Which requests across my account share a suspicious pattern I haven't isolated to one workspace yet?

searches WAF requests account-wide and tags each result by workspace, instead of forcing a search inside one workspace at a time

Which of my backend errors are actually TLS, DNS, or connection failures versus HTTP failures?

the analytics APIs break down backend Compute errors into categories over a recent window, so a spike can be traced to its error source rather than treated as one undifferentiated failure count

Which audit events will actually reach the incident or ticketing tool I use?

discovery endpoints list which audit event types exist and what scopes they support, and mappings can be scoped to the whole account or to a single service or workspace before notifications route to tools like Datadog, Jira, or OpsGenie

Are my WAF rules and user accounts consistent between the two places my team manages them?

once a Fastly account is connected to a Next-Gen WAF corp, configurations and user accounts sync in real time across both control panels and both APIs, so neither copy drifts from the other

Which incoming requests are bots, VPNs, or proxies before they hit my origin?

edge hostcalls classify traffic at request time inside Compute apps, so that logic can act on the traffic without a round trip to origin

Fastly release history — The Cyber Toolchain

Fastly Terraform Provider (beta) 0.2.7 (2026-11-03) Nov 3, 2026 · issue 130

Fastly Terraform Provider (beta) adds audit log event routing, domain management routing configs, and a new migration CLI foundation⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ TRY IT

Check the version of the new migration CLI before running a Terraform legacy-to-auto migration analysis.

$ fastly-tf-migrate --version

Adds fastly_audit_log_event_mapping resource and data source to route audit log events to integrations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds fastly_routing_config_auto and fastly_routing_config_domain_link resources for domain management routing configs with automatic versioning.
Adds initial fastly-tf-migrate CLI foundation with version reporting and dedicated build/test targets for Terraform migration workflows.
Adds a typed legacy-to-_auto compatibility registry to support Terraform migration analysis.
Adds support for legacy simple product enablement state during VCL-to-CDN Auto migration in fastly_service_cdn_auto.

Adds fastly_audit_log_event_mapping resource and data source to route audit log events to integrations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds fastly_routing_config_auto and fastly_routing_config_domain_link resources for domain management routing configs with automatic versioning.
Adds initial fastly-tf-migrate CLI foundation with version reporting and dedicated build/test targets for Terraform migration workflows.
Adds a typed legacy-to-_auto compatibility registry to support Terraform migration analysis.

1 more in Everything

JavaScript SDK 4.1.0 (2026-11-03) Nov 3, 2026 · issue 130

Fastly JavaScript SDK 4.1.0 upgrades StarlingMonkey to v0.4.0⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Fastly Terraform Provider (beta) 0.2.6 (2026-10-27) Oct 27, 2026 · issue 123

Fastly Terraform Provider (beta) 0.2.6 adds automated virtual patching support and a VCL-to-CDN-auto state migration path.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds automated virtual patching support to the ngwafworkspace resource.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds a proof-of-concept state migration path from legacy fastly_service_vcl resources to service_cdn_auto.

2 details in Everything

Rust SDK 0.13.2 (2026-10-27) Oct 27, 2026 · issue 123

Rust SDK 0.13.2 adds VPN/proxy client detection, product enumeration, and between-bytes timeout for shield backends.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds Request::get_vpn_proxy_data, Request::get_vpn_proxy_*, and RequestHandle::vpn_proxy_* methods to expose metadata for detecting whether a downstream client is residential, a VPN, or a proxy.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds fastly::compute_runtime::products to report which products are enabled on the service.
Supports adding a between-bytes timeout for shield backends.
When Request::with_image_optimizer is used on a service where Image Optimizer is not enabled, the origin response is passed through unmodified with a Fastly-Io-Error response header instead of failing.

Adds Request::get_vpn_proxy_data, Request::get_vpn_proxy_*, and RequestHandle::vpn_proxy_* methods to expose metadata for detecting whether a downstream client is residential, a VPN, or a proxy.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds fastly::compute_runtime::products to report which products are enabled on the service.

2 more in Everything

CLI v17.0.0 (2026-10-26) Oct 26, 2026 · issue 122

Fastly CLI v17.0.0 adds --autoEnableNewVirtualPatches flag to NGWAF workspace commands for Automated Virtual Patching.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ TRY IT

Enable Automated Virtual Patching when creating a new NGWAF workspace so new virtual patches are applied automatically without manual intervention.

$ fastly ngwaf workspace create --autoEnableNewVirtualPatches

Opt an existing NGWAF workspace into Automated Virtual Patching after upgrade.

$ fastly ngwaf workspace update --autoEnableNewVirtualPatches

└──▷ BREAKING ON UPGRADE

!ai-runtime-control key create no longer accepts the --user-id flag, which was removed from the API.
!--json output for ai-runtime-control usage-metrics list, ngwaf workspace list, ngwaf rule list, and ngwaf workspace rule list is now a bare array instead of an object with data and meta fields.

Automatically enable new virtual patches for Next-Gen WAF workspaces (2026-10-22) Oct 22, 2026 · issue 123

Next-Gen WAF workspaces gain auto_enable_new_virtual_patches to block new virtual patches automatically without manual enablement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Automatically enable CVE virtual patches (2026-10-22) Oct 22, 2026 · issue 117

Fastly adds Automatic CVE Virtual Patching setting to apply future CVE patches to your workspace on release.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ HOW TO FIND IT

Turn on automatic CVE virtual patching so your workspace is protected by new CVE patches the moment Fastly releases them, without manual intervention.

📍In the Fastly control panel, go to your workspace settings and enable Automatic CVE Virtual Patching.

Fastly Terraform Provider (beta) 0.2.5 (2026-10-22) Oct 22, 2026 · issue 117

Adds api_endpoint provider argument and FASTLY_API_URL env var to target non-default Fastly API endpoints (HTTPS only).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ USE IT

Point the Fastly Terraform provider at a non-default API endpoint — useful for staging environments or private Fastly deployments.

hcl

provider "fastly" {
  api_endpoint = "https://api.staging.fastly.com"
}

Override the API endpoint via environment variable without changing Terraform config — useful in CI pipelines targeting different Fastly environments.

$ export FASTLY_API_URL=https://api.staging.fastly.com
terraform apply

Fastly Terraform Provider 10.0.0 (2026-10-21) Oct 21, 2026 · issue 116

Fastly Terraform Provider 10.0.0 adds multi-service monitoring in a single alert resource.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds support for monitoring multiple services using a single alert resource.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!The user_id argument in ai_runtime_control_virtual_key is no longer configurable — it is now a computed (read-only) attribute. Any Terraform configuration that sets user_id will fail to plan after upgrading.

Fastly Terraform Provider (beta) 0.2.4 (2026-10-20) Oct 20, 2026 · issue 115

Extends the beta testing guide with an explicit resource family workflow using terraform query and service-scoped discovery.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Retrieve historical metrics with improved performance and flexibility (2026-10-20) Oct 20, 2026 · issue 114

Fastly adds Platform Metrics V2 API endpoints with cursor-based pagination, predefined metric sets, and flexible grouping.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds new Platform Metrics API endpoints for retrieving historical metrics data with cursor-based pagination for large datasets.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Supports predefined metric sets that bundle related metrics for simpler querying.
Enables grouping of historical metrics by point of presence or datacenter.

3 details in Everything

docs update Oct 15, 2026 · issue 109

Fastly adds Network Protect for real-time visibility and defense against network-based DDoS attacks.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

CLI v16.2.0 (2026-10-15) Oct 15, 2026 · issue 110

Fastly CLI v16.2.0 adds routing-config support, GCS public-key logging flag, and a short -h help flag.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ TRY IT

Attach a GCS public key when creating or updating a GCS logging endpoint for a service.

$ fastly logging gcs create --service-id $FASTLY_SERVICE_ID --version active --name my-gcs-endpoint --bucket my-bucket --public-key "$(cat gcs-public-key.pem)"

Adds CLI support for routing configs via the new routing-config subcommand.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds --public-key flag to GCS logging commands (service/logging).
Adds -h as a short alias for --help across all commands.

Adds CLI support for routing configs via the new routing-config subcommand.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

2 more in Everything

docs update Oct 14, 2026 · issue 108

Fastly adds AI agent setup support via the Fastly Agent Toolkit and MCP server for Claude Code, Codex, and Cursor.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Supports AI coding agents (Claude Code, Codex, Cursor) via the Fastly Agent Toolkit for command-capable agents.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds the Fastly MCP server for AI agents that cannot run commands directly.

2 details in Everything

announced Oct 13, 2026 · issue 109

Fastly launches Network Protect: always-on Layer 3/4 DDoS defense delivered inline via BGP anycast and GRE tunnels, no scrubbing-center detour.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds Fastly Network Protect, a new always-on Layer 3 and Layer 4 DDoS mitigation service delivered inline across Fastly's global POP network, eliminating centralized scrubbing-center detours.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Announces customer IP prefixes via BGP, pulling all inbound traffic through Network Protect before forwarding clean traffic to the origin network over a GRE tunnel.
Supports rule-based network firewall policies filtering traffic by any combination of IP protocol, source and destination port, and source and destination address.

3 details in Everything

Fastly Terraform Provider (beta) 0.2.3 (2026-10-13) Oct 13, 2026 · issue 108

Fastly Terraform Provider (beta) 0.2.3 adds five new resource types and optional service_id filtering for List Resources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds optional service_id filtering to service-scoped Terraform query List Resources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds fastly_service_request_setting explicit/default resource with Terraform query support.
Adds fastly_service_response_object explicit/default resource with Terraform query support.
Adds fastly_service_resource_link explicit resource with Terraform query support.
Adds support for explicit image optimizer defaults via image_optimizer_default_explicit with Terraform query support.

5 details in Everything

└──▷ BREAKING ON UPGRADE

!Enum attributes action, xff, and logger_type on request_setting, cache_setting, and rate_limiter resources now only accept lowercase values — uppercase values that previously worked will now be rejected.

Purge a service's staging environment through the API (2026-10-05) Oct 5, 2026 · issue 109

Fastly API now supports targeted cache purges for staging environments via the Fastly-Purge-Environment: staging header.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ TRY IT

Purge all cached content in a staging environment before running integration tests against a newly staged version.

$ curl -X POST https://api.fastly.com/service/<service_id>/purge_all \
  -H 'Fastly-Key: <api_token>' \
  -H 'Fastly-Purge-Environment: staging'

Purge specific surrogate key tags in the staging environment to validate content changes without affecting production cache.

$ curl -X POST https://api.fastly.com/service/<service_id>/purge \
  -H 'Fastly-Key: <api_token>' \
  -H 'Fastly-Purge-Environment: staging' \
  -H 'Surrogate-Key: <tag1> <tag2>'

Adds Fastly-Purge-Environment: staging header support to purge-everything, purge-by-surrogate-key, and purge-multiple-surrogate-key-tags API requests, scoping the purge to the staging environment instead of production.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Supports purging an individual URL from the staging environment by sending a purge-a-URL request to the staging IP address of the service.

2 details in Everything

New anomaly signal: INSECURE-DESER (2026-10-05) Oct 5, 2026 · issue 096

New detection INSECURE-DESER anomaly signal

New anomaly signal: INSECURE-DESER Oct 5, 2026 · release notes

Fastly introduces new INSECURE-DESER anomaly signal for insecure deserialization attempts.

Challenge suspicious clients with DDoS Protection rules (2026-10-01) Oct 1, 2026 · issue 093

Fastly DDoS Protection rules gain a client_challenge action to challenge suspicious clients instead of blocking them.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ TRY IT

During an active DDoS attack, challenge suspicious clients rather than hard-blocking them so legitimate users can still reach your service.

$ curl -X PATCH 'https://api.fastly.com/ddos-protection/rules/{rule_id}' \
  -H 'Fastly-Key: <api_key>' \
  -H 'Content-Type: application/json' \
  -d '{"action": "client_challenge"}'

Fastly Terraform Provider 9.8.0 (2026-10-01) Oct 1, 2026 · issue 092

Fastly Terraform Provider 9.8.0 adds fastly_routing_config and fastly_routing_config_domain_link resources for Domain Management routing configs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

docs update Sep 30, 2026 · issue 090

Fastly adds Network Protect for real-time visibility and defense against network-based attacks on customer network prefixes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

announced Sep 29, 2026 · issue 093

Fastly launches AEDA, an AI agent in Gemini Enterprise that runs autonomous root-cause analysis and recommends WAF/rate-limit remediations at edge speed.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ HOW TO FIND IT

Trigger AEDA to investigate a spiking 5xx error rate and get an evidence-backed RCA distinguishing a botnet from an origin issue — without manually cross-referencing dashboards.

📍Contact AEDA@fastly.com or your Fastly account team to join the early access preview, then in Gemini Enterprise trigger an AEDA Root Cause Analysis (RCA) loop when an anomaly is detected.

Adds support for the Model Context Protocol (MCP) to embed AEDA autonomous investigations into existing engineering and DevOps workflows.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Introduces AEDA (Autonomous Edge Defense Agent) inside Gemini Enterprise, pairing Fastly live edge telemetry with Gemini stateful reasoning to conduct machine-speed Root Cause Analysis (RCA) loops when an anomaly is detected.
AEDA cross-references organisation telemetry against anonymised global traffic to distinguish isolated infrastructure bugs from coordinated attacks targeting multiple organisations in the same sector.
AEDA generates natural-language VCL configurations and recommends concrete remediations — rate-limiting rules, WAF signature updates, origin shielding changes — each with supporting evidence, expected impact, and step-by-step guidance.
Produces evidence-backed audit trails intended to simplify compliance reporting and board-level risk communication for CISOs and security leaders.

5 details in Everything

Add Network Protect API (2026-09-29) Sep 29, 2026 · issue 090

Fastly adds a Network Protect API for programmatic DDoS filtering, IP prefix registration, GRE endpoints, and rule management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Fastly Terraform Provider (beta) 0.2.0 (2026-09-29) Sep 29, 2026 · issue 090

Adds 10+ Terraform data sources and explicit resources for API Security, NGWAF, Edge Dictionaries, Gzip, Cache Settings, Rate Limiting, and service settings management.

Adds fastly_api_security_discovered_operations data source for querying discovered API operations.
Adds fastly_api_security_operations and fastly_api_security_operation_tags data sources for querying API Security operations and their tags.
Adds fastly_ngwaf_workspace_templated_signal_rules dedicated data source for Templated Signal Rules.
Adds fastly_datacenters data source for querying Fastly datacenter metadata.
Adds fastly_staging_ips data source for querying Fastly staging IP ranges.

+12 more show less

Adds fastly_tls_domain data source for querying TLS domain configuration.
Adds fastly_package_hash data source for querying Compute package hashes.
Adds fastly_services data source for listing all Fastly services.
Adds fastly_ip_ranges data source for querying Fastly IP ranges.
Adds fastly_dictionaries data source, ported from the legacy provider.
Adds fastly_service_settings resource for explicit service version management of general settings on CDN services.
Adds fastly_service_dictionary resource for explicit management of Edge Dictionaries on CDN and Compute services.
Adds fastly_service_gzip resource for explicit service version management of Gzip configurations on CDN services.
Adds explicit family support for Rate Limiting via the rate_limiter resource family.
Adds explicit family support for Cache Settings.
Adds staging_ip attribute to the fastly_tls_configuration data source.
Adds client_challenge mode support to the service_product_ddos_protection resource.

17 details in Everything

New integration Grafana Cloud Logs logging integration
New integration DigitalOcean Spaces logging integration
New integration Elasticsearch logging integration
New integration FTP logging integration
New integration Google Cloud Pub/Sub logging integration
New integration Heroku logging integration
New integration Kafka logging integration
New integration Honeycomb logging integration
New integration Log Shuttle logging integration
New integration Loggly logging integration
New integration AWS Kinesis logging integration
New integration Scalyr logging integration
New integration OpenStack logging integration
New integration SFTP logging integration
New integration Papertrail logging integration
New integration BigQuery logging integration
New integration Azure Blob Storage logging integration
New integration Datadog logging integration
New integration Google Cloud Storage logging integration
New integration HTTPS logging integration
New integration New Relic logging integration
New integration New Relic OTLP logging integration
New integration Amazon S3 logging integration
New integration Splunk logging integration
New integration Sumo Logic logging integration
New integration Syslog logging integration

└──▷ BREAKING ON UPGRADE

!The fastly_service_vcl resource is renamed to fastly_service_custom_vcl; any existing Terraform state or config referencing fastly_service_vcl must be updated.
!The nested vcl block on fastly_service_cdn_auto is renamed to custom_vcl; any existing configs using the vcl block inside fastly_service_cdn_auto must be updated.

Add network protection metrics to Historical Stats and Real-Time Analytics APIs (2026-09-29) Sep 29, 2026 · release notes

Historical Stats and Real-Time Analytics APIs now expose six new network protection metrics.

Add Network Protect API Sep 29, 2026 · release notes

Adds Network Protect API for programmatic configuration of DDoS protections

Enables programmatic management of customer-owned IP prefixes, GRE delivery endpoints, source prefix lists, and ordered network-layer DDoS filtering rules via the new Network Protect API

1 detail in Everything

Add network protection metrics to Historical Stats and Real-Time Analytics APIs Sep 29, 2026 · release notes

Fastly adds six network protection metrics to its Historical Stats and Real-Time Analytics APIs

The Historical Stats API now exposes network protection metrics for GRE tunnel traffic and firewall drops.
The Real-Time Analytics API now exposes network protection metrics for GRE tunnel traffic and firewall drops.

