waf.executed
BOOL, can be read and set, but not unset.
Deprecated. Available inpassmissdeliverlogerror
Set to true by the WAF when it is invoked.
In the waf_debug_log subroutine, the value of this variable will always be true.
This variable is write-once. A second attempt to set it will not change the value.
Try it out
waf.executed is used in the following code examples. Examples apply VCL to real-world use cases and can be deployed as they are, or adapted for your own service. See the full list of code examples for more inspiration.
Click RUN on a sample below to provision a Fastly service, execute the code on Fastly, and see how the function behaves.
Custom conditions for triggering WAF
The web application firewall runs only on traffic to your origin, but you can further refine when it should be invoked.