It's frustrating but completely expected. OEMs are realizing that telemetry and post-sale software subscriptions are their next major revenue stream. Locking down the CAN bus behind a gateway is always framed as a 'security feature', but the real goal is killing third-party observability and locking you into their proprietary ecosystems. The fact that we have to splice into CAN tap cables on hardware we fully own just to read our own telemetry is absurd.
What was the hardest part, Range header handling or the slowloris mitigations? Both seem like they'd be a nightmare without higher-level state machines.