BOOL, can be read and set, but not unset.


Deprecated. Available inpassmissdeliverlogerror

Set to true by the WAF when it is invoked.

In the waf_debug_log subroutine, the value of this variable will always be true.

This variable is write-once. A second attempt to set it will not change the value.

Try it out

waf.executed is used in the following code examples. Examples apply VCL to real-world use cases and can be deployed as they are, or adapted for your own service. See the full list of code examples for more inspiration.

Click RUN on a sample below to provision a Fastly service, execute the code on Fastly, and see how the function behaves.

Custom conditions for triggering WAF

The web application firewall runs only on traffic to your origin, but you can further refine when it should be invoked.