2 details in Everything

Automation tokens now support multiple roles (2026-09-24) Sep 24, 2026 · issue 091

Fastly automation tokens now support multiple roles for fine-grained access control across CDN and Next-Gen WAF.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Automation tokens now support multiple roles Sep 24, 2026 · release notes

Automation tokens now support multiple roles for fine-grained access control

Adds multiple roles to a single automation token

1 detail in Everything

Add AI Firewall metrics to Historical Stats and Real-Time Analytics APIs (2026-09-23) Sep 23, 2026 · issue 089

Fastly Historical Stats and Real-Time Analytics APIs gain two new AI Firewall metrics for AI Runtime Control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Add Content Guard challenge metrics to Historical Stats and Real-Time Analytics APIs (2026-09-23) Sep 23, 2026 · issue 089

Fastly: Adds ten new metrics to the Historical Stats API and Real-Time Analytics API covering Content Guard challenge and token creation, validation outcomes, and Private Access Token (PAT) challenges issued during rule enforcement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Add AI Firewall metrics to Historical Stats and Real-Time Analytics APIs Sep 23, 2026 · release notes

AI Firewall request metrics added to Fastly Historical Stats and Real-Time Analytics APIs

New arc_ai_firewall_requests metric in Historical Stats API tracks AI Runtime Control requests.
New arc_ai_firewall_blocked metric in Historical Stats API tracks blocked AI Runtime Control requests.
New arc_ai_firewall_requests metric in Real-Time Analytics API tracks AI Runtime Control requests.
New arc_ai_firewall_blocked metric in Real-Time Analytics API tracks blocked AI Runtime Control requests.

4 details in Everything

Add Content Guard challenge metrics to Historical Stats and Real-Time Analytics APIs Sep 23, 2026 · release notes

Fastly adds ten new Content Guard challenge metrics to Historical Stats and Real-Time Analytics APIs.

Adds challenge.count metric to Historical Stats and Real-Time Analytics APIs
Adds challenge.token_creation.success metric to Historical Stats and Real-Time Analytics APIs
Adds challenge.token_creation.failure metric to Historical Stats and Real-Time Analytics APIs
Adds challenge.validation.success metric to Historical Stats and Real-Time Analytics APIs
Adds challenge.validation.failure metric to Historical Stats and Real-Time Analytics APIs

+1 more show less

Adds private_access_token.challenge.count metric to Historical Stats and Real-Time Analytics APIs

6 details in Everything

Add AI Runtime Control product (2026-09-22) Sep 22, 2026 · issue 099

Fastly product enablement API adds support for the AI Runtime Control product via ai_runtime_control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Route, control, and monitor AI model traffic with the new AI Runtime Control API (2026-09-22) Sep 22, 2026 · issue 099

New AI Runtime Control API gateway adds virtual key auth, per-key rate limits, failover policies, usage metrics with CSV export, and session logs.

Adds the AI Runtime Control API gateway — point existing SDKs at Fastly by changing only the base URL and credentials to gain per-key controls and usage reporting without rewriting application code.
New integrationAdds provider connection management to supply credentials (API key or, for Amazon Bedrock, an AWS IAM role) that AI Runtime Control uses to reach a provider on your behalf; also exposes endpoints to look up supported providers and models and retrieve Bedrock IAM setup information.
Adds virtual key management with per-key request-per-minute and token-per-minute limits to control how each application authenticates to and consumes the gateway.
Adds failover policy configuration on a virtual key to automatically retry against alternate provider connections after timeouts, rate limiting, or server errors.
Adds usage metrics for requests, sessions, and token consumption, filterable by virtual key, provider, or model, with CSV export.

+1 more show less

Adds session logs with full request and response data for debugging and audits.

6 details in Everything

announced Sep 21, 2026 · issue 081

Fastly launches AI Runtime Control, AI Firewall, and expanded API Security to govern, protect, and control AI traffic at the edge.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds AI Runtime Control, which routes model calls through a single endpoint across public and self-hosted AI providers, with virtual keys to protect underlying provider credentials, real-time token spend visibility, rate limiting, budget controls, and failover.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds AI Firewall, which evaluates prompts directly in the request path at the edge to detect and block LLM-based attacks including prompt injection before they reach targeted models.
Adds API Security enforcement for agentic traffic, applying API contract rules to agentic, agent-assisted, and conventional traffic service by service — allowing organizations to observe or block non-conforming requests from AI agents accessing enterprise APIs.

3 details in Everything

announced Sep 21, 2026 · issue 081

Fastly launches AI Runtime Control (ARC), a control plane for governing, securing, and auditing all LLM provider traffic.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Introduces AI Runtime Control (ARC), a Fastly-managed control plane that routes every LLM model call through a single endpoint for access governance, spend attribution, and resilience.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Provides per-app and per-developer virtual keys that can be created, rotated, or revoked instantly without code changes on the client side, replacing shared provider API keys.
Applies enforceable monthly dollar-budget limits directly to individual virtual keys for proactive AI spend control.
Supports automatic failover by letting a virtual key point at an ordered list of model targets (primary, fallback, and further) so a provider outage is transparent to callers.
Includes AI Firewall within ARC — powered by an updated version of Fastly's SmartParse detection engine — to detect prompt injection and other LLM-specific attacks via optional custom guardrails.

+2 more show less

Delivers full request and response logging for every AI interaction (prompts and completions), searchable by user, model, provider, and date range, to support compliance and audit requirements.
Operates as bring-your-own-key (BYOK), preserving existing provider relationships and negotiated rates while adding the governance and visibility layer around them.

7 details in Everything

Add ClientChallenge support to ddos_protection Sep 21, 2026 · release notes

Adds ClientChallenge support to ddos_protection via the Product Enablement API

Adding Bots time series metrics API (2026-09-17) Sep 17, 2026 · issue 083

Fastly Historical Stats API now exposes bot time series metrics served by ContentGuard.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Bot Management (2026-09-17) Sep 17, 2026 · issue 083

Fastly launches a Bot Management API to configure ContentGuard actions per bot category, individual bot, and workspace protection mode.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ TRY IT

Find the ContentGuard workspace associated with a specific Fastly service before making policy changes.

$ curl -X GET 'https://api.fastly.com/bot-management/workspaces?service_id=<service_id>' \
  -H 'Fastly-Key: <api_token>'

Set a workspace to block mode to actively block detected bot traffic rather than only logging it.

$ curl -X PATCH 'https://api.fastly.com/bot-management/workspaces/<workspace_id>' \
  -H 'Fastly-Key: <api_token>' \
  -H 'Content-Type: application/json' \
  -d '{"protection_mode": "block"}'

Override the action for an individual bot to log while its category is set to block, then revert it to inherit the category default.

$ curl -X PATCH 'https://api.fastly.com/bot-management/workspaces/<workspace_id>/bots/<bot_id>' \
  -H 'Fastly-Key: <api_token>' \
  -H 'Content-Type: application/json' \
  -d '{"action": "inherit"}'

Introduces the Bot Management API to configure ContentGuard, separate from the Next-Gen WAF API, enabling programmatic control over how Fastly responds to bot traffic.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Supports setting an action for a bot category (such as AI crawlers, search engines, or headless browsers) so that any bot Fastly later adds to that category inherits the action automatically.
Supports overriding the action for an individual bot within a category, with the ability to set the action back to inherit to return it to the category default.
Supports updating a workspace to switch between off, log, and block protection modes.
Adds a list-all-bots endpoint that returns every bot across every category in a single request, with each bot reporting its category_id so a complete bot-to-category map can be built in one pass.

+1 more show less

Adds a service_id filter on the list workspaces endpoint to find the workspace serving a given service.

6 details in Everything

Add DDoS protection challenge metrics to Historical Stats and Real-Time Analytics APIs (2026-09-17) Sep 17, 2026 · issue 078

Fastly: Adds ten new DDoS protection challenge metrics to the Historical Stats API and Real-Time Analytics API, covering challenge and token creation, validation outcomes, and Private Access Token (PAT) challenges issued during DDoS protection rule enforcement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Fastly Terraform Provider 9.7.0 (2026-09-17) Sep 17, 2026 · issue 078

Fastly Terraform Provider 9.7.0 adds AI Runtime Control resources and client_challenge DDoS protection mode.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Bot Management Sep 17, 2026 · release notes

Fastly adds Bot Management API for configuring ContentGuard bot actions and protection modes

Bot Management API enables configuration of ContentGuard to decide how Fastly responds to bot traffic
Allows setting an action for a category of bots so new bots in that category pick up the same action automatically
Supports overriding the action for an individual bot and reverting it back to inherit to return it to the category default
Enables updating a workspace to switch between the off, log, and block protection modes
Adds ability to list all bots in a workspace across every category in a single request, with each bot reporting its category_id

+1 more show less

Provides a service_id filter on list workspaces to find the workspace serving a given service

6 details in Everything

Adding Bots time series metrics API Sep 17, 2026 · release notes

Adds Historical Stats API support for fetching Bots time series metrics served by ContentGuard.

docs update Sep 16, 2026 · issue 076

Fastly adds AI Firewall and AI Runtime Control (ARC) to inspect and govern LLM traffic at the edge.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds Fastly AI Firewall, a security module for Fastly AI Runtime Control (ARC) that inspects large language model (LLM) requests.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds Fastly AI Runtime Control (ARC), a control plane that sits between your applications and LLM providers to govern AI traffic.

2 details in Everything

Add AI Runtime Control requests metric to Historical Stats and Real-Time Analytics APIs (2026-09-15) Sep 15, 2026 · issue 076

Historical Stats and Real-Time Analytics APIs gain arc_requests metric for AI Runtime Control traffic.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Add AI Runtime Control requests metric to Historical Stats and Real-Time Analytics APIs Sep 15, 2026 · release notes

New arc_requests metric added to Historical Stats and Real-Time Analytics APIs for AI Runtime Control

CLI v16.1.0 (2026-09-14) Sep 14, 2026 · issue 075

Fastly CLI v16.1.0 adds Log Explorer/Insights commands and AI Runtime Control support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

JavaScript SDK 3.46.0 (2026-09-14) Sep 14, 2026 · issue 075

Fastly JavaScript SDK 3.46.0 adds CoreCache.transactionLookupAsync for async cache transaction lookups.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Added virtual patch for CVE-2026-75650 Adobe Commerce and Magento Unauthenticated SSTI (StyleSmuggler) Sep 9, 2026 · release notes

Fastly adds activation steps for a new Next-Gen WAF virtual patch against CVE-2026-75650

Provides activation instructions for the new CVE-2026-75650 virtual patch in the Next-Gen WAF control panel.

1 detail in Everything

Next-Gen WAF configuration changes now recorded in the event log (2026-09-08) Sep 8, 2026 · issue 089

Event logs API now captures Next-Gen WAF config changes from all sources — API, Fastly panel, NG WAF panel, and Terraform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ TRY IT

Audit all Next-Gen WAF rule changes across every management surface — API, control panels, and Terraform — by filtering the event log for ngwaf.rule events.

$ curl -s -X GET 'https://api.fastly.com/events?filter[event_type]=ngwaf.rule.create' -H 'Fastly-Key: <your_api_token>'

Review all Next-Gen WAF workspace deletions to detect unauthorised removal of workspaces regardless of which panel or tool made the change.

$ curl -s -X GET 'https://api.fastly.com/events?filter[event_type]=ngwaf.workspace.delete' -H 'Fastly-Key: <your_api_token>'

Adds filter[event_type] support on the list events API for all ngwaf.* event types, covering workspaces, rules, lists, custom signals, redactions, virtual patches, thresholds, workspace alerts, header links, rate limited sources, custom dashboards, request reports, and agent keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Extends the Event logs API to record Next-Gen WAF configuration changes made through any surface — the Next-Gen WAF API, the Fastly control panel, the Next-Gen WAF control panel, or Terraform — not just changes made through Fastly.

Adds filter[event_type] support on the list events API for all ngwaf.* event types, covering workspaces, rules, lists, custom signals, redactions, virtual patches, thresholds, workspace alerts, header links, rate limited sources, custom dashboards, request reports, and agent keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

1 more in Everything

└──▷ BREAKING ON UPGRADE

!The event types security.workspace.create, security.workspace.update, security.workspace.delete, security.redaction.create, security.redaction.update, security.redaction.delete, security.rule.create, security.rule.update, security.rule.delete, security.virtual_patch.create, security.virtual_patch.update, security.virtual_patch.delete, and security.event.update are deprecated and no longer recorded — use the ngwaf.* equivalents (e.g. ngwaf.rule.create in place of security.rule.create); existing log entries keep their original event type.

Fastly Terraform Provider (beta) 0.1.0 (2026-09-08) Sep 8, 2026 · issue 070

Fastly Terraform Provider beta 0.1.0 rewrites on Plugin Framework with auto-managed services, TLS, and NGWAF resources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Introduces _auto service resources with provider-managed version lifecycle (auto-clone, validate, and activate on every CRUD operation).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds Terraform resources for core service building blocks: domain, backend, ACL + ACL entries, config store + items, secret store, dictionary items, cache settings, response object, request setting, custom dashboard, syslog logging, and DNS zone.
Adds TLS resources covering certificates, private keys, mutual authentication, activation, subscriptions, and Platform TLS.
Adds Next-Gen WAF (NGWAF) resources: account rules, workspaces, workspace rules, thresholds, lists, signals, redactions, alert integrations, and virtual patching.

4 details in Everything

Fastly Terraform Provider (beta) 0.1.3 (2026-09-08) Sep 8, 2026 · issue 070

Fastly Terraform Provider beta 0.1.3 adds Cloudfiles logging, TSIG key resources, and object storage access key management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Adds fastly_tsig_key resource and fastly_tsig_keys data source for managing TSIG keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Adds a new resource for managing Fastly object storage access keys.
Adds support for Cloudfiles logging via logging_cloudfiles.

3 details in Everything

announced Sep 8, 2026 · issue 070

Fastly Object Storage gains Direct Fetch: server-side S3 transfers via fastly-object-storage-source-url header on PutObject/UploadPart⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

└──▷ TRY IT

Trigger a server-side copy of a single S3 object into Fastly Object Storage without downloading it locally first.

$ curl -X PUT 'https://<bucket>.storage.fastly.com/<destination-key>' \
  -H 'Content-Length: 0' \
  -H 'fastly-object-storage-source-url: https://<source-bucket>.s3.amazonaws.com/<source-key>' \
  -H 'Authorization: AWS4-HMAC-SHA256 ...'

Fetch a specific byte range from a source URL as one part of a multipart upload, avoiding any local data transfer for large-file migrations.

$ curl -X PUT 'https://<bucket>.storage.fastly.com/<destination-key>?partNumber=1&uploadId=<upload-id>' \
  -H 'Content-Length: 0' \
  -H 'fastly-object-storage-source-url: https://<source-bucket>.s3.amazonaws.com/<source-key>' \
  -H 'Range: bytes=0-41943039' \
  -H 'Authorization: AWS4-HMAC-SHA256 ...'

Adds fastly-object-storage-source-url request header support on PutObject and UploadPart S3 API calls, letting Fastly pull object data directly from a source URL server-side instead of requiring the client to upload a payload (Content-Length: 0).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
Supports partial range transfers in Direct Fetch via a standard Range header (e.g., bytes=0-41943039) on UploadPart requests, enabling multipart uploads from a source URL byte-range without client-side data handling.
Accepts pre-signed URLs in the fastly-object-storage-source-url header to migrate private assets without exposing long-term credentials.

3 details in Everything

Next-Gen WAF configuration changes now recorded in the event log Sep 8, 2026 · release notes

Next-Gen WAF config changes now logged via Event logs API with filter[event_type]

Records Next-Gen WAF configuration changes from Fastly control panel, Next-Gen WAF control panel, Terraform, and APIs in the Event logs
Documents new ngwaf.* event types for filtering via filter[event_type] on list events

2 details in Everything

Go SDK 1.10.0 (2026-09-03) Sep 3, 2026 · issue 064

Fastly Go SDK 1.10.0 adds compliance region metadata, raw headers, dynamic backend healthchecks, and shielding byte timeouts.

Adds ComplianceRegion and RawHeaders fields to FastlyMeta in the fsthttp package for richer request metadata access.
Adds support for dynamic backend healthchecks via the fsthttp package.
Adds first-byte and between-bytes timeouts to the shielding package.
Exports SendErrorDetailTag from the fsthttp package for programmatic error detail handling.
Allows removing support for net/http in the fsthttp package, enabling leaner builds.

5 details in Everything

JavaScript SDK 3.45.0 (2026-09-03) Sep 3, 2026 · issue 064

Fastly JavaScript SDK 3.45.0 adds clientSNI to FetchEvent.client for SNI-aware edge logic.

└──▷ USE IT

Route or log based on the SNI hostname the client presented during TLS handshake, enabling per-domain edge logic without inspecting the Host header.

javascript

addEventListener('fetch', (event) => {
  const sni = event.client.clientSNI;
  if (sni === 'api.example.com') {
    // apply API-specific logic
  }
  event.respondWith(fetch(event.request));
});

Adds clientSNI property to FetchEvent.client, exposing the TLS Server Name Indication value from the incoming client connection at the edge.

