Glossary of terms
The following words and phrases are either common industry concepts that are important to Fastly and our technology or proprietary terms we've coined to specifically describe our own products and platforms. Here you can find definitions of these terms to help you navigate the world of Fastly.
- Access control list. A list of permissions that can be attached to an object allowing customers to quickly check a client's IP address against a list of known net blocks and then make decisions based on the result.
- A public application programming interface (API) provided by Fastly to permit control of and configuration of Fastly services. An alternative to using the web interface or command line interface (CLI).Learn more
- A term used to describe the current state of a service version. Fastly service configurations contain both versioned and versionless elements. The elements of a service configuration that are versioned can only be edited in a service version that is in draft. When ready to deploy, the service version is activated, replacing the currently active version.
- The Fastly customer conference.Learn more
- A non-Fastly internet host from which Fastly will fetch content to serve in response to end-user requests. Also known as an Origin.
- CapacityThe ability for a network route to handle a certain amount of traffic (e.g., "the bandwidth of the link is 100Gbps").
- Data transferThe amount of data actually transferred over a network link, e.g. "billable bandwidth". However, "egress traffic" is preferred to avoid confusion.
- A software system responsible for making an HTTP request that is handled by a server (often Fastly). A client is not a person, but a person can use a client to make a request. Clients are downstream of Fastly.
- A process by which incoming requests are initially handled by a random cache server (the "delivery node"), and then handed off to a second server (the "fetch node") determined based on the cache key for the request. This allows all cache servers in a POP to act as a single contiguous pool of storage.Learn more
- An installable command-line tool, which can be used to manage Fastly services as an alternative to the web interface or API.Learn more
- A professional services and support product providing advanced configuration support for TLS.Learn more
- A configuration mechanism that can be added to a service, and which generates VCL code based on selections made in the web interface or using the API. Conditions are used to limit the circumstances in which other logic added via configuration objects (such as headers and cache settings) are executed.
- An entity that owns a group of services, and has multiple users. Charges incurred by all services owned by a customer will be billed to that customer.
- The caching and reverse proxy capabilities of the Fastly edge cloud, the features most commonly associated with a CDN. See also Full-Site Delivery.
- The machine that first handles a request when Fastly cache servers perform clustering. A delivery node is responsible for running
vcl_login the VCL flow, and is the machine to which the end user is connected. The other server involved in clustering is the fetch node.
- A configuration primitive in VCL used to create pools of servers for load balancing.Learn more
- A way to describe things that are closer to the end user than the current network node. For example, a
Cache-Controlheader can be set in a Fastly configuration for the benefit of 'downstream caches', which would include the end-user's browser cache.
- A collection of servers deployed across the world that act together to identify as the same set of hosts, so that end-users attempting to connect to one of the relevant hostnames will establish a connection with a server that is close to them both physically and in terms of network routing. The Fastly edge cloud is such a network.
- A Fastly product that provides persistent state in the form of string key-value pairs. Edge Dictionaries can be read from a VCL or Compute@Edge service, and may be updated via the web interface or Fastly API. In VCL services, Edge Dictionaries are exposed as VCL tables, while in Compute@Edge services, they can be accessed via the Fastly SDK.Learn more
- Collectively, the cache storage deployed across all Fastly cache servers.
- Programming code written by Fastly customers, that is ultimately executed by Fastly cache servers. On the Compute@Edge platform, code can be written in a variety of languages and is compiled before being uploaded to Fastly. On the VCL platform, edge code is written in VCL, uploaded as source, and compiled by Fastly.
- An extension to HTML. ESI tags are intended to be parsed and removed or replaced at the edge, before a resource is delivered to the end-user. While a version of the ESI spec is published as a W3C note, the version supported by Fastly is only a subset of this and supported only in our VCL platform.Learn more
- Traffic that begins inside of a network and proceeds through various routes to a destination somewhere outside of the network. Technically, any traffic flowing from one system to another is both ingress and egress depending on your perspective. Fastly bills for Fastly egress, which includes requests to origin and responses to clients. Responses from origin to Fastly is origin egress.
- A Fastly product that provides TLS provisioning with Fastly-managed or customer-managed certificates. Suitable for 1-1000 domains.
Fastly-DebugHTTP header is a request header used to trigger a Fastly service to include debug information in the response
- WebsiteA website, often used by the Fastly Support team, to gather information about your connectivity to Fastly.
- A tool made available by Fastly for testing and debugging Fastly VCL. Can also refer to individual tests created using the tool (in general, without an article, "Fiddle" means the tool, while with an article "a fiddle" or "the fiddle" refers to an individual test).Learn more
- All the capabilities of the Fastly edge cloud that are not sold as separate products. Full site delivery (FSD) includes the features most commonly associated with a CDN, such as reverse proxying and caching, and also Fastly-specific features like edge code, shielding, and log streaming. It does not include products such as image optimization or the Web Application Firewall.Learn more
- Any traffic flowing from one system to another is both ingress and egress depending on your perspective. Fastly bills for Fastly egress, which includes requests to origin, and responses to clients. Responses from origin to Fastly is origin egress.
- A single execution of a Compute@Edge program, triggered by an inbound HTTP request that is routed to the Fastly service. An instance is short-lived and cannot interact with other instances of the same program which may be running concurrently to handle other requests.
- A physical facility and infrastructure that allows two or more network operators such as Internet Service Providers (ISPs) and Content Delivery Networks (CDNs) to exchange data destined for each other's networks. Fastly intentionally chooses locations with busy internet exchange points when deciding where to build Points of presence.
