DataDome IIS Module

3.3.0 (2025-04-10)

• Use HTTPS as default protocol to connect to Protection API

3.2.0 (2025-01-20)

• Change requests to Protection API to get 200 status codes on block responses and avoid closing connections on 403 responses, optimizing connection time for overall traffic
• Increase BUFFER_RECEIVE to extend the TCP window length and avoid potential reconnections when certificate is too big
• Set default timeout to 150ms

3.1.0 (2024-10-28)

• Add session by header feature

3.0.1 (2023-12-11)

• Fix exclusion-pattern evaluation by removing query string of URL

3.0.0 (2023-10-10)

• Support full URL exclusion-pattern

v2.19.0 (2023-01-24)

• Improve header management (Add Client Hints and Fetch Metadata)

v2.18.0 (2022-12-08)

• Improve header management (header truncation)

v2.17 (2022-06-29)

• Improve settings management

v2.16 (2021-04-07)

• Update debug log

v2.15 (2021-03-01)

• Fix X-Forwarded-For header processing

v2.14 (2021-02-17)

• Fix captcha response content type encoding header
• Send all url encode parameters to datadome server

v2.13 (2021-02-16)

• Prevent exception from response.end, implementing microsoft recommendation

v2.12 (2021-02-04)

• Fix url parsing

v2.10 (2020-08-07)

• Update default static assets exclusion list

v2.9 (2020-02-17)

• Improve module compatibility with specific IIS version

v2.8 (2019-04-08)

• Introduce support for processIPs and skipIPs
• Fixe exclude pattern at Owin
• Remove unused GenerateID option
• Add support for headers: Content-Type, From, X-Real-IP, Via and True-Client-IP
• Truncate XForwaredForIP from the head similarly to all other modules
• Introduce support for 401 requests from API Server
• Implement force stop of processing the request when blocked by API Server
• Introduce support for request headers

v2.7 (2017-11-20)

• Change NuGet configuration to include accurate basic settings in config file

v2.6 (2017-06-29)

• Fix overwrite IIS Error

v2.5 (2017-06-19)

• Add setting dome:exclusion-pattern
• Remove setting dome:inclusion-pattern

v2.4 (2017-06-15)

• Add setting dome:domain
• Add setting dome:protocol
• Add setting dome:inclusion-pattern
• Implement support for X-DataDome-request-Headers
• Implement a solution for the module to get X-Original-URL Header

v2.3 (2017-03-31)

• Implement setting for the module to not read Request Body
• Implement support for the module to get Header "Content-Length"

v2.2 (2017-01-04)

• Add verification by X-DatadomeResponse response header
• Send headers' names to the API server
• Send connection header value to the API server
• Send Pragma header value to the API server
• Send Cache-Control header value to the API server.
• Send Method header value to the API server
• Send X-Requested-With header value to the API server
• Send Origin header value to the API server
• Send Cookies' length to the API server.
• Send Cookies' Body length to the API server.
• Send Authorization's length to the API server.
• Introduce compatibility with .NET Framework 3.5 or older
• Disable sending Cookies to the API server
• Disable sending Body to the API server
• Implement change for the module to not generate ClientID
• Introduce support for X-DataDome-headers from the API response
• Fix ignored proxy configuration in the web.config file

v2.1

• Add API documentation
• Add timing reporting in test environment
• Introduce module rebranding
• Improve build and versioning
• Add default configuration settings
• Fix error response content pass-through
• Fix proxy forwarding fields

v2.0

• Add OWIN implementation
• Add NuGet packages
• Add tracing mode with HTML output
• Improve ServiceManager configuration and performance

v1.0

• Initial version