1 detail in Everything

JavaScript SDK 3.45.0 Sep 3, 2026 · release notes

JavaScript SDK 3.45.0 adds clientSNI to FetchEvent.client and refines env() typing.

FetchEvent.client gains a clientSNI property for SNI detection
env() return type refined to string | undefined for unset variables

2 details in Everything

docs update Sep 2, 2026 · issue 062

Fastly adds API Enforcement for schema-based request validation and Log Explorer & Insights for on-platform log storage and monitoring.

New API Enforcement feature validates incoming API requests against user-defined schemas, logging or blocking non-conforming requests.
New Log Explorer & Insights feature enables proactive storage, inspection, and monitoring of log data directly on the Fastly Platform.

2 details in Everything

Add Image Optimizer Input and Output metrics (2026-09-01) Sep 1, 2026 · issue 072

Fastly stats APIs now expose imgopto_input_image_bytes and imgopto_output_image_bytes for Image Optimizer traffic.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

Add status 499 metric to Historical Stats, Real-Time Analytics, and Domain Inspector APIs (2026-09-01) Sep 1, 2026 · issue 062

Fastly adds status_499 metric to Historical Stats, Real-Time Analytics, and Domain Inspector APIs to track client disconnects.

Add status 499 metric to Historical Stats, Real-Time Analytics, and Domain Inspector APIs Sep 1, 2026 · release notes

Fastly adds status_499 metric to track client disconnects across its Stats and Inspector APIs.

Add Image Optimizer Input and Output metrics Sep 1, 2026 · release notes

Adds imgopto_input_image_bytes and imgopto_output_image_bytes metrics to Fastly Image Optimizer analytics responses.

docs update Aug 26, 2026 · issue 057

Fastly adds API Enforcement for schema-based request validation and Log Explorer & Insights for on-platform log storage and monitoring.

New API Enforcement product validates incoming API requests against user-defined schemas and logs or blocks non-conforming requests at the Fastly edge.
New Log Explorer & Insights feature enables proactive storage, inspection, and monitoring of log data directly on the Fastly platform.

2 details in Everything

Rust SDK 0.13.1 (2026-08-24) Aug 24, 2026 · issue 057

Fastly Rust SDK 0.13.1 adds cache lookup timeout, bot category detection, dynamic backend healthchecks, and new handle constructors.

Adds Request::as_handles method to the Rust SDK.
Adds from_handle functions for ConfigStore, SecretStore, and Log.
Adds ToBackend implementation for Arc<Backend>.
Adds cache lookup timeout support, respected for HTTP guest caching.
Adds BotCategory::Headless to the list of known bot categories.

+1 more show less

Adds experimental support for dynamic backend healthchecks.

6 details in Everything

Add headless bot metric to Historical Stats and Real-Time Analytics APIs (2026-08-24) Aug 24, 2026 · issue 056

Fastly Historical Stats and Real-Time Analytics APIs add bot_edge_requests_headless_count metric for headless bot traffic.

Add headless bot metric to Historical Stats and Real-Time Analytics APIs Aug 24, 2026 · release notes

Fastly adds bot_edge_requests_headless_count metric to Historical Stats and Real-Time Analytics APIs.

CLI v16.0.0 (2026-08-13) Aug 13, 2026 · issue 045

Fastly CLI v16.0.0 now offers all available starter kits for each language during compute init.

Fastly Terraform Provider 9.6.0 (2026-08-11) Aug 11, 2026 · issue 043

Fastly Terraform Provider 9.6.0 adds a new resource and data source for managing Audit Log Event Mappings.

Add Private Access Token (PAT) challenge metrics to Historical Stats and Real-Time Analytics APIs (2026-08-11) Aug 11, 2026 · issue 043

Fastly Historical Stats and Real-Time Analytics APIs gain two new Private Access Token challenge metrics.

CLI v15.6.0 (2026-08-07) Aug 7, 2026 · issue 039

Fastly CLI v15.6.0 adds the audit-log event-mapping command group for managing audit log event mappings.

Next-Gen WAF: `created_by` field now included in rules and signals (2026-08-04) Aug 4, 2026 · issue 037

Fastly Next-Gen WAF Rules and Signals APIs now return a created_by field showing the creator's email.

Adds created_by field to Next-Gen WAF Rules and Next-Gen WAF Signals API responses, identifying the email address of the user who created the rule or signal.

1 detail in Everything

CLI v15.5.0 (2026-08-04) Aug 4, 2026 · issue 035

Fastly CLI v15.5.0 adds Python support for Compute init and new Notification Service Integrations management.

Adds Python language support to compute/init, enabling Python-based Compute service scaffolding.
Adds support for Notification Service Integrations via the integrations commands.

2 details in Everything

Fastly Terraform Provider 9.5.0 (2026-08-04) Aug 4, 2026 · issue 035

Fastly Terraform Provider 9.5.0 adds five new integration types to fastly_integration: Datadog, Jira Issue, JSM, OpsGenie, and Splunk On-Call.

Next-Gen WAF: `created_by` field now included in rules and signals Aug 4, 2026 · release notes

Next-Gen WAF rules and signals API responses now include a created_by field.

docs update Jul 29, 2026 · issue 029

Fastly now supports WebSockets for long-lived, bidirectional communication between clients and origin servers.

└──▷ HOW TO FIND IT

Enable WebSockets for your account so any authorized user can establish long-lived bidirectional connections through Fastly.

📍In the Fastly console, go to Products page and enable WebSockets (requires superuser role on an eligible account).

Supports the WebSocket protocol for long-lived, two-way interactive communication sessions between clients and origin servers.
Superusers on eligible accounts can enable WebSockets via the Products page; once enabled, any user with appropriate permissions can use the protocol.
Billing for WebSockets is based on a combination of bandwidth and connection time (measured in usage minutes, aggregated monthly to millions of minutes).

3 details in Everything

docs update Jul 29, 2026 · issue 029

Fastly launches Subscriber Provided Prefix: bring your own IP addresses announced via Fastly's global Anycast infrastructure

New Subscriber Provided Prefix product lets customers bring their own IPv4 (/24 or larger) or IPv6 (/48 or larger) prefixes, announced from Fastly's AS54113 via HTTP Anycast globally or regionally (North America/Europe).
Supports HTTP and HTTPS traffic termination at Fastly's edge for customer-owned prefixes, enabling separation of network-layer and content-delivery concerns.
Integrates with Origin Connect and DDoS Protection and Mitigation service to route customer-owned prefix traffic through Fastly's global network, shielding origin servers.
Subscriber Provided Prefix API enables programmatic management of customer IP addresses, including automating creation/maintenance and customizing attributes such as supported protocols and TLS versions.
IP reputation scanning performed against common databases before announcement to ensure customer prefixes remain neutral or positive reputation.

5 details in Everything

docs update Jul 29, 2026 · issue 029

Fastly launches Origin Connect: direct fiber links between your origin servers and Fastly shield POPs via BGP peering.

New Origin Connect product provides a dedicated fiber cross-connect between subscriber origin servers and a Fastly shield POP, eliminating intermediate network hops.
Supports 10G and 100G ports (up to 4x for redundancy) with BGP peering over globally unique IPv4 /31 and IPv6 /127 prefixes.
Automatic failover to public internet transit if the direct interconnect experiences degradation or failure.

3 details in Everything

docs update Jul 29, 2026 · issue 029

Fastly launches Oblivious HTTP Relay, enabling double-blind privacy-preserving request proxying compliant with the OHTTP spec.

└──▷ HOW TO FIND IT

Begin onboarding an OHTTP Relay service by supplying the required frontend and backend hostnames to Fastly Professional Services.

📍Email sales@fastly.com with: - Frontend hostname: <relay-hostname.example.com> - Backend (gateway) hostname: <gateway-hostname.example.com> - Any additional HTTP headers (beyond Content-Type, Content-Length, Host) to preserve (must contain no PII)

New Fastly Oblivious HTTP Relay (OHTTP Relay) product implements the relay role in the Oblivious HTTP specification, forwarding encrypted, encapsulated client requests to an OHTTP Gateway without exposing client identity.
Strips all non-essential request headers automatically, passing only Content-Type, Content-Length, and Host (plus any additional headers you pre-approve that contain no PII).
Performs configurable request/response validation — confirming content type, HTTPS transport, and that host/path maps to a known backend — before forwarding.
Provides read-only account access (User role) so operators can view real-time and historical service stats without being able to alter the privacy-sensitive service configuration.

4 details in Everything

docs update Jul 29, 2026 · issue 029

Fastly launches S3-compatible Object Storage with edge integration for Deliver and Compute services

New Fastly Object Storage product: an Amazon S3-compatible large object storage solution integrated with Fastly's Deliver and Compute services.
Supports objects up to 5 TB and multipart uploads (up to 10,000 parts, minimum 5 MB per part except the last).
Data accessed from within Fastly's network bypasses the public endpoint speed cap (~150 Mbps) and 100 req/s per bucket limit.
Automatic server-side encryption of all uploaded objects.
Account-level access keys via control panel; bucket-level access keys available through the Fastly API.

+1 more show less

Billing based on GB-month storage plus Class A (write) and Class B (read) operation pricing.

6 details in Everything

docs update Jul 29, 2026 · issue 029

Fastly launches authoritative DNS service built on its global edge network

Next-Gen WAF for Apache 1.11.0 (2026-07-29) Jul 29, 2026 · issue 030

Next-Gen WAF Apache module now logs failed-open requests for better visibility into bypass events.

Logs failed-open requests, giving practitioners visibility into traffic that bypassed WAF inspection.

1 detail in Everything

Fastly DNS (2026-07-28) Jul 28, 2026 · issue 029

Fastly launches authoritative DNS service backed by its global edge network.

JavaScript SDK 3.44.0 (2026-07-27) Jul 27, 2026 · issue 032

Fastly JavaScript SDK 3.44.0 adds bot detection capability.

Fastly Terraform Provider 9.4.0 (2026-07-22) Jul 22, 2026 · issue 023

Fastly Terraform Provider 9.4.0 exposes computed certificate_id on TLS subscriptions and enriches API error messages with subscription context.

└──▷ USE IT

Chain a resource that depends on a freshly issued certificate in a single apply, using the new computed certificate_id output from the validation resource.

hcl

resource "fastly_tls_subscription_validation" "example" {
  subscription_id = fastly_tls_subscription.example.id
}

resource "fastly_tls_activation" "example" {
  certificate_id  = fastly_tls_subscription_validation.example.certificate_id
  domain          = "example.com"
  configuration_id = fastly_tls_subscription.example.configuration_id
}

Exposes computed certificate_id on fastly_tls_subscription_validation, enabling issuance-dependent resources to be chained in a single terraform apply.
Includes subscription ID and domains in fastly_tls_subscription API error messages, making it easier to identify failing resources when managing many subscriptions at once.

2 details in Everything

Add HTTP and TLS metrics to historical and real-time Domain Inspector APIs (2026-07-21) Jul 21, 2026 · issue 023

Domain Inspector APIs now expose TLS and HTTP version distribution metrics for incoming requests.

Added virtual patch for CVE-2026-63030 (wp2shell, also covers CVE-2026-60137) (2026-07-21) Jul 21, 2026 · issue 022

Fastly adds virtual patch for WordPress RCE chain CVE-2026-63030/CVE-2026-60137 (wp2shell) in WAF and control panel.

└──▷ HOW TO FIND IT

Enable the wp2shell virtual patch via the Fastly control panel to immediately protect WordPress services from the RCE chain.

📍In the Fastly control panel, go to Virtual Patches › search for CVE-2026-63030 › click the pencil icon › set Status to Enabled › (optional) choose Block requests or Log requests › click Update virtual patch.

Enable the wp2shell templated rule in the Next-Gen WAF control panel to block and alert on CVE-2026-63030 signals.

📍In the Next-Gen WAF control panel, go to Rules › Templated Rules › search CVE-2026-63030 › click View › Configure › Add trigger › select 'Block requests from an IP immediately if the CVE-2026-63030 signal is observed' › Update rule. Then go to the Signals tab › search CVE-2026-63030 › View › Detections tab › Add detection (Enabled) › Create detection. Then go to the Alerts tab › Add alert › set Status to Enabled › Save alert.

Add HTTP and TLS metrics to historical and real-time Domain Inspector APIs Jul 21, 2026 · release notes

HTTP and TLS version metrics added to Historical and Real-Time Domain Inspector APIs

Adds tls_versions and http_versions fields to responses from the Historical Domain Inspector API to show request distribution by protocol.
Adds tls_versions and http_versions fields to responses from the Real-Time Domain Inspector API to show live request distribution by protocol.

2 details in Everything

CLI v15.4.0 (2026-07-08) Jul 8, 2026 · issue 014

Fastly CLI v15.4.0 adds compute install-tools command and NGWAF account/workspace timeseries support.

└──▷ TRY IT

Pre-install the Viceroy local testing binary before starting Compute development, useful in CI or fresh dev environments.

$ fastly compute install-tools

New compute install-tools command pre-installs the Viceroy binary for local Compute development environments.
New NGWAF timeseries subcommands support account-level and workspace-level time series data queries.

2 details in Everything

Next-Gen WAF agent 4.80.1 (2026-07-08) Jul 8, 2026 · issue 014

Next-Gen WAF agent 4.80.1 improves CMDEXE, path traversal, and XSS detection with refreshed GeoIP data.

Improves CMDEXE detection for more accurate command-injection identification.
Improves TRAVERSAL detection to better catch path-traversal attack patterns.
Improves XSS detection for broader cross-site scripting coverage.
Updates base GeoIP data to July 2026 for current geolocation accuracy.

4 details in Everything

Add Compute backend error metrics to Historical Stats and Real-Time Analytics APIs (2026-06-30) Jun 30, 2026 · issue 014

Fastly adds 16 backend Compute error metrics to Historical Stats and Real-Time Analytics APIs for root-cause troubleshooting.

└──▷ TRY IT

Query the Real-Time Analytics API to surface backend Compute error counts broken down by category (TLS, HTTP, DNS, connection) for a service in the last 60 seconds.

$ curl -s -H 'Fastly-Key: <FASTLY_API_TOKEN>' 'https://rt.fastly.com/v1/channel/<SERVICE_ID>/ts/h'

Add Notification Service Event Mappings API (2026-06-30) Jun 30, 2026 · issue 014

Fastly adds Event Mappings API to control which audit events trigger notifications per service or workspace.

└──▷ TRY IT

Discover which audit event types are available and what scope types each supports before building a mapping.

$ curl -X GET https://api.fastly.com/notifications/event-types \
  -H 'Fastly-Key: <FASTLY_API_TOKEN>' \
  -H 'Accept: application/json'

Discover available scope categories (account, VCL service, Wasm service, WAF workspace) to use when scoping a new event mapping.

$ curl -X GET https://api.fastly.com/notifications/scope-types \
  -H 'Fastly-Key: <FASTLY_API_TOKEN>' \
  -H 'Accept: application/json'

New Event Mappings API enables creating, managing, and querying which Fastly audit events trigger notifications to configured integrations.
Supports scoping notification mappings account-wide or to specific CDN (VCL) services, Compute (Wasm) services, or Next-Gen WAF workspaces.
New discovery endpoint /event-types returns all supported audit event types with their compatible scope types.
New discovery endpoint /scope-types returns the supported scope categories for notification mappings.

4 details in Everything

Add new Routing Configurations API and associated support for it in the Domains API (2026-06-30) Jun 30, 2026 · issue 014

Fastly adds Routing Configurations API to route traffic by URL path/condition, with Domain API support for multi-domain rule binding.

New Routing Configurations API enables defining routing rules based on URL paths and conditions to direct traffic to different services.
Updated Domains API supports associating domains with routing configurations, enabling consistent rule application across multiple domains.

2 details in Everything

Connect your Fastly account to your Next-Gen WAF corp (2026-06-30) Jun 30, 2026 · issue 014

Fastly accounts can now be linked to an existing Next-Gen WAF corp for unified control panel and API access.

└──▷ HOW TO FIND IT

When your team manages WAF rules in the Next-Gen WAF control panel but wants to administer them through the Fastly control panel and API going forward.

📍In the Fastly control panel, follow the 'Connecting a Fastly account to your corp' guide to link your Fastly account to your existing Next-Gen WAF corp.

Enables connecting a Fastly account to an existing Next-Gen WAF corp, surfacing Next-Gen WAF and Bot Management through the Fastly control panel and Fastly API without losing access to the standalone Next-Gen WAF control panel or API.
WAF configurations and user accounts are shared and synchronized in real time across both control panels and both APIs after the account is connected.

2 details in Everything

New integration types for Notifications API (2026-06-30) Jun 30, 2026 · issue 014

Fastly Notifications API adds Datadog, Jira, OpsGenie, and Splunk On-Call as integration targets.

Adds five new Notifications API integration types: Datadog, Jira Issue, Jira Service Management, OpsGenie, and Splunk On-Call.
Enables routing of observability alerts and audit log event notifications directly to incident management and issue tracking platforms.

