 1080p resolutions. Learn more