All API request go through the WAF before they are sent to the appropriate backend servers.
Nothing has happened recently.