March 2026 Summaries

Railway encountered a significant incident on March 30, 2026, when a configuration update inadvertently enabled CDN caching for some domains where it was supposed to be disabled, affecting around 0.05% of domains. This error led to potentially authenticated data being served to unauthenticated users due to incorrect HTTP GET response caching, which could result in users seeing pages intended for others. The issue was identified within 32 minutes and fully reverted with all cached assets purged globally. Railway has implemented additional preventative measures, including enhanced testing and gradual CDN rollout processes, to prevent similar incidents in the future. The incident underscores the company's commitment to prioritizing safety and security to rebuild trust with its users while managing growth.

Railway experienced an incident on March 30, 2026, where CDN features were unintentionally enabled for some domains, resulting in potentially authenticated data being served to unauthorized users. The issue occurred due to a configuration update that mistakenly enabled caching for domains with CDN disabled, affecting approximately 0.05% of domains. The incident lasted 52 minutes, during which cached responses might have been served to users other than the original requester, potentially exposing user-specific content. Railway identified and resolved the issue by reverting the changes and purging all cached assets. The company has implemented additional preventative measures, including enhanced testing and slower rollouts of CDN changes, to mitigate such risks in the future and has prioritized safety and security over new feature development to rebuild customer trust.

Railway has partnered with Stripe to integrate the Agentic Provisioning Protocol (APP) into its platform, allowing developers to sign up and deploy resources with a single command. This collaboration provides a streamlined process for provisioning PostgreSQL, MongoDB, Redis, and other compute services directly through the Stripe CLI, enhancing the developer experience by eliminating traditional barriers like sign-up forms and billing pages. Railway aims to simplify infrastructure management for developers, particularly as large language models (LLMs) increasingly generate code that needs deployment. The partnership aligns with Stripe's mission in handling business-related software deployments, offering a seamless way for developers and their AI agents to initiate projects. Despite some criticisms of the Multi-Cloud Protocol (MCP) for its complexity and lack of onboarding support, the integration with Stripe's APP is designed to bridge the gap from code creation to deployment efficiently. Railway is also developing agent sandboxes for temporary infrastructure testing and an iOS app, building on its existing Login with Railway framework to support new user provisioning and identity management.