---
title: "July 2026 - Platform"
slug: "july-2026-platform"
updated: 2026-08-07T22:15:04Z
published: 2026-08-07T22:15:04Z
canonical: "kb.kentik.com/july-2026-platform"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://kb.kentik.com/llms.txt
> Use this file to discover all available pages before exploring further.

# July 2026 - Platform

The following updates were released to the Kentik platform for Platform during July 2026.

## Features

- **Interface Classification v3**: New read APIs deliver device-level match counts and rule statistics far more efficiently, rule matches can be refreshed completely within a database transaction, classification data refreshes automatically when rules change, and the unclassified interfaces tab now uses the faster v3 system. The UI also explains when a manually classified rule is overriding an automatic one, and a preview flag lets you test rule changes before applying them.
- **IP obfuscation permission**: A new `allowIpObfuscation` permission gates the FlowProxy mask-file option so administrators can enable or disable it per company.
- **Bulk device deletes appear in the Audit Log**: Bulk delete operations are now mapped and tracked.
- **Better admin table pagination**: Built-in pagination for paged collections, with disabled next and previous buttons at list boundaries, result counts shown while loading, a hidden paginator when there are no results, and customizable per-page counts.
- **hsflowd configuration template**: A new Host sFlow daemon configuration snippet is available as Kentik deprecates the Kprobe agent, including sampling rate guidance by link speed and collector configuration for both FlowProxy/UA and SaaS deployments.
- **NetFlow v9 template timeout guidance**: The Cisco IOS-XE NetFlow template now documents a 60-second template data timeout, with 5 seconds recommended for HA failover scenarios.
- **139 new ASN override labels**: Provider identification accuracy improved, primarily for ISPs and telecom carriers in South America and other regions.

## Bug Fixes

- **Two-factor authentication can be disabled again**: A backend bug prevented users from turning 2FA off.
- **Enter key works on SSO lookup and password reset**: Both pages now support keyboard submission when the email field has focus, matching the standard login form.
- **Global search finds devices containing "as"**: The search term was having "as" stripped for ASN matching and then applied to device search, hiding devices like BASRT2001.
- **Shift+click row selection in Firefox**: Multi-row selection in admin tables now works in Firefox as it does in Chrome and Safari.
- **Devices page PDF export**: A store initialization issue caused an undefined collection error during export.
- **Capacity plan CSV export includes Site**: The Site column was missing from the export.
- **User Agent filter options on the Devices sidebar**: Options now populate directly from the UA collection instead of looping through devices, fixing missing agents and improving performance for customers with many devices.
- **Collection method shown correctly after migration**: Devices migrated from kProxy to Kentik Agent collection no longer display both methods.
- **Sample rate preserved on device creation**: The Device V6 API no longer overwrites an explicitly supplied sample rate with the default of 1.
- **Device API port value**: The port field could inadvertently be set to 0 in API responses.
- **Device writes use the right endpoint**: Create, update, and delete now use the per-device endpoint rather than the table endpoint.
- **Dashboards no longer flagged as unsaved**: A regression marked dashboards dirty when filters lacked a saved `disabled` field.
- **Network metadata warning spacing**: The "no classified interfaces" warning in Settings uses a tag instead of a callout, fixing inconsistent spacing.
- **Plan card states aligned**: CloudPak, DevicePak, and FlowPak cards now share consistent error and empty-state messaging, show a device popover for Traffic plans, display zero-value utilization charts when devices exist without flow data, hide BGP entitlement text for Universal Cloud plans, and link to device onboarding when there are no devices.
- **Query time filters are exact**: Time filters are now encoded as half-open intervals, so logically equivalent queries return the same rows, 60-second queries are possible (previously only 59 or 61), and 5-minute time series return a full 5 minutes. Exact 3-hour and 24-hour windows keep their expected resolution.
- **Empty time ranges return no rows instead of an error**: Queries spanning an empty timespan now return a zero-row result rather than a parse error.
- **Client disconnects during planning are no longer errors**: Cancellations during the query planning phase now return a proper cancelled status instead of a 500. Genuine timeouts still fail.
- **Aggregate overflow no longer silently truncates**: Values exceeding their declared column type now raise an out-of-range error rather than returning an incorrect result.
- **Case-sensitive tag matching**: The planner tag cache no longer normalizes tags to uppercase, so case-sensitive tag values resolve correctly.
- **Flow rate metrics no longer spike on restart**: Process-level FPS out-rate metrics showed false spikes when a process restarted.
- **Stale VRF routes after BGP withdrawal**: Withdrawals without a Route Target attribute left stale routes in VRF lookup tables, causing incorrect ASN enrichment in flow data.