July 2026 - Platform

The following updates were released to the Kentik platform for Platform during July 2026.

Features

• Interface Classification v3: New read APIs deliver device-level match counts and rule statistics far more efficiently, rule matches can be refreshed completely within a database transaction, classification data refreshes automatically when rules change, and the unclassified interfaces tab now uses the faster v3 system. The UI also explains when a manually classified rule is overriding an automatic one, and a preview flag lets you test rule changes before applying them.
• IP obfuscation permission: A new allowIpObfuscation permission gates the FlowProxy mask-file option so administrators can enable or disable it per company.
• Bulk device deletes appear in the Audit Log: Bulk delete operations are now mapped and tracked.
• Better admin table pagination: Built-in pagination for paged collections, with disabled next and previous buttons at list boundaries, result counts shown while loading, a hidden paginator when there are no results, and customizable per-page counts.
• hsflowd configuration template: A new Host sFlow daemon configuration snippet is available as Kentik deprecates the Kprobe agent, including sampling rate guidance by link speed and collector configuration for both FlowProxy/UA and SaaS deployments.
• NetFlow v9 template timeout guidance: The Cisco IOS-XE NetFlow template now documents a 60-second template data timeout, with 5 seconds recommended for HA failover scenarios.
• 139 new ASN override labels: Provider identification accuracy improved, primarily for ISPs and telecom carriers in South America and other regions.

Bug Fixes

• Two-factor authentication can be disabled again: A backend bug prevented users from turning 2FA off.
• Enter key works on SSO lookup and password reset: Both pages now support keyboard submission when the email field has focus, matching the standard login form.
• Global search finds devices containing "as": The search term was having "as" stripped for ASN matching and then applied to device search, hiding devices like BASRT2001.
• Shift+click row selection in Firefox: Multi-row selection in admin tables now works in Firefox as it does in Chrome and Safari.
• Devices page PDF export: A store initialization issue caused an undefined collection error during export.
• Capacity plan CSV export includes Site: The Site column was missing from the export.
• User Agent filter options on the Devices sidebar: Options now populate directly from the UA collection instead of looping through devices, fixing missing agents and improving performance for customers with many devices.
• Collection method shown correctly after migration: Devices migrated from kProxy to Kentik Agent collection no longer display both methods.
• Sample rate preserved on device creation: The Device V6 API no longer overwrites an explicitly supplied sample rate with the default of 1.
• Device API port value: The port field could inadvertently be set to 0 in API responses.
• Device writes use the right endpoint: Create, update, and delete now use the per-device endpoint rather than the table endpoint.
• Dashboards no longer flagged as unsaved: A regression marked dashboards dirty when filters lacked a saved disabled field.
• Network metadata warning spacing: The "no classified interfaces" warning in Settings uses a tag instead of a callout, fixing inconsistent spacing.
• Plan card states aligned: CloudPak, DevicePak, and FlowPak cards now share consistent error and empty-state messaging, show a device popover for Traffic plans, display zero-value utilization charts when devices exist without flow data, hide BGP entitlement text for Universal Cloud plans, and link to device onboarding when there are no devices.
• Query time filters are exact: Time filters are now encoded as half-open intervals, so logically equivalent queries return the same rows, 60-second queries are possible (previously only 59 or 61), and 5-minute time series return a full 5 minutes. Exact 3-hour and 24-hour windows keep their expected resolution.
• Empty time ranges return no rows instead of an error: Queries spanning an empty timespan now return a zero-row result rather than a parse error.
• Client disconnects during planning are no longer errors: Cancellations during the query planning phase now return a proper cancelled status instead of a 500. Genuine timeouts still fail.
• Aggregate overflow no longer silently truncates: Values exceeding their declared column type now raise an out-of-range error rather than returning an incorrect result.
• Case-sensitive tag matching: The planner tag cache no longer normalizes tags to uppercase, so case-sensitive tag values resolve correctly.
• Flow rate metrics no longer spike on restart: Process-level FPS out-rate metrics showed false spikes when a process restarted.
• Stale VRF routes after BGP withdrawal: Withdrawals without a Route Target attribute left stale routes in VRF lookup tables, causing incorrect ASN enrichment in flow data.