Skip to content
Products
Platform
Developer Tools
Portal

Release notes

  • Aug 2026

    Section titled “Aug 2026”
    • announcement

      STACKIT ALB WAF is now generally available

      Section titled “STACKIT ALB WAF is now generally available”

      We are excited to announce that the STACKIT Application Load Balancer Web Application Firewall (ALB WAF) has reached General Availability (GA) as of 04 August 2026. You can now manage production-grade ALB WAF configurations via the stable v1 API, and Terraform.

      The ALB WAF is powered by the Coraza engine and inspects Layer 7 traffic on a per-listener basis. It combines a managed rule set based on the OWASP Core Rule Set with a structured JSON abstraction over SecLang, enabling you to author custom detection rules without writing raw SecLang directives.

      GA scope

      • API & SDK: Full support on the stable v1 API surface and updated SDKs for managing ALB WAF instances, managed rule sets, and custom rule groups.
      • Terraform Provider: Resource and data source support available for infrastructure-as-code automation.
      • Observability: ALB WAF records ship alongside Envoy logs under the component="waf" label and can be routed to attached STACKIT Observability instances.

      Post GA scope

      • STACKIT Portal UI: Full visual interface for configuring ALB WAF instances, attaching rule sets to load balancing listeners, and tuning rule actions.

      Explore our documentation to learn about basic concepts, management options, and the selector catalog:

  • Jul 2026

    Section titled “Jul 2026”
    • announcement

      STACKIT ALB WAF available in preview

      Section titled “STACKIT ALB WAF available in preview”

      We’re excited to announce that the STACKIT Application Load Balancer Web Application Firewall (ALB WAF) is available in preview as of 23 July 2026. You can start integrating and testing the service through the v1beta API today. General availability is planned for August 2026.

      The ALB WAF is powered by the Coraza engine and inspects Layer 7 traffic on a per-listener basis. It combines a managed rule set based on the OWASP Core Rule Set with a structured JSON abstraction over SecLang, so you can author custom detection rules without writing raw SecLang directives.

      Preview scope

      • API: Available via the v1beta API for creating and managing ALB WAF configurations, managed rule sets, and custom rule groups.
      • SDK: Available for the same v1beta surface.
      • Terraform Provider and Portal UI: Under active development; targeted for GA.
      • Observability: ALB WAF records ship alongside Envoy logs under the component="waf" label and can be shipped to any Observability instance you already have attached to the ALB.

      The preview is intended for evaluation and integration testing. Configurations, defaults, and feature availability may still change before GA.

      Get started!

      Our documentation covers the concepts, features, and full selector catalogue:

  • Jan 2026

    Section titled “Jan 2026”
    • announcement

      STACKIT Application Load Balancer API reaches general availability

      Section titled “STACKIT Application Load Balancer API reaches general availability”

      We’re excited to announce that the Application Load Balancer (ALB) API is generally available as of 7 January 2026. The API is stable, fully supported, and ready for production workloads.

      Teams can integrate the ALB API into automation, CI/CD pipelines, and traffic management workflows with confidence in long-term support and compatibility.

      Roadmap

      We are working on expanding the ecosystem to support even more and better tooling:

      • Terraform Provider: In the final stages of development. Native infrastructure as code support will be available soon.
      • Portal UI: A visual management dashboard is scheduled for release in March.
      • Web Application Firewall: Additional security capabilities to protect your applications from common web threats are under active development.

      Get started!

      Our updated documentation covers everything you need to start making calls: