STRING, can be read and set, but not unset.


Deprecated. Available inpassmissdeliverlog

Description of the last WAF rule to be matched by the request.

In the waf_debug_log subroutine, this variable reflects the individual rule that was last processed. Each rule matched by the WAF will set the message variable and invoke the waf_debug_log subroutine, providing an opportunity to log the rule description in each case.

See also waf.logdata.

Try it out

waf.message is used in the following code examples. Examples apply VCL to real-world use cases and can be deployed as they are, or adapted for your own service. See the full list of code examples for more inspiration.

Click RUN on a sample below to provision a Fastly service, execute the code on Fastly, and see how the function behaves.

Add custom WAF rules

The web application firewall has thousands of rules built in, but you can augment these with your own.