BOOL, can be read and
set, but not
true by the WAF when it is invoked.
waf_debug_log subroutine, the value of this variable will always be
This variable is write-once. A second attempt to
set it will not change the value.
waf.executed is used in the following code examples. Examples apply VCL to real-world use cases and can be deployed as they are, or adapted for your own service. See the full list of code examples for more inspiration.
Click RUN on a sample below to provision a Fastly service, execute the code on Fastly, and see how the function behaves.
Custom conditions for triggering WAF
The web application firewall runs only on traffic to your origin, but you can further refine when it should be invoked.