- A process that makes a cache object ineligible for use to satisfy future requests. Invalidation can be caused by the expiration of an object that has no stale lifetime, by a stale object reaching the end of its stale lifetime, by explicit purge, or by eviction). Invalidated content is effectively deleted from Fastly caches, but in practice may remain on disk until overwritten by new cache entries.
- Fastly edge cloud platform software running on dedicated infrastructure within a customer's private network.
- Within our Compute@Edge platform, a namespace is an identifier for a complete set of execution processes across the Fastly server fleet. Fastly may allocate services or entire customer accounts into appropriate namespaces based on load, isolation, routing or other similar requirements.
- A Fastly product that enables video content to be packaged automatically such that it supports a variety of client-requested formats.Learn more
- Outdated usageSee Shield POP.
- Traffic flowing from an origin server to Fastly. Origin egress traffic is not billable by Fastly directly, but in some situations, due to partnerships between Fastly and popular hosting providers, origin egress to Fastly may be subject to discounted or free pricing from the origin hosting provider.
- The number of requests to a Fastly service that do not trigger a fetch to origin, as a proportion of all requests to the service. An 80% origin offload indicates that using Fastly has reduced the load on the origin server to only a fifth of what it would otherwise be.
- A Fastly product that hosts customer-uploaded TLS certificates at scale for customers offering mass hosting or supporting multi-brand portfolios. Suitable for thousands of individual certificates.
- A direct connection between two networks which allows data to flow between them without being routed on the internet. Fastly establishes PNIs at many of our POPs, with connections to major cloud infrastructure providers, such as Amazon Web Services. These improve the reliability, performance and cost efficiency of origin connections.
- An HTTP request. Requests include those made by the end user to Fastly, between Fastly POPs, and from Fastly POPs to origin.
- A logical configuration that captures a selection of inbound traffic (using domains or service pinning), connects it to origin servers, applies rules, and runs edge code. Service versions are used to create immutable configurations and apply multiple changes to a service in a single deployment. The mechanism used to run edge code and other logic on requests processed by the service depends on the service type, which can be Compute@Edge or VCL.
- A rule that sets a permission level for a specific user in relation to a service, as part of role-based access control (RBAC).Learn more
- A means of directing inbound requests to a specific Fastly service by using a dedicated set of IP addresses, instead of a hostname. This allows a Fastly service to handle traffic for sites that have a very large number of domains, such as sites that themselves provide hosting services to others.
- A revision of a service's configuration. In general, a service configuration is updated by cloning the currently active version, making changes, and activating them. Only draft versions can be edited. Once activated, a version becomes immutable, even if it is no longer the active version. Previously-active versions have a status of 'locked'.
- Outdated usageAn entry for a customer's domain added to a shared TLS certificate using the SAN field.
- Outdated usageAn entry for a customer's wildcard domain (e.g. *.example.com) added to a shared TLS certificate using the SAN field.
- A means of reducing origin traffic by forcing all origin requests to go through a nominated Fastly point of presence. Requests that are not initially handled by that nominated POP will therefore be processed by two POPs, the service configuration will execute twice, and the request will have a second chance to be satisfied within the Fastly Edge cloud (thus avoiding an origin request).Learn more
- Fastly infrastructureA co-location of cache servers in a single physical facility.
- WebsiteA website that uses Fastly as part of its architectural design.
- A hard disk drive with no moving parts. Fastly uses only solid state drives in our edge cache.
- A Fastly product that allows you to have your IP spaces announced, routed, and served by Fastly infrastructure for use with production services. When you purchase this product, you provide your own IP address space to Fastly rather than use Fastly IP addresses.Learn more
- An HTTP response header that provides the same semantics as
Cache-Controlbut is intended to be parsed and observed by edge caches such as Fastly. It is stripped from the response before the response is forwarded to the downstream client.
time.to_first_bytevariable in VCL measures the time between Fastly receiving a request and beginning to serve a response. For hits, this can be as little as a few microseconds.
- CommonIn general, time to first byte refers to the time between when a client has finished sending an HTTP request and when it starts to receive the response. Unlike the
time.to_first_bytevariable available in VCL, this includes network latency and is usually tens to hundreds of milliseconds.
- A universally unique identifier (UUID) generated by Fastly for each incoming request on our Compute@Edge platform.Learn more
- An open source reverse caching proxy, from which Fastly's VCL platform has evolved. Fastly VCL has been extensively extended and is no longer compatible with the open source project.
- Some elements of service configuration are not part of the immutable definition of a service version. When these are updated, the service is immediately affected, without the need to clone and activate a new version of the service. For example, edge dictionaries are attached to a service as part of a version, but the entries in the dictionary are versionless.
- Signal SciencesAn application security monitoring system that proactively monitors for malicious and anomalous web traffic directed at your web servers
- Fastly WAFA legacy Fastly product that offers a feature set similar to a subset of the Signal Sciences WAF. Available via the Fastly legacy WAF API and the WAF 2020 API
- A means of configuring Fastly services via a web browser. The Fastly web interface, available at manage.fastly.com, is a client of the same Fastly API that customers use directly.
- A binary format for executable programs, designed to be portable between computer architectures, that can also be produced by compilers for multiple programming languages. Fastly's Compute@Edge platform runs WebAssembly programs, which are compiled from other languages such as Rust and AssemblyScript.