2 details in Everything

New integration types for Notifications API Jun 30, 2026 · release notes

Fastly Notifications API now supports Datadog, Jira, OpsGenie, Splunk On-Call integrations

Adds datadog as a new integration type to the Notifications API
Adds jira_issue as a new integration type to the Notifications API
Adds jira_service_management as a new integration type to the Notifications API
Adds opsgenie as a new integration type to the Notifications API
Adds splunk_on_call as a new integration type to the Notifications API

5 details in Everything

Connect your Fastly account to your Next-Gen WAF corp Jun 30, 2026 · release notes

Connect Fastly accounts to Next-Gen WAF corps for unified access.

Account connection feature

1 detail in Everything

Add Compute backend error metrics to Historical Stats and Real-Time Analytics APIs Jun 30, 2026 · release notes

Fastly now provides visibility into backend Compute errors via the Historical Stats and Real-Time Analytics APIs, allowing teams to troubleshoot issues by categorizing them as TLS, HTTP, DNS, or connection problems.

Adds sixteens new metrics to the Historical Stats API that attribute backend Compute errors to TLS, HTTP, DNS, connection issues, or other sources

1 detail in Everything

Add new Routing Configurations API and associated support for it in the Domains API Jun 30, 2026 · release notes

New Routing Configurations API allows URL-based traffic routing and Domain association.

Adds the Routing Configurations API to define routing rules based on URL paths and conditions.
Updates the Domains API to support associating domains with routing configurations.

2 details in Everything

Add Notification Service Event Mappings API Jun 30, 2026 · release notes

Fastly adds API endpoints to create and manage notification event mappings for services and workspaces

Adds GET /event-types and GET /scope-types discovery endpoints to list supported audit event types with compatible scope categories.
Enables creating, managing, and querying notification event mappings via the new Event Mappings API to define which Fastly audit events trigger notifications for specific services or workspaces.

2 details in Everything

CLI v15.3.0 (2026-06-26) Jun 26, 2026 · issue 014

Fastly CLI v15.3.0 adds prefix-based bulk KV store deletion and contentguard bot management support.

└──▷ TRY IT

Bulk-delete all KV store keys sharing a common prefix — useful for purging session data, cache entries, or tenant records in one operation.

$ fastly kvstore-entry delete --store-id <store-id> --key-prefix <prefix>

Adds support for deleting multiple KV store entries at once using a key prefix.
Supports contentguard configuration on the bot_management product under [setup.products] in compute deploy.

2 details in Everything

Account-level requests for Fastly control panel (2026-06-25) Jun 25, 2026 · issue 014

Fastly control panel now shows account-level request visibility across all workspaces on the Requests page.

└──▷ HOW TO FIND IT

View and filter requests across every workspace in your account to identify traffic patterns or anomalies without switching between individual workspaces.

📍In the Fastly control panel, go to Requests and select the account-level view to filter requests across all workspaces.

Account-level requests for Fastly control panel Jun 25, 2026 · release notes

Fastly control panel Requests page now supports account-level viewing and filtering across all workspaces.

Go SDK 1.8.0 (2026-06-23) Jun 23, 2026 · issue 014

Fastly Go SDK 1.8.0 adds bot detection, VPN/proxy detection, stale-if-error caching, and richer KV store controls.

Adds bot detection hostcalls via fsthttp, enabling Compute apps to identify bot traffic at the edge.
Adds ResVPNProxy support in fsthttp to detect and act on requests originating from VPNs or proxies.
Adds stale-if-error logic to the HTTP caching layer, allowing cached responses to be served when origin errors occur.
Adds IfGenerationMatch to InsertConfig in kvstore, enabling conditional writes based on KV store entry generation.
Supports streaming request bodies on KV store insert operations.

+1 more show less

Adds MaxAge and TTLRemaining fields to CandidateResponse in fsthttp, exposing cache lifetime metadata during request handling.

6 details in Everything

Next-Gen WAF: Add account-level requests endpoint (2026-06-22) Jun 22, 2026 · issue 014

Next-Gen WAF adds account-level requests endpoint to search across all workspaces in one call.

└──▷ TRY IT

Query WAF requests account-wide to hunt for a suspicious IP pattern without scoping to a single workspace.

$ curl -X GET 'https://api.fastly.com/ngwaf/v1/requests?q=ip:203.0.113.42' \
  -H 'Fastly-Key: <your-api-token>' \
  -H 'Accept: application/json'

New GET /ngwaf/v1/requests endpoint enables searching WAF requests across all workspaces in an account, with each result tagged by workspace_id.

1 detail in Everything

Next-Gen WAF: Added detector_scope to simulator signal responses (2026-06-22) Jun 22, 2026 · issue 014

Next-Gen WAF Simulate API gains detector_scope field per signal and doubles request body size limit to 200 KB.

└──▷ TRY IT

Inspect which detector scope triggered each signal when simulating a reconstructed request — useful for distinguishing built-in WAF rule hits from custom workspace or account rules.

$ curl -s -X POST 'https://dashboard.signalsciences.net/api/v0/corps/<corp_name>/sites/<site_name>/simulate' \
  -H 'x-api-user: <email>' \
  -H 'x-api-token: <token>' \
  -H 'Content-Type: application/json' \
  -d @reconstructed_request.json \
  | jq '.signals[] | {signal: .type, scope: .detector_scope}'

Adds detector_scope field to every signal in Simulate API responses, indicating whether detection came from a system, workspace, account, or unknown scope — matching parity with the /requests/{id} API.
Increases Simulate API request body size limit from 100 KB to 200 KB to support reconstructed requests in the import flow.

2 details in Everything

Next-Gen WAF: Added detector_scope to simulator signal responses Jun 22, 2026 · release notes

Next-Gen WAF Simulate API now returns detector_scope on signals and increases request limit to 200 KB

Adds detector_scope field to simulation response signals in the Next-Gen WAF Simulate API to indicate detection source (system, workspace, account, or unknown)
Increases request body size limit from 100 KB to 200 KB for reconstructed requests used in the import flow

2 details in Everything

Next-Gen WAF: Add account-level requests endpoint Jun 22, 2026 · release notes

Fastly Next-Gen WAF adds account-level request search via GET /ngwaf/v1/requests

Adds GET /ngwaf/v1/requests endpoint to search requests across all workspaces in an account.
Results from the new endpoint include the workspace_id field to identify the originating workspace.

2 details in Everything

Fastly Terraform Provider 9.3.0 (2026-06-17) Jun 17, 2026 · issue 014

Fastly Terraform Provider 9.3.0 adds DNS Zones, TSIG Keys, and an immediate-block NGWAF threshold action.

└──▷ USE IT

Configure an NGWAF threshold that blocks traffic immediately upon breach rather than waiting for a rate window to close — ideal for high-confidence attack signals.

hcl

resource "fastly_ngwaf_threshold" "example" {
  # ... existing threshold config ...
  action = "block_immediately"
}

Adds Terraform resources for managing DNS Zones and TSIG Keys via the Fastly provider.
Supports block_immediately as a new action in NGWAF threshold configurations, enabling instant traffic blocking when a threshold is breached.

2 details in Everything

Next-Gen WAF: New block_immediately threshold action (2026-06-17) Jun 17, 2026 · issue 014

Next-Gen WAF adds block_immediately threshold action to unconditionally block high-risk signals without a rate window.

└──▷ HOW TO FIND IT

Immediately block all requests tagged with the CVE signal at the threshold level, with no rate window required — useful for zero-tolerance enforcement during active exploitation attempts.

📍In the Next-Gen WAF console, go to Thresholds › select or create a threshold › set Action to block_immediately and choose CVE (or Pentest, XXE, or AWS-SSRF) as the signal.

Next-Gen WAF: New block_immediately threshold action Jun 17, 2026 · release notes

Fastly Next-Gen WAF adds block_immediately threshold action to unconditionally block requests matching specific signals

Adds block_immediately action to thresholds to unconditionally block requests carrying a configured signal without rate window
Supports Pentest, CVE, XXE, and AWS-SSRF signals for the new block_immediately action

2 details in Everything

JavaScript SDK 3.43.0 (2026-06-16) Jun 16, 2026 · issue 014

Fastly JS SDK 3.43.0 adds stale-if-error support for resilient cache serving during origin failures.

Adds stale-if-error cache control support, enabling the SDK to serve stale cached responses when origin errors occur.

1 detail in Everything

Rust SDK 0.13.0 (2026-06-16) Jun 16, 2026 · issue 014

Rust SDK 0.13.0 adds stale-if-error guest caching, async request handoff, and modern Rust lock primitives.

└──▷ USE IT

Serve a stale cached response for up to 60 seconds when an origin is unreachable, instead of surfacing a SendError to the client.

rust

request.set_stale_if_error(Duration::from_secs(60));
let response = match request.send("my_backend") {
    Ok(resp) => resp,
    // SDK automatically substitutes cached stale-if-error response here
    Err(e) => return Err(e),
};

Disable stale-if-error caching entirely so origin errors are always surfaced to the client without serving stale content.

rust

request.set_stale_if_error(Duration::ZERO);

Hand off an in-flight async request so the host delivers the eventual response to the client, freeing your compute to continue other work.

rust

let pending = request.send_async("my_backend")?;
pending.send_to_client();

Adds PendingRequest::send_to_client method to hand off responsibility for sending in-flight async responses back to the client to the host.
Supports stale-if-error in the HTTP guest cache: serves stale cached responses when Request::send or Request::send_async would otherwise return a SendError.
Enables configurable stale-if-error duration via Request::set_stale_if_error and CandidateResponse::set_stale_if_error, including opt-out via Duration::ZERO.
Exposes Response::masked_error on the request collapse leader to surface the underlying error that a stale-if-error response replaced.
Allows 5xx responses to trigger stale-if-error behavior by returning an error from the after_send cache hook.

+2 more show less

Makes HTTP guest caching compatible with send_async.
Adopts LazyLock/OnceLock in place of lazy_static.

7 details in Everything

Next-Gen WAF agent 4.79.0 Jun 11, 2026 · release notes

Adds Alpine Linux 3.24 support; improves SQLI and XSS detection

Improved SQLI detection
Improved XSS detection

2 details in Everything

Next-Gen WAF for HAProxy 1.5.3 Jun 4, 2026 · release notes

Next-Gen WAF for HAProxy 1.5.3 adds Ubuntu 26.04 and Amazon Linux 2/2023 support

Added Ubuntu 26.04 (resolute) support
Added Amazon Linux 2 & 2023 support

2 details in Everything

Next-Gen WAF for NGINX (Lua) 1.7.2 Jun 2, 2026 · release notes

NGWAF v1.7.2 adds env var control for agent host/port and AmazonLinux 2 support

Adds FASTLY_NGWAF_AGENT_HOST and FASTLY_NGWAF_AGENT_PORT environment variables to configure the agent connection instead of hardcoded or config-file defaults.
Adds explicit platform support for AmazonLinux 2, removing the previous reliance on el/7 compatibility layers.

2 details in Everything

Next-Gen WAF: Increased custom signal name character limit Jun 2, 2026 · release notes

Next-Gen WAF custom signal name limit increased from 25 to 128 characters.

New Traefik plugin integration May 29, 2026 · release notes

Fastly Next-Gen WAF gains a new Traefik plugin integration for intercepting and inspecting HTTP traffic.

New Envoy Gateway integration May 14, 2026 · release notes

Fastly Next-Gen WAF now protects traffic routed through Envoy Gateway

New Google Cloud Service Extensions integration May 14, 2026 · release notes

Fastly Next-Gen WAF adds Google Cloud Service Extensions integration for real-time inspection in GCLB.

Integrates Fastly Next-Gen WAF with Google Cloud Load Balancers via Google Cloud Service Extensions to enable real-time inspection and enforcement within the load balancer's request processing pipeline.
Operates as a callout backend service using gRPC and Envoy's external processing protocol to inspect request headers, request bodies, and response headers.

2 details in Everything

Add documentation for max_lifetime and max_use backend properties May 5, 2026 · release notes

Adds max_lifetime and max_use properties to the Fastly backends API for connection pool tuning.

Added system lists Apr 21, 2026 · release notes

Next-Gen WAF now includes unmodifiable system lists for rules at corp and site levels

Adds system lists to the Next-Gen WAF, providing Fastly-managed data sets referenceable in request rules.

1 detail in Everything

Next-Gen WAF: Added WAF simulate endpoint Apr 16, 2026 · release notes

Adds a new Simulate a WAF request API endpoint for Next-Gen WAF testing.

GET /ngwaf/simulate endpoint added to simulate HTTP requests through a workspace's WAF configuration without sending traffic.

1 detail in Everything

Add Logging Endpoint Errors API Apr 14, 2026 · release notes

New Logging Endpoint Errors API provides visibility into logging pipeline issues.

Add `compute_handoff` metric to Historical Stats and Real-Time Analytics APIs Apr 9, 2026 · release notes

Adds compute_handoff metric to Historical Stats and Real-Time Analytics APIs

Adds the compute_handoff metric to the Historical Stats API for analyzing Compute handoff frequency.
Adds the compute_handoff metric to the Real-Time Analytics API for analyzing Compute handoff frequency.

2 details in Everything

JavaScript SDK 3.41.0 Apr 8, 2026 · release notes

Adds --gc-frequency debug option, external project-level CLI config, and TypeScript 6 support.

Adds --gc-frequency option to debug-build.sh for configuring garbage collection frequency in debug builds
Allows project-level external config file configuration for js-compute-runtime CLI behavior
Supports installation in projects that use TypeScript 6

3 details in Everything

Add Next-Gen WAF agents endpoints Apr 7, 2026 · release notes

New Next-Gen WAF endpoints to list and retrieve details of deployed agents via the API.

Adds GET /ngwaf/v1/workspaces/{workspace_id}/agents endpoint to list all agents in a workspace
Adds GET /ngwaf/v1/workspaces/{workspace_id}/agents/{agent_id} endpoint to retrieve agent details including status, version, performance metrics, and host information

2 details in Everything

Add ContentGuard support to bot_management Mar 31, 2026 · release notes

Product enablement API now supports ContentGuard on the Bot Management product.

Next-Gen WAF agent 4.77.0 Mar 31, 2026 · release notes

Next-Gen WAF agent 4.77.0 adds Envoy External Processing Filter support and three new attack signals (SSTI, INSECURE-DESER, NOSQLI).

Adds SSTI attack signal (SSTI) detection, part of Fastly Security Labs.
Adds insecure deserialization signal (INSECURE-DESER) as a GA anomaly signal effective 2026-10-05.
Adds NoSQLi attack signal (NOSQLI) detection, part of Fastly Security Labs.

3 details in Everything

Add Client-Side Protection API Mar 30, 2026 · release notes

Adds the Client-Side Protection API to manage domains, CSP policies, and third-party script monitoring.

Adds Website resources for configuring domains for Client-Side Protection monitoring
Adds Page resources to define URL paths to monitor within each website and configure notification settings
Adds Script resources to view detected scripts and manage authorization status (authorized or unauthorized)
Adds Policy resources to create and manage Content Security Policies with report or enforce modes
Adds Report resources to view CSP violation reports for each policy

+1 more show less

Adds Header/Event monitoring to track security header changes on pages

6 details in Everything

Add Compute Sandbox count metric Mar 30, 2026 · release notes

Adds compute_sandboxes metric to Fastly Historical Stats and Real-Time Analytics APIs

Add KV Store support to Enablement Mar 17, 2026 · release notes

Enablement API gains kv_store support for Fastly KV Store product configuration.

kv_store added as a supported value in the Enablement API to configure the KV Store product.

1 detail in Everything

Next-Gen WAF for HAProxy 1.5.2 Mar 13, 2026 · release notes

Next-Gen WAF for HAProxy 1.5.2 adds platform support for Debian 13, Ubuntu 24.04, and multiple Alpine Linux versions

Adds Debian 13 (trixie) support
Adds Ubuntu 24.04 (noble) support

2 details in Everything

Add Domain Management filtering by fully-qualified domain name match Mar 5, 2026 · release notes

Adds fqdn_match query parameter to Domain Management API for exact and substring domain filtering

Add Compute error metrics to Historical Stats and Real-Time Analytics APIs Feb 24, 2026 · release notes

Fastly adds eight new Compute error metrics (logic, resource, platform) to Historical Stats and Real-Time Analytics APIs

The compute_heap_limit_exceeded metric is renamed to compute_service_memory_exceeded_error.
The compute_bereq_errors metric is renamed to compute_service_bereq_error.

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The compute_heap_limit_exceeded metric is renamed to compute_service_memory_exceeded_error.
!The compute_bereq_errors metric is renamed to compute_service_bereq_error.

Add Image Optimizer format counting metrics Feb 20, 2026 · release notes

Fastly adds eight new Image Optimizer format counting metrics to analytics responses

Real-time analytics and Historical Stats responses now include imgopto_avif_count, imgopto_jpeg_count, imgopto_png_count, imgopto_gif_count, imgopto_webp_count, imgopto_jpegxl_count, imgopto_svg_count, and imgopto_mp4_count metrics.

1 detail in Everything

JavaScript SDK 3.40.0 Feb 17, 2026 · release notes

JavaScript SDK 3.40.0 adds custom weval binary support and reusable sandboxes.

Adds --weval-binary option to specify a custom wEVAL binary for edge-side JavaScript debugging.
Introduces reusable sandboxes to persist state across multiple executions in the same environment.

