STRING, can be read and
set, but not
Description of the last WAF rule to be matched by the request.
waf_debug_log subroutine, this variable reflects the individual rule that was last processed. Each rule matched by the WAF will set the message variable and invoke the
waf_debug_log subroutine, providing an opportunity to log the rule description in each case.
waf.message is used in the following code examples. Examples apply VCL to real-world use cases and can be deployed as they are, or adapted for your own service. See the full list of code examples for more inspiration.
Click RUN on a sample below to provision a Fastly service, execute the code on Fastly, and see how the function behaves.
Add custom WAF rules
The web application firewall has thousands of rules built in, but you can augment these with your own.