What we shipped.

Private routing for multi-region clusters

You can now define traffic policy across regions with a single declarative manifest. Health-aware failover, weighted splits, and origin pinning all live next to your Terraform.

• Region-aware traffic policy with declarative manifests
• Sub-second failover between MEL and SYD
• Audit log entries for every policy mutation

HKG region preview

Hong Kong is online for design partners. Anycast-only for now; compute follows in the next minor release.

Faster console boot, lighter dashboard

Cut first-paint to under 600ms across all measured regions. Latency widgets stream over WebSocket instead of polling.

• First contentful paint −38%
• Latency widget memory −62%
• Removed 4 unused vendor bundles

Programmable origin pools

Group origins into pools with health checks, weighted load balancing, and per-region overrides. Pools are first-class objects in the API.

Token-rotation race fix

Hardened the token rotation flow that briefly caused valid sessions to be invalidated. No data exposure; postmortem published.

Terraform provider hits parity

Every public API resource now ships in tsunamis-network/tsunamis. Generated docs, drift detection, and state-aware import are all turned on.

Bare-metal compute, generally tested

Dedicated cores in MEL and SYD. 30-second provisioning, no noisy neighbors, no surprise billing.

Per-region rate limiting

Token-bucket limits configurable at the edge with hot-reload. Burst capacity rolls over within the same window.

Better trace correlation across regions

OTel spans were dropping their parent IDs when a request crossed a region boundary. They no longer do.

Anycast goes live in eight regions

MEL, SYD, NRT, SIN, FRA, LHR, IAD, SFO. Anycast endpoints terminate TLS at the edge and stream to nearest origin.

Structured logs and OTel traces

First-class observability without bolting on a sidecar. Logs are queryable from minute one; traces export to your own collector.

MEL ↔ SYD private link, generally available

Dedicated lambda-grade fibre between Melbourne and Sydney with mTLS by default. Latency holds under 11ms p99.

First design partners onboard

Two engineering teams pushed real workloads through the control plane. We watched. We took notes. We rewrote the parts that hurt.

Console session model, second draft

Replaced rolling JWTs with scoped, revocable session tokens. Logging out actually means it now.

Anycast prototype hits production hardware

First packets through our own anycast prefix. MEL → SYD → NRT routing was hand-tuned, but it ran for 72 hours without a reroute.

Control plane, second iteration

Threw away the first control plane. Rewrote the API around resources instead of RPC verbs. Friends with Terraform now.

First packet through our own AS

Tsunamis Network became a real autonomous system. Five months of paperwork, one packet, and a beer.

Tsunamis Network, founded

Two engineers, a coffee table in Carlton, and one observation: nobody serious wants to keep paying hyperscaler egress. We started building.