2 details in Everything

Next-Gen WAF for Node.js 2.4.1 Feb 5, 2026 · release notes

Next-Gen WAF for Node.js 2.4.1 adds framework identification to request metadata

Add Alerts derived rate metrics for Compute responses Feb 4, 2026 · release notes

Adds six derived rate metrics for Compute response status codes to the Alerts API

JavaScript SDK 3.39.0 Jan 28, 2026 · release notes

Fastly JS SDK 3.39.0 adds isBot device detection, firstByteTimeout for shielding, and KVStoreError mapping.

Adds isBot support to device detection
Implements firstByteTimeout for shielding

2 details in Everything

Add datacenter parameter to HSAPI Jan 27, 2026 · release notes

Historical Stats API adds datacenter parameter to filter by POP codes

Adds the datacenter parameter to the Historical Stats API endpoint for filtering by Point of Presence (POP)
Supports single POP codes and comma-separated lists (e.g., IAD,SYD) via the datacenter parameter

2 details in Everything

Next-Gen WAF: Added top attacks endpoint Jan 26, 2026 · release notes

New GET endpoint to retrieve top attack data for a Next-Gen WAF workspace.

Adds the Get top attacks for a workspace API endpoint to the Next-Gen WAF service
Enables fetching top attack metrics sorted by request count within specified time ranges and aggregation options

2 details in Everything

Add backend fetch timeout Jan 26, 2026 · release notes

Fastly Backend API now supports fetch_timeout parameter to limit wait time for backend responses.

Next-Gen WAF agent 4.74.0 Jan 15, 2026 · release notes

Fastly Next-Gen WAF agent 4.74.0 introduces new Docker image and improved detections.

Adds sigsci-agent-slim Docker image (built from scratch) to Docker Hub for a smaller footprint.

1 detail in Everything

Next-Gen WAF: Added trend visualization type for custom dashboards Jan 14, 2026 · release notes

Next-Gen WAF custom dashboards now support the trend visualization type via the Custom dashboards API.

JavaScript SDK 3.38.0 Dec 18, 2025 · release notes

JavaScript SDK 3.38.0 adds NGWAF inspect API support and larger config store buffers.

inspect module gains support for the NGWAF inspect API (#1212)
Config store now supports buffers longer than 8k bytes (#1181)

2 details in Everything

Next-Gen WAF: Custom dashboards and default dashboards APIs Dec 15, 2025 · release notes

Fastly Next-Gen WAF introduces APIs for creating and managing custom and default security dashboards

Adds the Custom dashboards API to create, manage, and customize dashboards for visualizing security metrics in Next-Gen WAF
Enables configuration of workspace default dashboards via the new API

2 details in Everything

Add NGWAF Bot Analysis Request Count Dec 11, 2025 · release notes

New ngwaf_bot_analysis_request_count field available in Fastly NGWAF APIs

JavaScript SDK 3.37.0 Dec 11, 2025 · release notes

JavaScript SDK 3.37.0 adds client fingerprint properties and shielding support.

Adds tlsJA4, h2Fingerprint, and ohFingerprint properties to the client for TLS/HTTP2/OH fingerprinting data.

1 detail in Everything

Add Domain Inspector on Compute, Compute response status metrics Dec 9, 2025 · release notes

Adds compute_-prefixed metrics for domain and service-level Compute traffic via Historical Stats and Real-Time Analytics APIs.

Adds new compute_* fields to Historical Stats API responses for per-domain and per-service compute monitoring
Adds new compute_* fields to Real-Time Analytics API responses for per-domain and per-service compute monitoring

2 details in Everything

Add imgopto_compute_requests to Historical and Real-Time Stats APIs Nov 18, 2025 · release notes

Adds imgopto_compute_requests metric to Historical and Real-Time Stats APIs for tracking Image Optimizer requests from Compute services.

Adds imgopto_compute_requests field to Historical Stats API responses to retrieve the number of Image Optimizer requests made by Compute services
Adds imgopto_compute_requests field to Real-Time Analytics API responses to retrieve the number of Image Optimizer requests made by Compute services

2 details in Everything

Add DDoS Protection Event Detection Stats Nov 18, 2025 · release notes

Fastly adds DDoS Protection Event Detection Stats via the DDoS Protection Events API

Retrieves detected and allowed request counts for a DDoS Event from the DDoS Protection Events API

1 detail in Everything

Next-Gen WAF: Header Links API Nov 17, 2025 · release notes

Adds Header Links API to Next-Gen WAF for correlating security events via header-based clickable links in the UI.

Adds Header Links API endpoint to create clickable links in the Next-Gen WAF interface based on request or response header values, enabling correlation with external logging platforms like Kibana, Splunk, or custom logging systems.

1 detail in Everything

Add DNS responses metrics Nov 17, 2025 · release notes

Fastly extends its analytics capabilities by exposing new DNS response metrics through both historical and real-time APIs, enabling users to track billable vs non-billable traffic volumes directly.

New metrics for DNS responses available in existing APIs.

1 detail in Everything

Add mode parameter for DDoS Protection enablement Nov 6, 2025 · release notes

New mode parameter for DDoS Protection enablement via the product enablement API

Add display_name attribute to role Nov 6, 2025 · release notes

Fastly IAM Roles API now includes display_name attribute in role responses.

Add traffic ramping support for Next-Gen WAF enablement Nov 6, 2025 · release notes

Adds traffic_ramp parameter to Next-Gen WAF enablement API for gradual traffic inspection.

Add Domain Research API product Nov 3, 2025 · release notes

Adds the Domain Research API product (domain_research) to Fastly's product enablement API.

Add upgrade to Historical and Real-Time Stats APIs Oct 29, 2025 · release notes

Fastly extends its analytics capabilities by introducing the upgrade field in both Historical and Real-Time Stats APIs to track WebSocket upgrade requests.

Adds upgrade field to Historical Stats API response
Adds upgrade field to Real-Time Analytics API response

2 details in Everything

Next-Gen WAF: False Positive Reporting Oct 15, 2025 · release notes

Fastly adds false positive reporting endpoint to the Next-Gen WAF Requests API to flag incorrectly blocked traffic.

Next-Gen WAF agent 4.71.0 Oct 9, 2025 · release notes

Next-Gen WAF agent 4.71.0 adds FIPS 140-3 compliance support and improved SQLI detection

└──▷ BREAKING ON UPGRADE

!Ended support for Alpine 3.11 & 3.12, Debian 8, and Ubuntu 12.04

Next-Gen WAF Request Export Oct 8, 2025 · release notes

Adds export=true query parameter and text/csv response support to the Next-Gen WAF requests endpoint.

Exports Next-Gen WAF requests as CSV files for offline analysis by setting export=true in the request
Adds Accept: text/csv header support to the requests endpoint to retrieve data in CSV format

2 details in Everything

Next-Gen WAF for NGINX (Native) 1.4.0 Oct 6, 2025 · release notes

Next-Gen WAF for NGINX (Native) 1.4.0 adds support for new NGINX/NGINX Plus versions and Ubuntu 26.04.

Added support for NGINX+ PLS.37.1
Added support for NGINX 1.31.6
Added support for NGINX 1.31.5
Added support for NGINX 1.30.5
Added support for NGINX 1.31.4

+24 more show less

Added support for NGINX 1.31.3
Added support for NGINX 1.30.4
Added support for NGINX 1.31.2
Added support for NGINX 1.30.3
Added support for NGINX+ PLS.37.0.0.1
Added support for NGINX 1.31.1
Added support for NGINX 1.30.2
Added support for Ubuntu 26.04 Resolute
Added support for NGINX 1.31.0
Added support for NGINX 1.30.1
Added support for NGINX 1.30.0
Added support for NGINX 1.28.3
Added support for NGINX 1.29.8
Added support for NGINX 1.29.7
Added support for NGINX 1.29.6
Added support for NGINX 1.28.2
Added support for NGINX 1.29.5
Added support for NGINX 1.28.1
Added support for NGINX 1.29.4
Added support for NGINX 1.28.0 on Alpine 3.23
Added support for Nginx+ R36
Added support Debian 13 Trixie
Added support for NGINX 1.29.3
Added support for NGINX 1.29.2

29 details in Everything

Add api_discovery_requests_count to Historical and Real-Time Stats APIs Sep 30, 2025 · release notes

Fastly exposes a new metric for tracking API discovery requests in its stats endpoints.

Adds api_discovery_requests_count field to Historical Stats API responses
Adds api_discovery_requests_count field to Real-Time Analytics API responses

2 details in Everything

Added roles attribute to user and invitation APIs Sep 30, 2025 · release notes

User Management API gains roles attribute for assigning multiple roles per user.

Adds roles attribute to User Management API endpoints for users and invitations.

1 detail in Everything

JavaScript SDK 3.35.0 Sep 26, 2025 · release notes

JavaScript SDK 3.35.0 introduces the HTML Rewriter API

Adds HTMLRewriter to enable in-stream HTML transformation within Fastly Compute functions.

1 detail in Everything

Add period to HTTPS logging endpoint schema Sep 16, 2025 · release notes

New period config key for HTTPS logging endpoints controls log finalization frequency.

Adds period field to HTTPS logging endpoint schema to control how frequently log files are finalized and sent (default 5 seconds, 0 resets to default).

1 detail in Everything

Next-Gen WAF: Test workspace alerts Sep 15, 2025 · release notes

Adds /rest/workspace-alerts/{id}/test endpoint to verify notification integrations.

Adds POST /rest/workspace-alerts/{id}/test endpoint to send a test notification for Next-Gen WAF workspace alerts
Verifies Slack, PagerDuty, email, and webhook integration reachability before production use

2 details in Everything

Adding the Domain Research API Sep 3, 2025 · release notes

New Domain Research API for programmatic domain search and availability checks.

Next-Gen WAF agent 4.69.0 Aug 14, 2025 · release notes

Next-Gen WAF agent 4.69.0 adds Debian 13 support and improved detections.

Adds x86_64 and arm64 support for Debian 13 (trixie)
Improved CMDEXE detection
Improved SQLI detection

3 details in Everything

Deceive attackers attempting account takeovers Aug 6, 2025 · release notes

Fastly Next-Gen WAF introduces Deception action and Invalid Login Response for ATO defense

Adds the Deception action to Edge WAF rules, enabling deception-type responses against login attempts
Supports the Invalid Login Response deception type to return a fake invalid credentials page when attackers are blocked

2 details in Everything

Next-Gen WAF: Account-Level Rules Aug 5, 2025 · release notes

Next-Gen WAF adds account-level rules API to manage WAF configs across multiple workspaces.

Next-Gen WAF Update Aug 5, 2025 · release notes

Fastly Next-Gen WAF adds programmatic API for account lists, analytics, reports, alerts, and custom signals.

account-level lists are now creatable via the New-Gen WAF API
Detailed timeseries metrics at account and workspace levels via API
Structured reports for signals and attacks accessible via API
Workspace alerts with full CRUD operations available via API
Custom signals create and manage support at account and workspace levels via API

5 details in Everything

Expanded security functionality in the Fastly control panel Aug 5, 2025 · release notes

Fastly control panel now supports Next-Gen WAF features (Advanced Rate Limiting, Dashboards) and Bot Management product visibility for Professional/Premier customers.

Next-Gen WAF: Workspace Signals Aug 5, 2025 · release notes

Next-Gen WAF introduces custom signal creation and management capabilities.

Enables Custom Signals allowing customers to create and manage custom detection signals at the account and workspace level.

1 detail in Everything

Added Fastly DDoS Protection Events API endpoint Jul 23, 2025 · release notes

Adds /rule_update API endpoint for real-time Fastly DDoS protection rule actions

DDoS Protection GET APIs access update in the documentation Jul 23, 2025 · release notes

DDoS Protection GET API endpoints now accessible to any user role with service access

DDoS Protection API Parameter Validation Relaxed Jul 23, 2025 · release notes

Relaxed validation on ddos_protection_action and ddos_protection_traffic_attribute parameters in Fastly DDoS Protection API.

Adds flexibility to events and event rules endpoints by relaxing validation on the ddos_protection_action parameter.
Relaxes validation of the ddos_protection_traffic_attribute parameter in the traffic stats endpoint.

2 details in Everything

New request search operator Jul 22, 2025 · release notes

Fastly adds the + operator to request search for AND-logic on multiple signal tags.

└──▷ TRY IT

Find requests triggering both command execution and path traversal detections simultaneously.

$ tag:CMDEXE +tag:TRAVERSAL

Adds + operator to the request search query syntax, allowing users to find requests containing multiple specific tags (e.g., tag:CMDEXE +tag:TRAVERSAL).
Enables precise filtering of WAF signals by requiring all specified tag conditions in a single search query.

2 details in Everything

Next-Gen WAF agent 4.68.0 Jul 16, 2025 · release notes

Next-Gen WAF agent 4.68.0 adds Windows registry key preservation and improved SQLI detection.

Improved SQLI detection

1 detail in Everything

Add services parameter to the GET /stats endpoint Jul 8, 2025 · release notes

GET /stats endpoint gains services parameter to filter historical stats by service.

DDoS Protection traffic percentage and enhanced rule statistics Jul 3, 2025 · release notes

Enhances DDoS Protection API with traffic_percentage in stats endpoint and include=traffic_stats for event rules.

Adds the traffic_percentage field to the traffic stats endpoint of the DDoS Protection API for visibility into attack patterns relative to overall traffic.

1 detail in Everything

Add allow_untrusted_root attribute for TLS certificate creation and update endpoints Jun 30, 2025 · release notes

Fastly adds allow_untrusted_root attribute to TLS certificate creation and update API endpoints

Add name parameter to the GET /resources/stores/kv endpoint Jun 23, 2025 · release notes

Fastly adds name parameter to GET /resources/stores/kv for filtering KV stores

Next-Gen WAF agent 4.67.0 Jun 12, 2025 · release notes

Next-Gen WAF agent 4.67.0 adds support for CentOS Stream 10, RHEL 10, and Alpine Linux 3.22 on x86_64 and arm64.

Next-Gen WAF for Java 2.8.1 Jun 11, 2025 · release notes

Fastly Next-Gen WAF for Java 2.8.1 adds ARM64 support for the shaded JAR.

Updated query parameters for Get Service Details Jun 4, 2025 · release notes

Adds filter[versions.active] query parameter to the Get Service Details endpoint.

Add log_processing_region for logging endpoints Jun 3, 2025 · release notes

Add log_processing_region parameter to Fastly logging endpoints.

Next-Gen WAF request metrics updated Jun 2, 2025 · release notes

Next-Gen WAF metrics now aggregate Edge and Core WAF counts in Historical Stats API

Next-Gen WAF for HAProxy 1.5.1 May 23, 2025 · release notes

Next-Gen WAF for HAProxy adds RHEL10 platform support in v1.5.1

Next-Gen WAF for NGINX (Lua) 1.7.1 May 22, 2025 · release notes

Next-Gen WAF 1.7.1 adds rpc_address for Unix domain socket support in NGINX Lua module.

Added support for Unix domain socket connections via rpc_address.
Added defensive logic for rpc_address and rpc_port variables to prevent runtime errors.

2 details in Everything

Add new fields to Next-Gen WAF workspaces May 20, 2025 · release notes

Adds default_blocking_response_code, default_redirect_url, and client_ip_headers fields to Next-Gen WAF workspaces.

Adds the default_blocking_response_code field to Next-Gen WAF workspaces to control the HTTP response status code for blocked requests.
Adds the default_redirect_url field to Next-Gen WAF workspaces to specify a URL to redirect to when a request is blocked.
Adds the client_ip_headers option to Next-Gen WAF workspaces to configure which headers contain the client IP address.

3 details in Everything

Next-Gen WAF agent 4.66.0 May 14, 2025 · release notes

Next-Gen WAF agent 4.66.0 adds agent-autoupdate for Windows and improves SQLI/log4j detection.

Adds agent-autoupdate utility for Windows distributions
Improved LOG4J-JNDI detection
Improved SQLI detection

3 details in Everything

Next-Gen WAF for NGINX (Native) 1.3.2 May 12, 2025 · release notes

Fastly Next-Gen WAF for NGINX (Native) 1.3.2 improves inspection of GET requests with body.

New package options for the NGINX native module for the Next-Gen WAF May 6, 2025 · release notes

Adds NGINX native module package options for Next-Gen WAF with Stable, Mainline, Distro, and Plus variants.

Introduces nginx-module-fastly-nxs package compiled with Stable (even-numbered) NGINX Open Source releases
Introduces nginx-module-fastly-nxm package compiled with Mainline (odd-numbered) NGINX Open Source releases
Introduces nginx-module-fastly-nxd package for distribution-provided NGINX Open Source releases
Introduces nginx-module-fastly-nxp package compiled with NGINX Plus releases

4 details in Everything

└──▷ BREAKING ON UPGRADE

!Switching from nginx-module-sigsci packages to nginx-module-fastly packages on SELinux requires updating the SELinux policy

Prefer IPv6 option for Backends May 6, 2025 · release notes

Adds prefer_ipv6 option to backend configs to prioritize IPv6 during DNS lookups.

