CCloud Releases
Home
Following

Cloud Releases

Service catalogues and updates come from each provider's public product listing and announcements.

Explore

  • Home
  • Latest updates
  • Following

About

  • About
  • Contact
  • Privacy Policy
  • Terms of Use

Providers

  • Amazon Web Services
  • Microsoft Azure
  • Google Cloud
  • Cloudflare

Not affiliated with any cloud provider. Product names and logos belong to their owners.

  1. Providers
  2. ›Cloudflare
  3. ›Gateway
  4. ›Update

Feature•Jul 28, 2026

Control Cloudflare Gateway DNS caching with a maximum TTL setting

GatewayCloudflare · Cloudflare One

You can now set a maximum time-to-live (TTL) for DNS responses returned by Gateway. When an upstream DNS record has a TTL that exceeds the configured maximum, Gateway caps it to your specified value. This ensures that DNS policy changes - such as blocking a newly identified malicious domain - take effect faster across all clients.

Traffic settings, showing a numeric input field that accepts values between 60 and 36,000 seconds" loading="lazy" decoding="async" width="2170" height="294">

The setting is available at two levels:

  • Account level - In Traffic Policies > Traffic Settings, under Proxy and inspection. This sets the default cap for all DNS locations.
  • Per-location - Each DNS location can inherit the account setting, disable the cap, or override it with a custom value.

Two new fields are also available in DNS logs: upstream_record_ttls (the original TTL from the upstream response) and applied_max_ttl (the cap Gateway applied). These appear in the DNS logs column picker and in Logpush datasets.

For more information, refer to Maximum DNS TTL.

Read the original announcement↗

More from Gateway

All Gateway updates →

  1. Request Gateway DNS64 through DNS locations and EDNS

    You can now request DNS64 through Cloudflare Gateway DNS location settings or Extension Mechanisms for DNS (EDNS) options.

    Gateway•Feature•Oct 13, 2026

  2. Cloudflare Organizations is generally available

    Cloudflare Organizations is now generally available for Enterprise customers and MSSP/Distributor partners.

    Gateway•Generally available•Oct 7, 2026

  3. Role-based access control for Browser Isolation policies

    Isolation policies support role-based access control (RBAC). Because isolation policies are Gateway HTTP policies with the Isolate action, Gateway's account-level and resource-scoped roles apply to them directly.

    Gateway•Feature•Sep 30, 2026

  4. Identify Mesh, Workers VPC, and Cloudflare Tunnel replicas in network logs

    You can now tell a person on a laptop apart from a Mesh node or an AI agent running on Workers, without matching on connector email addresses or Mesh IP ranges — and see exactly which Cloudflare Tunnel and cloudflared replica received each session.

    Gateway•Feature•Sep 29, 2026

  5. Traffic Destination selector in Gateway policies

    Gateway HTTP and Network policies now include a Traffic Destination selector that identifies how traffic exits Cloudflare.

    Gateway•Feature•Sep 23, 2026