Next-Gen WAF for NGINX (Native) 1.3.1 May 6, 2025 · release notes

Adds NGWAF 1.3.1 support for Ubuntu 22.04 LTS (NGINX 1.18.0-6ubuntu14.6)

New Bot Signals: SUSPECTED-BOT.AI-CRAWLER, VERIFIED-BOT.AI-CRAWLER, SUSPECTED-BOT.AI-FETCHER, and VERIFIED-BOT.AI-FETCHER Apr 15, 2025 · release notes

Fastly adds four new Bot signals for identifying AI crawlers and fetchers

SUSPECTED-BOT.AI-CRAWLER signal now available to identify AI crawler bots.
VERIFIED-BOT.AI-CRAWLER signal now available to identify verified AI crawler bots.
SUSPECTED-BOT.AI-FETCHER signal now available to identify AI fetcher bots.
VERIFIED-BOT.AI-FETCHER signal now available to identify verified AI fetcher bots.

4 details in Everything

Observability Timeseries for Logs Apr 10, 2025 · release notes

Fastly adds a new Observability Timeseries API for Logs.

Adding DDoS Protection Events API Apr 7, 2025 · release notes

Fastly introduces the DDoS Protection Events API to query attack insights, rules, and traffic statistics.

Go SDK 1.4.0 Apr 7, 2025 · release notes

Fastly Go SDK 1.4.0 adds configurable response polling, HTTP cache API, Plaintext function, and ACL hostcalls.

Adds fsthttp response polling frequency configuration
Adds http cache API support to fsthttp
Adds Plaintext toplevel convenience function in secretstore package
Adds ACL hostcalls support

4 details in Everything

Next-Gen WAF agent 4.64.0 Mar 13, 2025 · release notes

Next-Gen WAF agent 4.64.0 adds AWS Lambda support for editing application response headers and improves several detection engines

Improves CMDEXE detection capabilities in the Next-Gen WAF agent.
Improves SQLI detection capabilities in the Next-Gen WAF agent.
Improves TRAVERSAL detection capabilities in the Next-Gen WAF agent.
Improves XSS detection capabilities in the Next-Gen WAF agent.

4 details in Everything

JavaScript SDK 3.33.0 Mar 12, 2025 · release notes

JavaScript SDK 3.33.0 adds EventTarget, FormData, and fetch body parsing support.

Adds EventTarget support via PR #1145
Adds FormData support in Request and Response objects

2 details in Everything

Next-Gen WAF for Java 2.8.0 Mar 6, 2025 · release notes

Fastly Next-Gen WAF for Java 2.8.0 adds threadPrefix config option

Adds threadPrefix configuration option for custom thread prefixes

1 detail in Everything

Increased pagination limit and service filter Mar 4, 2025 · release notes

Adds service_id filter to service-usage-metrics API and increases pagination limits

GET /http/metrics/service-usage-metrics now supports the service_id query parameter for targeted filtering
Increased pagination limits for API endpoints

2 details in Everything

Add NGWAF metrics Feb 26, 2025 · release notes

NGWAF historical stats now expose per-request lifecycle metrics via the API

Adds ngwaf_requests_total_count to Historical Stats responses for NGWAF traffic volume

1 detail in Everything

Added not_before and not_after filters to GET bulk tls certs endpoint Feb 25, 2025 · release notes

Fastly's GET /tls/bulk/certificates endpoint gains not_before and not_after filters

JavaScript SDK 3.32.0 Feb 20, 2025 · release notes

JavaScript SDK 3.32.0 adds Acl support.

Adds Acl support to the JavaScript SDK

1 detail in Everything

Next-Gen WAF agent 4.63.0 Feb 20, 2025 · release notes

Next-Gen WAF agent 4.63.0 adds Alpine 3.21 support and new reverse proxy buffer config options.

read-buffer-size and write-buffer-size reverse proxy configuration options
Added support for Alpine Linux 3.21

2 details in Everything

Improved detection of signals Feb 19, 2025 · release notes

Improved detection coverage for CMDEXE, SQLI, and TRAVERSAL signals in Fastly.

Updates CMDEXE signal detection logic to improve identification accuracy.
Updates SQLI signal detection logic to improve identification accuracy.
Updates TRAVERSAL signal detection logic to improve identification accuracy.

3 details in Everything

Support for if-generation-match when deleting KV Store items Feb 11, 2025 · release notes

Fastly KV Store supports conditional delete via if-generation-match header.

Adds support for the if-generation-match HTTP header when deleting items from a KV Store
Returns 412 Precondition Failed if the item's generation does not match the supplied value

2 details in Everything

New Microsoft Teams integration Feb 4, 2025 · release notes

Fastly adds support for Microsoft Teams Workflows, replacing retired Office 365 connectors for WAF alerting.

Fastly Terraform Provider 5.16.0 Jan 31, 2025 · release notes

Fastly Terraform Provider 5.16.0 adds Observability custom dashboards and domain v1 functionality

Adds support for dashboard resource to create Fastly Observability custom dashboards via Terraform
Adds support for domains resource with v1 functionality, allowing management of legacy domain configurations

2 details in Everything

JavaScript SDK 3.30.0 Jan 31, 2025 · release notes

Fastly JavaScript SDK 3.30.0 introduces programmatic HTTP caching capabilities.

Next-Gen WAF for Apache 1.10.0 Jan 31, 2025 · release notes

Next-Gen WAF for Apache adds platform support for CentOS Stream 10 and Ubuntu 26.04.

Added support for modifying application response headers
Added support for CentOS Stream 10 (RHEL10)

2 details in Everything

Add compute cache operations and status 530 metrics Jan 28, 2025 · release notes

Fastly adds Compute cache ops and status 530 metrics to Real-time Analytics and Historical Stats

JavaScript SDK 3.29.0 Jan 23, 2025 · release notes

Fastly JavaScript SDK 3.29.0 adds fetch Blob support, runtime build --env flag

Adds --env CLI option to the runtime build process for environment injection.

1 detail in Everything

Next-Gen WAF for NGINX (Lua) 1.7.0 Jan 22, 2025 · release notes

Fastly Next-Gen WAF for NGINX adds AmazonLinux 2023 and CentOS 9/10 platform support.

Added support for AmazonLinux 2023 (2026-04-21)
Added support for CentOS9 and CentOS10 (EL9-10) (2026-04-28)
Added support for Ubuntu 26.04 (Resolute) (2026-04-28)
Added support for Debian 13 (Trixie) (2026-04-28)

4 details in Everything

Next-Gen WAF for HAProxy 1.5.0 Jan 22, 2025 · release notes

Next-Gen WAF for HAProxy 1.5.0 adds the ability to edit response headers received from the agent.

Next-Gen WAF for NGINX (Native) 1.2.0 Jan 22, 2025 · release notes

Fastly Next-Gen WAF for NGINX 1.2.0 adds response header editing and support for NGINX Plus R34

Added ability to edit response headers received from the agent
Added support for NGINX Plus Release 34 (R34) on Alpine Linux 3.13 - 3.20, Amazon Linux 2 LTS, Amazon Linux 2023, Centos 7 - 9, Debian 10, 11 & 12, Ubuntu 18.04 LTS - 24.04 LTS

2 details in Everything

Next-Gen WAF for Node.js 2.3.0 Jan 16, 2025 · release notes

Fastly Next-Gen WAF for Node.js 2.3.0 adds support for modifying application response headers

Next-Gen WAF for IIS 3.5.0 Jan 13, 2025 · release notes

Fastly Next-Gen WAF for IIS 3.5.0 adds support for modifying application response headers.

Next-Gen WAF agent 4.62.0 Jan 9, 2025 · release notes

Next-Gen WAF agent 4.62.0 improves SQLI detection and updates Envoy base.

Improved SQLI detection
Updated Envoy module

2 details in Everything

refactor response and cursor for service usage Dec 16, 2024 · release notes

API response refactoring for service usage details and removal of ID restrictions.

Adds usage_type and unit fields to the usage element detail in service usage API responses
Removes restriction on product_id and usage_type_name parameters in service usage queries

2 details in Everything

Next-Gen WAF agent 4.61.0 Dec 12, 2024 · release notes

Next-Gen WAF agent 4.61.0 adds support for editing application response headers.

Add Request Collapsing Metrics Dec 11, 2024 · release notes

Real-time and historical analytics responses now include request collapsing metrics.

Adds request_collapse_usable_count to real-time analytics and Historical Stats responses
Adds request_collapse_unusable_count to real-time analytics and Historical Stats responses

2 details in Everything

JavaScript SDK 3.28.0 Dec 9, 2024 · release notes

JavaScript SDK 3.28.0 adds configureConsole for log control and updates StarlingMonkey.

Adds the configureConsole function for configuring log prefixing and stderr output

1 detail in Everything

Add AI Accelerator metrics Dec 9, 2024 · release notes

Real-time analytics and Historical Stats responses now include new AI Accelerator metrics (e.g., aia_requests, aia_status_2xx).

Add support for Object Storage and AI Accelerator products Dec 6, 2024 · release notes

Product enablement API now supports Object Storage (object_storage) and AI Accelerator (ai_accelerator).

Adds object_storage to the product enablement API for enabling Fastly's Object Storage product
Adds ai_accelerator to the product enablement API for enabling Fastly's AI Accelerator product

2 details in Everything

CLI v10.17.0 Nov 20, 2024 · release notes

Fastly CLI v10.17.0 adds upper bound constraint support for Rust versions in Compute builds

Next-Gen WAF for Go 1.14.0 Nov 18, 2024 · release notes

Version 1.14.0 adds the ability for the Next-Gen WAF Go agent to edit application response headers.

New allow_edit_response_headers capability enables the Fastly agent to modify outgoing application response headers

1 detail in Everything

Next-Gen WAF agent 4.60.0 Nov 14, 2024 · release notes

Fastly Next-Gen WAF agent 4.60.0 improves detection engines and updates GeoIP data.

Improved CMDEXE detection
Improved LOG4J-JNDI detection
Improved SQLI detection
Improved TRAVERSAL detection

4 details in Everything

Fastly Terraform Provider 5.15.0 Nov 12, 2024 · release notes

Fastly Terraform Provider adds Grafana Cloud Logs and Log Explorer support

Adds product_enablement support for the log_explorer_insights product to enable Log Explorer & Insights

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!Removes product_enablement support for the ngwaf product; configurations referencing this product will fail

CLI v10.16.0 Nov 12, 2024 · release notes

Fastly CLI v10.16.0 adds Grafana Cloud Logs support, Log Explorer & Insights products, and token validity duration.

profile/token subcommand gains a parameter to specify token validity duration
logging feature adds support for Grafana Cloud Logs integration

2 details in Everything

└──▷ BREAKING ON UPGRADE

!products removes NGWAF product support

Object Storage Access Keys Management Nov 12, 2024 · release notes

Adds documentation for Object Storage Access Key Management APIs

JavaScript SDK 3.27.0 Nov 7, 2024 · release notes

The Fastly JavaScript SDK 3.27.0 promotes the AOT compilation feature from experimental to stable.

Next-Gen WAF: Added agent timeseries endpoint Nov 7, 2024 · release notes

Next-Gen WAF adds /agent-timeseries endpoint for per-agent metrics including latency and CPU.

Adds the Retrieve agent timeseries metrics endpoint to the Next-Gen WAF, exposing metrics such as requests_total, agent_decision_time_50th, agent_decision_time_95th, agent_decision_time_99th, host_cpu, and host_agent_cpu for a specific agent in a workspace.

1 detail in Everything

Observability Log Explorer Oct 28, 2024 · release notes

Fastly introduces the new Observability Log Explorer API.

Adds the new Observability Log Explorer API.

1 detail in Everything

Observability Log Insights Oct 28, 2024 · release notes

Fastly introduces the Observability Log Insights API for programmatic access to log data.

Adds the Observability Log Insights API endpoint.

1 detail in Everything

Grafana Cloud Logs logging endpoint Oct 28, 2024 · release notes

Fastly adds Grafana Cloud Logs as a supported logging endpoint.

Add DDoS protection metrics Oct 22, 2024 · release notes

Adds ddos_protection_requests_* metrics to Fastly analytics and historical stats API responses

JavaScript SDK 3.25.0 Oct 22, 2024 · release notes

Adds Backend support to Request and Response objects for dynamic backend handling.

Request and Response objects now include a backend property returning a Backend instance

1 detail in Everything

Added support for log_explorer_insights to Product Enablement Oct 22, 2024 · release notes

Adds log_explorer_insights support to the Product Enablement API

Add support for ddos_protection to Enablement Oct 21, 2024 · release notes

Enablement API adds ddos_protection support and a mode parameter

Adds the mode parameter to the configuration endpoint's request body to control DDoS Protection settings.
Adds ddos_protection as a supported product within the product enablement API.

2 details in Everything

JavaScript SDK 3.24.0 Oct 15, 2024 · release notes

Fastly JS SDK 3.24.0 adds setDefaultDynamicBackendConfig and dynamic backend defaults

Adds setDefaultDynamicBackendConfig with all backend configuration options.
Enables default enable allowDynamicBackends with better unsupported errors.
Supports backend.hostcalls property.

3 details in Everything

Next-Gen WAF for Java 2.6.0 Oct 3, 2024 · release notes

Adds rpcThreadCount config option to control thread pool size in Fastly NGWAF for Java 2.6.0.

Added rpcThreadCount configuration option for directly specifying the number of threads the module will use.

1 detail in Everything

CLI v10.15.0 Oct 3, 2024 · release notes

CLI v10.15.0 adds NGWAF product support via go-fastly 9.11.0 dependency

Fastly Terraform Provider 5.14.0 Oct 3, 2024 · release notes

Adds NGWAF product enablement support

New comment support in Lists Sep 30, 2024 · release notes

Fastly Lists now support # comments in IP and Country list entries

Adds # comment syntax to IP and Country lists for inline or standalone annotations.

1 detail in Everything

Next-Gen WAF on Compute for Edge WAF deployments Sep 30, 2024 · release notes

Next-Gen WAF now supports Edge WAF deployments for Rust-based Compute projects

Next-Gen WAF: Added agent keys endpoint Sep 26, 2024 · release notes

New Next-Gen WAF endpoint to list agent configuration keys for a workspace

Add usage-metrics endpoint Sep 26, 2024 · release notes

Fastly adds a new /usage-metrics API endpoint to query per-product usage details.

Introduces the GET /usage-metrics endpoint to retrieve usage details by product for customers.

1 detail in Everything

Lists now support comments (Beta) Sep 26, 2024 · release notes

Fastly expands its VCL configuration capabilities by allowing inline comments in Country and IP lists, improving maintainability for service configurations.

Country and IP lists now support the # character to include comments inline with list entries.

1 detail in Everything

Next-Gen WAF agent 4.58.2 Sep 24, 2024 · release notes

Enhanced traversal detection capabilities in Next-Gen WAF agent 4.58.2

Improved TRAVERSAL detection

1 detail in Everything

Added BOT-ANALYSIS signal Sep 20, 2024 · release notes

Fastly adds BOT-ANALYSIS signal to indicate requests analyzed for bots

JavaScript SDK 3.23.0 Sep 18, 2024 · release notes

JavaScript SDK 3.23.0 adds gRPC backend support to Fastly edge functions.

Adds grpc backend option to configure gRPC connectivity.

1 detail in Everything

Go SDK 1.3.3 Sep 12, 2024 · release notes

Go SDK 1.3.3 adds ErrTooManyRequests, ServerAddr/RemoteAddr fields, pluggable URL parser, backend keepalive/pooling/cert/grpc configs, and GetVCPUMilliseconds.

Adds ErrTooManyRequests error type to the kvstore package for handling rate-limiting events
Adds ServerAddr field to fsthttp.Request and RemoteAddr field to fsthttp.Response
Adds a pluggable URL parser in fsthttp allowing custom URL resolution logic
Adds TCP and HTTP keepalives configuration options for backends in fsthttp
Adds connection pooling configuration for backends in fsthttp

+3 more show less

Adds client certificate configuration support for backends in fsthttp
Adds a grpc flag option for backends in fsthttp
Adds GetVCPUMilliseconds function to the compute package

8 details in Everything

JavaScript SDK 3.22.0 Sep 11, 2024 · release notes

JavaScript SDK 3.22.0 adds vCPU ms hostcall support and exposes purgeSurrogateKey hostcall

Adds vcpu ms hostcall to enable virtual CPU time measurement in JavaScript actions.
Exposes the purgeSurrogateKey hostcall for direct cache invalidation via surrogate keys.

2 details in Everything

CLI v10.14.0 Sep 10, 2024 · release notes

Fastly CLI v10.14.0 adds TypeScript types and Fastly Bot Management product support

Adds TypeScript types to the @fastly/cli npm package for better developer experience.

1 detail in Everything

Add endpoints to activate and deactivate a version on staging Aug 30, 2024 · release notes

Adds API endpoints to activate and deactivate service versions in a staging environment.

Adds ability to activate a version in a staging environment via the service version activation API
Adds ability to deactivate a version in a staging environment via the service version activation API

2 details in Everything

New anomaly signal: INSECURE-AUTH Aug 28, 2024 · release notes

Fastly adds INSECURE-AUTH anomaly signal to detect insecure auth methods like JWT None algorithm

Added INSECURE-AUTH signal Aug 28, 2024 · release notes

Fastly adds INSECURE-AUTH signal to detect insecure authentication methods.

Next-Gen WAF configuration via the Fastly control panel Aug 28, 2024 · release notes

Fastly adds Next-Gen WAF Starter Package configuration to the control panel

Introduces dedicated instructions for configuring the new Next-Gen WAF starter package in documentation

1 detail in Everything

JavaScript SDK 3.21.0 Aug 27, 2024 · release notes

Fastly JavaScript SDK 3.21.0 adds public --debug-build flag and getSetCookie support.

Makes the ship --debug-build CLI flag public for controlling debug builds
Supports getSetCookie on the new StarlingMonkey headers implementation

2 details in Everything

Fastly Terraform Provider 5.13.0 Aug 26, 2024 · release notes

Fastly Terraform Provider 5.13.0 adds Bot Management enablement support

Adds product_enablement resource to enable Fastly Bot Management

1 detail in Everything

Add Next-Gen WAF product enablement and configuration endpoints Aug 22, 2024 · release notes

Adds API endpoints to enable and configure Next-Gen WAF (ngwaf) via the product enablement API.

Next-Gen WAF for HAProxy 1.4.2 Aug 19, 2024 · release notes

Next-Gen WAF for HAProxy 1.4.2 adds RHEL9 support

Added RHEL9 support

1 detail in Everything

Fastly Terraform Provider 5.12.0 Aug 15, 2024 · release notes

Adds mutual_authentication_id support for domain activation in Fastly Terraform Provider 5.12.0

Allows specifying mutual_authentication_id during domain activation creation via the tls_activation resource

1 detail in Everything

Add request_denied_get_head_body Aug 14, 2024 · release notes

Fastly adds request_denied_get_head_body metric to Real-time and Historical Stats

CLI v10.13.0 Aug 14, 2024 · release notes

Fastly CLI v10.13.0 adds TLS key path param, debug mode, timestamps, npm distribution, quiet JSON mode, and keepalive config.

Adds --key-path parameter to tls-custom private-key create command for specifying a private key file location
Adds debug-mode that wraps all network requests with verbose logging
Adds --timestamps flag to logtail command for timestamped output
Distributes CLI binaries via npm module for easier installation
Enables quiet mode automatically when the --json flag is supplied to suppress non-JSON output

+1 more show less

Supports configuring connection keepalive parameters for network requests

6 details in Everything

tls.client.cert_verify_result and tls.client.raw_certificate_b64 removal, regsub syntax addition, bug fixes Aug 14, 2024 · release notes

Fastly VCL adds numbered group references ({N}) for regsub pattern matching.

Adds support for regsub named/numbered groups using {N} syntax (values 1-19) in the pattern argument
Removes deprecated tls.client.cert_verify_result and tls.client.raw_certificate_b64, requiring use of tls.client.certificate.is_verified

2 details in Everything

└──▷ BREAKING ON UPGRADE

!tls.client.cert_verify_result has been removed; use tls.client.certificate.is_verified instead.
!tls.client.raw_certificate_b64 has been removed.

Adding Security API Aug 13, 2024 · release notes

Fastly adds a new Security API for managing workspaces, requests, events, redactions, tags, and rules.

Improved TRAVERSAL signal detection Aug 8, 2024 · release notes

Improved TRAVERSAL signal detection.

JavaScript SDK 3.20.0 Aug 8, 2024 · release notes

This release primarily updates tooling conventions and performance optimizations.

Next-Gen WAF for NGINX (Native) 1.1.9 Aug 6, 2024 · release notes

Next-Gen WAF for NGINX 1.1.9 adds support for newer NGINX versions (1.27.x) and platforms including Alpine Linux 3.21.

JavaScript SDK 3.19.0 Jul 29, 2024 · release notes

Adds FetchEvent.server object for server-side context and enables StarlingMonkey by default via a new CLI flag.

Adds FetchEvent.server object containing information about the server that received the incoming HTTP request from the client
Introduces --disable-starlingmonkey flag to disable the new default StarlingMonkey runtime

2 details in Everything

Adding Customer Addresses API Jul 26, 2024 · release notes

Fastly introduces the Customer Addresses API to manage tax and billing addresses separately.

Adds the Customer Addresses API for managing distinct tax and billing addresses

1 detail in Everything

Adding Invoices API Jul 25, 2024 · release notes

The new API allows customers to programmatically access billing invoices for current, past, and partial months, enabling automated reconciliation workflows.

TLS certificate blob Jul 24, 2024 · release notes

Fastly adds an API endpoint to retrieve the TLS certificate blob.

Added GET /account/:accountId/tls/certificate/blob endpoint that returns the raw TLS certificate blob.

1 detail in Everything

Next-Gen WAF for Node.js 2.2.4 Jul 23, 2024 · release notes

Fastly Next-Gen WAF Node.js v2.2.4 adds debug mode for diagnosing Koa middleware issues.

Adds debug configuration option to enable detailed logging for Koa application diagnosis

1 detail in Everything

UUID updates and additions Jul 1, 2024 · release notes

Adds uuid.version7 and uuid.is_version7 VCL functions for UUID v7 support.

Added uuid.version7 VCL function to generate UUID v7 identifiers
Added uuid.is_version7 VCL function to check if a string is a valid UUID v7

2 details in Everything

Protection from CVE-2024-5806 (Progress MOVEit Transfer Authentication Bypass Vulnerability) Jun 28, 2024 · release notes

New Templated Rules for CVE-2024-5806 in Next-Gen WAF

Add origin_offload metric Jun 27, 2024 · release notes

Fastly adds the origin_offload metric to Real-Time and Historical Stats responses.

origin_offload description updated for Domain Inspector APIs

1 detail in Everything

Change /content/edge_check response for slow or large content objects Jun 25, 2024 · release notes

New error-timeout-$pop and warning-too-large-$pop hash keys in /content/edge_check response for slow/large objects

The /content/edge_check endpoint now sets the hash key to error-timeout-$pop for any POPs that timed out, replacing the previous incorrect hash value.
The /content/edge_check endpoint now sets the hash key to warning-too-large-$pop when content is too large.

2 details in Everything

Go SDK 1.3.2 Jun 25, 2024 · release notes

Fastly Go SDK 1.3.2 adds Store.Has/GetBytes methods and adjustable fsthttp buffers.

Adds Store.Has() method to the configstore API to check for key existence without fetching values
Adds Store.GetBytes() method to retrieve raw byte slices from config store entries
Makes buffer sizes in fsthttp adaptable via new configuration options to optimize memory usage

3 details in Everything

Added all supported regions to the Datadog logging endpoint Jun 21, 2024 · release notes

Adds full regional support for Datadog logging endpoints

Added all supported regions to the Datadog logging endpoint

1 detail in Everything

CLI v10.12.1 Jun 10, 2024 · release notes

CLI v10.12.1 exposes SSO commands and flags

Exposes SSO commands and flags for CLI usage

1 detail in Everything

CLI v10.12.0 Jun 10, 2024 · release notes

Fastly CLI v10.12.0 introduces the ability to switch between active SSO accounts directly within the tool.

CLI v10.11.0 Jun 6, 2024 · release notes

CLI v10.11.0 adds --cert-path for TLS updates and init --from for service cloning

Adds --cert-path argument to tls-custom certificate update command to specify a local certificate file path
Enables cloning a Fastly Compute service by adding --from=serviceID to the init subcommand

2 details in Everything

Updated FAIL-OPEN signal Jun 6, 2024 · release notes

Edge deployment inspection timeout failures now trigger the FAIL-OPEN signal instead of blocking.

JavaScript SDK 3.15.0 Jun 3, 2024 · release notes

Adds clientCertificate with SecretStore fromBytes and default timeout configs for dynamic backends in Fastly JS SDK v3.15.0

Rust SDK 0.10.1 May 28, 2024 · release notes

Fastly Rust SDK 0.10.1 adds PendingTransaction for request collapsing and Request::get_server_ip_addr.

Adds PendingTransaction type to allow code to run while waiting for request collapsing
Adds TransactionLookupBuilder::execute_async to access the new PendingTransaction object
Adds Request::get_server_ip_addr method to retrieve the IP address on which the server received the HTTP request

3 details in Everything

Add integration_id parameter to list-definitions endpoint May 28, 2024 · release notes

Add integration_id parameter to the List Alert Definitions API endpoint

CLI v10.10.0 May 20, 2024 · release notes

Fastly CLI v10.10.0 adds cert path flag, observability alerts support, and project-id for GCS logging.

Adds --cert-path argument to tls-custom certificate create command to pass in a path to a certificate file
Adds project-id field to gcs logging setting configuration

2 details in Everything

JavaScript SDK 3.14.0 May 16, 2024 · release notes

JavaScript SDK adds fastly.sdkVersion property for runtime version introspection

Fastly Terraform Provider 5.10.0 May 16, 2024 · release notes

Fastly Terraform Provider 5.10.0 adds support for Image Optimizer default settings configuration

Adds image_optimizer_default_settings block to configure default image optimization behavior via the API

1 detail in Everything

VCL_RECV changes, x-compress-hint behavior change, bugfixes May 15, 2024 · release notes

Adds fastly.try_select_shield documentation and changes x-compress-hint behavior in VCL_RECV

Documentation is now available for fastly.try_select_shield
x-compress-hint header added on ESI requests only if not previously set, allowing VCL override

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Support for calling return (pipe) from vcl_recv has been removed; rollbacks to older service versions containing this call will be blocked

Add new Image Optimizer default settings API May 12, 2024 · release notes

Adds API endpoints to manage Image Optimizer default settings

Fastly Terraform Provider 5.9.0 May 9, 2024 · release notes

Fastly Terraform Provider 5.9.0 introduces percentage-based alerts via the new fastly_alerts resource and implements integration resources.

Adds fastly_alerts resource with support for percentage-based alerts

1 detail in Everything

Improved detection of signals May 9, 2024 · release notes

Fastly improves detection signals for CMDEXE and XSS attacks in WAF rules

Enhanced CMDEXE detection logic to better identify command execution attempts.
Enhanced XSS detection logic to better identify cross-site scripting attempts.

2 details in Everything

CLI v10.9.0 May 8, 2024 · release notes

Fastly CLI v10.9.0 adds location support for KV stores and flexible init/serve flags

kvstore create now accepts a location argument to specify where the Key-Value Store is deployed
compute init --from <SERVICE_ID> allows initializing a project from an existing Service ID instead of requiring a template URL
compute serve passes arbitrary arguments directly to Viceroy via -- separator

3 details in Everything

Added all above threshold alerts May 3, 2024 · release notes

Adds all above threshold evaluation strategy to Fastly Alerts.

Go SDK 1.3.1 Apr 25, 2024 · release notes

Fastly Go SDK adds Store.Delete method for KV store records

Added CHALLENGED signal Apr 22, 2024 · release notes

Fastly adds CHALLENGED signal to Next-Gen WAF for client challenges.

Fastly Terraform Provider 5.7.3 Apr 16, 2024 · release notes

Adds aggregate_alerts support for Fastly services in Terraform

Adds aggregate_alerts field to fastly_service resource to manage all service aggregate alerts

1 detail in Everything

JavaScript SDK 3.13.0 Apr 11, 2024 · release notes

Fastly JavaScript SDK 3.13.0 adds KVStore.prototype.delete method and updates SpiderMonkey engine

Adds KVStore.prototype.delete method to enable programmatic deletion of keys from a Fastly KV store.
Updates runtime to SpiderMonkey 124.0.2, introducing optimizations for arguments.length usage and Object.hasOwn.

2 details in Everything

Rust SDK 0.9.12 Apr 10, 2024 · release notes

Fastly Rust SDK 0.9.12 adds Secret::try_plaintext() for explicit decryption failure handling.

JavaScript SDK 3.12.0 Mar 28, 2024 · release notes

Fastly JavaScript SDK 3.12.0 adds ArrayBuffer.transfer, Object.groupBy, Date.parse expansion and more via SpiderMonkey 123

Adds Date.prototype.toWellFormed() to sanitize strings with lone surrogates into well-formed Unicode text.
Adds String.prototype.isWellFormed() to check if a string contains no lone surrogates.
Adds support for the RegExp v flag, enabling set notation and properties of strings in regular expressions.
Adds Object.groupBy() static method for grouping iterable elements by a computed key.
Adds Map.groupBy() static method for grouping map entries by a computed key.

+5 more show less

Adds Promise.withResolvers() to create a Promise along with its resolve and reject callbacks in the same scope.
Adds ArrayBuffer.prototype.transfer() to move memory ownership from one ArrayBuffer to another.
Adds ArrayBuffer.prototype.transferToFixedLength() to resize an ArrayBuffer's memory while transferring it.
Adds support for additional date formats in Date.parse(), including YYYY-MMM-DD (e.g., 19999-Jan-01), MMM-DD-YYYY, and non-ISO numeric dashed dates like "01-12-1999".
Adds support for milliseconds in non-ISO date formats parsed by Date.parse() (e.g., Jan 1 1970 10:00:00.050).

10 details in Everything

Added percentage-based alerts Mar 27, 2024 · release notes

Adds percentage-based alerting to Fastly Alerts API

Shielding VCL Rendering, New VCL Syntax Mar 26, 2024 · release notes

Fastly introduces simplified backend syntax with shielding and VCL 2024 features like tls.client.ja4

Adds simplified VCL backend definition syntax for backends with shield director to incorporate health checks and loop checks in a single line
Increases minimum supported VCL version across the network, enabling new variables such as tls.client.ja4
Adds time.interval_elapsed_ratio function available in the new VCL version

3 details in Everything

Added VERIFIED-BOT category signals Mar 26, 2024 · release notes

Adds VERIFIED-BOT.<category> signals to identify verified bot categories

Next-Gen WAF core command line utility Mar 25, 2024 · release notes

New ngwafctl CLI for Next-Gen WAF core diagnostics and support bundle generation

Introduces ngwafctl command-line utility to compile installation information for Next-Gen WAF core in Kubernetes or cloud environments.
Adds ability to perform basic troubleshooting and generate a TAR.GZ support bundle containing logs and deployment specification details.

2 details in Everything

Next-Gen WAF CLI (ngwafctl) 0.2.0 Mar 21, 2024 · release notes

ngwafctl 0.2.0 adds Istio telemetry check and --ngwaf-image flag

Added check for Istio Telemetry Accesslog to validate configuration
Added --ngwaf-image flag to specify the WAF container image name

2 details in Everything

Fastly Terraform Provider 5.7.1 Mar 15, 2024 · release notes

Adds project_id support to the Fastly Scalyr service resource in v5.7.1

Add h2o, vcl on compute, and all billing metrics Mar 15, 2024 · release notes

Fastly expands its billing and observability data surface by introducing metrics for DDoS mitigation actions, VCL on Compute request types (hit, miss, pass, error, synth, edge hit/miss), and comprehensive all-traffic status codes (1xx through 5xx).

Announcing gRPC proxy deployments Mar 14, 2024 · release notes

Next-Gen WAF agent now proxies gRPC traffic for protobuf message inspection

Improved detection of signals Mar 14, 2024 · release notes

Fastly improves detection for CMDEXE and SQLI signals.

CMDEXE signal detection improved
SQLI signal detection improved

2 details in Everything

JavaScript SDK 3.10.0 Mar 9, 2024 · release notes

Fastly JavaScript SDK 3.10.0 adds fastly:device module for user-agent based device detection

Added Browser Challenge Mar 7, 2024 · release notes

Fastly adds Browser Challenge capability to present interactive or non-interactive challenges to end users

Unified Fastly and Signal Sciences Login Experience Mar 4, 2024 · release notes

Unified Fastly and Signal Sciences login across control panels

JavaScript SDK 3.9.0 Mar 2, 2024 · release notes

Fastly JavaScript SDK 3.9.0 adds EdgeRateLimiter, PenaltyBox, RateCounter classes and Compute Core Cache support

Adds EdgeRateLimiter class for edge-rate-limiting using a RateCounter and a PenaltyBox instance
Adds PenaltyBox class for standalone entry management and status checks
Adds RateCounter class for standalone counting and rate calculations
Exposes JavaScript classes for Fastly's Compute Core Cache feature set

4 details in Everything

Fastly Terraform Provider 5.7.0 Feb 29, 2024 · release notes

Fastly Terraform Provider 5.7.0 adds fastly_alert resource and New Relic OTEL logging

Adds support for the logging_newrelicotlp block to send logs via New Relic's OpenTelemetry protocol
Introduces a new fastly_alert Terraform resource to manage Fastly alerts programmatically

2 details in Everything

Add tcp_keepalive fields to Backend API Feb 28, 2024 · release notes

Fastly adds tcp_keepalive_* fields to the Backend API for controlling TCP connection keepalives

tcp_keepalive_* properties are now available in the Backend API to configure TCP keepalives.

1 detail in Everything

Add name parameter to get-secret-stores endpoint Feb 27, 2024 · release notes

Adds name query parameter to the get-secret-stores API endpoint.

Go SDK 1.3.0 Feb 21, 2024 · release notes

Fastly Go SDK 1.3.0 adds support for edge rate limiting API

Rust SDK 0.9.11 Feb 21, 2024 · release notes

Fastly Rust SDK 0.9.11 adds JA4 extraction, ERL support, and async KV delete

Added Request::ja4 to get JA4 information from Request objects for fingerprinting clients.
Added Edge Rate Limiting (ERL) integration within Fastly Compute.
Added asynchronous versions of the KV store delete operation.

3 details in Everything

Added FAIL-OPEN signal Feb 13, 2024 · release notes

Adds FAIL-OPEN signal to indicate requests allowed due to WAF failure.

Added FAIL-OPEN signal: indicates a request was allowed because the WAF failed open.

1 detail in Everything

Add additional KV Store regions Feb 6, 2024 · release notes

Fastly adds ASIA and AUS regions for KV Store.

ASIA is now a selectable region for KV Store.
AUS is now a selectable region for KV Store.

2 details in Everything

Add imgopto_shield and imgopto_transforms fields to the Historical Stats API Feb 6, 2024 · release notes

New imgopto_shield and imgopto_transforms fields added to Fastly's Historical Stats API

Add Notification Service API Jan 17, 2024 · release notes

Fastly adds a dedicated API surface for notification management.

Programmatic control over notifications via new API endpoints

1 detail in Everything

CLI v10.8.0 Jan 17, 2024 · release notes

Fastly CLI v10.8.0 adds version subcommand to display installed CLI version.

Next-Gen WAF for .NET Core 1.4.0 Jan 15, 2024 · release notes

Fastly NGWAF .NET Core adds .NET 8 target framework and application response header modification

Adds support for modifying application response headers

1 detail in Everything

Updated CMDEXE signal detection Jan 11, 2024 · release notes

Improved detection capabilities for CMDEXE and SQLI signals.

Improved CMDEXE signal detection accuracy and coverage.
Improved SQLI signal detection accuracy and coverage.

2 details in Everything

JavaScript SDK 3.8.0 Jan 11, 2024 · release notes

JavaScript SDK 3.8.0 adds manual framing headers and backend name getter to Request/Response objects.

Adds manualFramingHeaders option to RequestInit and ResponseInit, and new methods Request.prototype.setManualFramingHeaders and Response.prototype.setManualFramingHeaders for controlling HTTP framing headers
Adds Request.prototype.backend getter to retrieve the name of the backend assigned to a request
Allows URL as input on fetch() in TypeScript typings to improve Node.js compatibility

3 details in Everything

Add Alerts API Jan 9, 2024 · release notes

Fastly adds Alerts API documentation

Update metrics parameter to remove limit of ten values Jan 8, 2024 · release notes

Fastly API removes the 10-value limit on the metrics parameter for Domain and Origin Metrics queries

metrics parameter in Domain Metrics and Origin Metrics endpoints no longer restricted to 10 values

1 detail in Everything

Site alert management Dec 14, 2023 · release notes

Site alert management now supports configurable attack thresholds via web interface and API for Next-Gen WAF.

Enables configuring site alert attack thresholds for all Next-Gen WAF customers via the web interface and API.
Adds local threshold counting capabilities to the Next-Gen WAF agent for immediate request flagging on Core and Cloud WAF deployments.

2 details in Everything

Attack thresholds can now be adjusted Dec 14, 2023 · release notes

Added support for dynamically adjusting attack thresholds and immediate attack blocking

Adds the ability to adjust attack thresholds or block attacks immediately

1 detail in Everything

New Anomaly Signal: OOB-DOMAIN Dec 12, 2023 · release notes

Adds the OOB-DOMAIN anomaly signal to detect out-of-band domains in client requests.

Added WAF Simulator Dec 11, 2023 · release notes

New WAF Simulator lets you pass sample requests/responses to test WAF processing logic before deployment.

WAF Simulator enables passing sample requests and responses to determine how the WAF would process a request.

1 detail in Everything

Announcing Next-Gen WAF Simulator Dec 11, 2023 · release notes

Fastly introduces the Next-Gen WAF Simulator for testing rule logic via the Rules menu.

CLI v10.6.3 Nov 15, 2023 · release notes

Fastly CLI v10.6.3 adds SSO support and an account endpoint override field for testing.

└──▷ TRY IT

Reset the CLI configuration to accommodate the v5 schema and new SSO fields.

$ fastly config --reset

Adds feat: support SSO (Single Sign-On) to enable Single Sign-On workflows
Adds a new account endpoint field in the internal configuration file to override SSO testing targets

2 details in Everything

Rust SDK 0.9.9 Nov 10, 2023 · release notes

Fastly Rust SDK 0.9.9 adds async KV methods and device detection lookup.

Adds fastly::kv::store::lookup asynchronous method for non-blocking Key-Value store reads.
Adds fastly::kv::store::insert asynchronous method for non-blocking Key-Value store writes.
Adds fastly::device_detection::lookup function to perform device detection lookups.

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The project renamed the Compute@Edge platform to Compute, which may affect documentation links or internal string comparisons.

Updated CMDEXE signal Nov 9, 2023 · release notes

Fastly updates WAF CMDEXE and SQLI signal detections.

Updated CMDEXE: improved detection for command injection attempts
Updated SQLI: improved detection for SQL injection attempts

2 details in Everything

CLI v10.6.0 Nov 3, 2023 · release notes

Fastly CLI v10.6.0 adds compute metadata subcommand, --debug-mode flag, and kv-store-entry list consistency flag.

Adds metadata subcommand under compute to retrieve compute package metadata
Adds --debug-mode flag to enable debug output
Adds --consistency flag to the kv-store-entry list command to control listing consistency

3 details in Everything

Add name parameter to list-config-stores endpoint Nov 1, 2023 · release notes

Adds name query parameter to list-config-stores API endpoint for filtering results.

GET /accounts/{account_id}/services/{service_id}/config_stores now accepts a name query parameter to filter config stores by name.

1 detail in Everything

CLI v10.5.1 Oct 25, 2023 · release notes

Fastly CLI v10.5.1 adds env_file support for manifests and improves secret redaction.

Adds env_file field to Fastly compute manifest files to specify environment variables for deployment

1 detail in Everything

CLI v10.5.0 Oct 18, 2023 · release notes

Fastly CLI v10.5.0 adds products command, --env flag, TinyGo starter kit support, and file-based KV store items.

Adds the products subcommand for product enablement management
Adds the --env flag to CLI commands for specifying environment files
Supports a file field inside [setup.kv_stores.<T>.items] in fastly.toml to use file content as KV store item values
Adds Fastly TinyGo Compute Starter Kit support in the internal config (version 4)
Enables guest profiler under Viceroy for compute/serve

+1 more show less

Allows specifying a project directory to build via compute/build

6 details in Everything

JavaScript SDK 3.7.0 Oct 14, 2023 · release notes

Fastly JS SDK 3.7.0 adds Backend class methods for backend discovery and health checks

Adds Backend.exists(name) to check if a named backend is configured
Adds Backend.fromName(name) to retrieve a Backend instance by name
Adds Backend.health(name) to return the current health status of a backend
Adds Backend.prototype.toName() to get the name string from a Backend instance

4 details in Everything

Added OOB-DOMAIN signal Oct 11, 2023 · release notes

Fastly adds OOB-DOMAIN signal to detect external domain interactions for vulnerability identification

New rule condition operators available Sep 27, 2023 · release notes

Fastly adds >= and <= operators for rule condition comparisons

Adds >= (greater than or equal to) operator to rule conditions
Adds <= (less than or equal to) operator to rule conditions

2 details in Everything

JavaScript SDK 3.6.0 Sep 22, 2023 · release notes

Adds ECDSA key support to SubtleCrypto sign and verify in JavaScript SDK 3.6.0

Fastly Terraform Provider 5.5.0 Sep 19, 2023 · release notes

Fastly Terraform Provider 5.5.0 adds share_key support for backends and the rate_limiter resource

Adds share_key attribute to backend resources

1 detail in Everything

JavaScript SDK 3.5.0 Sep 19, 2023 · release notes

Adds fastly WinterCG Runtime Key to target the JavaScript runtime for Fastly Compute

Rust SDK 0.9.8 Sep 15, 2023 · release notes

Fastly Rust SDK 0.9.8 adds gRPC backend flag and non-UTF-8 TLS metadata accessors

Adds a flag to indicate that gRPC support is required for a dynamic backend
Adds _bytes variants of methods to get client request TLS metadata, such as Request::get_tls_raw_client_certificate_bytes, so that non-UTF-8 metadata can be processed without panics
Adds accessors for a fingerprint of the client request's original headers

3 details in Everything

Added CHALLENGE-INVALID, CHALLENGE-TOKEN-INVALID, and VERIFIED-BOT signals Sep 13, 2023 · release notes

Fastly adds CHALLENGE-INVALID, CHALLENGE-TOKEN-INVALID, and VERIFIED-BOT bot signals for enhanced request visibility.

Added CHALLENGE-INVALID signal to indicate a request that included a valid bot challenge token
Added CHALLENGE-TOKEN-INVALID signal to indicate a request that did not include a valid bot challenge token
Added VERIFIED-BOT signal to indicate that a bot has been validated to be what it represents itself to be

3 details in Everything

JavaScript SDK 3.4.0 Sep 13, 2023 · release notes

Adds ECDSA JWK key import via crypto.subtle.importKey in JavaScript SDK 3.4.0

Fastly Terraform Provider 5.4.0 Sep 1, 2023 · release notes

Fastly Terraform Provider 5.4.0 enables infrastructure-as-code management of secret stores.

CLI v10.4.0 Aug 31, 2023 · release notes

Fastly CLI v10.4.0 adds native Go Wasm build support and New Relic OTLP logging

Adds GOARCH=wasm and GOOS=wasip1 environment variables to scripts.env_vars in fastly.toml to enable building Compute@Edge projects with Go 1.21+ instead of TinyGo.
Adds support for interacting with the New Relic OTLP logging endpoint via the CLI.

2 details in Everything

CLI v10.3.0 Aug 16, 2023 · release notes

Fastly CLI v10.3.0 adds post_init hook to init flow and pagination support for kvstores and secrets.

Adds post_init hook support in the compute/init command via GitHub #997
Enables pagination for kvstores/list command via GitHub #988
Adds JSON output format and pagination to secretstore commands via GitHub #991

3 details in Everything

Go SDK 0.2.0 Aug 11, 2023 · release notes

Fastly Go SDK adds Go 1.21 WASI support

Adds support for Go 1.21 WASI

1 detail in Everything

JavaScript SDK 3.2.0 Aug 10, 2023 · release notes

SDK 3.2.0 updates SpiderMonkey to version 115 and reduces memory usage by caching client getters.

Add bot challenge metrics Aug 9, 2023 · release notes

Adds bot challenge metrics for monitoring bot verification outcomes

Adds bot_challenge_starts metric to track initiation of bot challenges.
Adds bot_challenge_complete_tokens_passed metric for successfully verified tokens.
Adds bot_challenge_complete_tokens_failed metric for rejected tokens.
Adds bot_challenge_complete_tokens_checked metric for total checked tokens.
Adds bot_challenge_complete_tokens_disabled metric for disabled token checks.

+4 more show less

Adds bot_challenges_issued metric for total challenges issued.
Adds bot_challenges_succeeded metric for succeeded challenge outcomes.
Adds bot_challenges_failed metric for failed challenge outcomes.
Adds bot_challenge_complete_tokens_issued metric for issued verification tokens.

9 details in Everything

Shielding VCL Rendering Aug 4, 2023 · release notes

Shielding backends now use the shield director type instead of full backend definitions.

Fastly Terraform Provider 5.3.0 Aug 4, 2023 · release notes

Fastly Terraform Provider 5.3.0 adds fastly_configstores and fastly_kvstores data sources

Adds fastly_configstores data source to retrieve configuration stores
Adds fastly_kvstores data source to retrieve key-value stores

2 details in Everything

Go SDK 0.1.7 Aug 4, 2023 · release notes

Go SDK 0.1.7 adds ResponseWriter.Append, SecretFromBytes, HandoffWebsocket, backend query API, and Viceroy testing support

Adds ResponseWriter.Append method to allow appending data to responses
Adds SecretFromBytes function to the secretstore package for secret handling
Adds support for HandoffWebsocket and HandoffFanout hostcalls in the exp/handoff package
Adds support for backend query API via the backend package
Adds support for testing edge services with Viceroy using go test

5 details in Everything

Rust SDK 0.9.6 Aug 3, 2023 · release notes

Rust SDK 0.9.6 adds mTLS for dynamic backends and new request handle API

Adds support for mTLS / client certificates in dynamic backend definitions
Adds Request::make_request_handle method
Adds config-store-specific raw functions in fastly-sys

3 details in Everything

Rule builder supports new operator Aug 2, 2023 · release notes

Fastly's rule builder adds Less than or equal to operator

Add share_key to backends Jul 31, 2023 · release notes

Adds share_key property to backends for shared health checks

Adds the share_key field to backend configurations so multiple backends can share a single health check.
Enables efficient health checking by grouping backends under one share_key identifier.

2 details in Everything

CLI v10.2.4 Jul 28, 2023 · release notes

CLI v10.2.4 adds --service-name flag to deploy and removes broken decompression check.

Adds --service-name argument to fastly compute deploy for publishing to a non-manifest-specified service
Removes the broken decompression bomb check in fastly compute validate

2 details in Everything

Add New Relic OTLP logging endpoint Jul 28, 2023 · release notes

Fastly adds New Relic OTLP logging endpoint support

Go SDK 0.1.6 Jul 13, 2023 · release notes

Adds Simple Cache API to the Fastly Go SDK

Adds Simple Cache API to the Go SDK

1 detail in Everything

Rust SDK 0.9.5 Jul 12, 2023 · release notes

Rust SDK 0.9.5 adds Compute Simple Cache API and Secret::from_bytes method.

Adds fastly::cache::simple module exposing the Compute Simple Cache API
Adds fastly::Secret::from_bytes() to create unencrypted Secrets from bytes at runtime

2 details in Everything

JavaScript SDK 3.1.0 Jul 12, 2023 · release notes

Fastly JavaScript SDK 3.1.0 introduces configuration for Dynamic Backend connection management and deprecates SimpleCache.set in favor of getOrSet.

Adds the ability to disable connection-pooling behavior for Dynamic Backends
Deprecate SimpleCache.set and recommend SimpleCache.getOrSet as the alternative

2 details in Everything

JavaScript SDK 3.0.0 Jul 8, 2023 · release notes

JavaScript SDK 3.0 introduces TLS client metadata fields and renames cache purge API

└──▷ USE IT

Purge a cached object from the global cache rather than just the local POP.

code

SimpleCache.purge(path, { scope: "global" });

Adds event.client.tlsCipherOpensslName, event.client.tlsClientCertificate, event.client.tlsClientHello, event.client.tlsJA3MD5, and event.client.tlsProtocol fields to access TLS handshake details for the incoming request
Renames SimpleCache.delete to SimpleCache.purge and introduces a second argument for purge scope options

2 details in Everything

└──▷ BREAKING ON UPGRADE

!SimpleCache.delete is renamed to SimpleCache.purge; existing calls must update the method name and supply an optional second parameter for scope.

Next-Gen WAF for Go 1.13.0 Jul 6, 2023 · release notes

Fastly NGWAF Go module v1.13 adds a new configuration option for granular inspection.

JavaScript SDK 2.5.0 Jul 5, 2023 · release notes

JavaScript SDK 2.5.0 adds DOMException and HMAC support via SubtleCrypto

Adds DOMException class to the JavaScript runtime
Adds HMAC support within SubtleCrypto implementation

2 details in Everything

Next-Gen WAF for HAProxy 1.4.0 Jun 28, 2023 · release notes

Fastly releases Next-Gen WAF for HAProxy 1.4.0 with a new module configuration option.

Next-Gen WAF for Java 2.5.2 Jun 28, 2023 · release notes

Fastly Next-Gen WAF for Java 2.5.2 adds additional module configuration options for inspection.

Next-Gen WAF for Apache 1.9.2 Jun 27, 2023 · release notes

Next-Gen WAF for Apache adds support for Amazon Linux 2/2023, Alpine 3.19, Ubuntu 24.04 and additional inspection config.

Adds support for Amazon Linux 2 (x86_64 only)
Adds support for Alpine Linux 3.19 (x86_64 and arm64)
Adds support for Ubuntu 24.04 (x86_64 and arm64)
Adds additional module configuration for inspection

4 details in Everything

Go SDK 0.1.5 Jun 23, 2023 · release notes

Fastly Go SDK 0.1.5 adds RegisterDynamicBackend

Add support for RegisterDynamicBackend

1 detail in Everything

Fastly Terraform Provider 5.2.0 Jun 22, 2023 · release notes

Fastly Terraform Provider 5.2.0 adds file_max_bytes attribute to logging_s3 resource

CLI v10.2.1 Jun 19, 2023 · release notes

Fastly CLI v10.2.1 introduces a new configuration flag for S3 logging.

Adds --file-max-bytes flag to the logging/s3 command in CLI v10.2.1

1 detail in Everything

Fastly Terraform Provider 5.1.0 Jun 13, 2023 · release notes

Fastly Terraform Provider 5.1.0 adds KV Store, mTLS, and Config Store resources

Adds fastly_kv_store resource to manage Fastly Key-Value Stores
Adds fastly_mutual_authentication resource to implement mTLS configurations
Adds fastly_config_store resource to manage configuration data stores

3 details in Everything

CLI v10.2.0 Jun 12, 2023 · release notes

CLI v10.2.0 adds Viceroy pinning support, --recreate flags for secret store, and --token env hints.

Adds Viceroy pinning support to local testing configurations
Adds --recreate and --recreate-must options to the secret store command
Enables environment variable hints for the --token flag

3 details in Everything

JavaScript SDK 2.2.0 Jun 8, 2023 · release notes

Fastly JavaScript SDK 2.2.0 adds SimpleCache.getOrSet method for atomic cache checks and writes.

JavaScript SDK 2.1.0 Jun 2, 2023 · release notes

Fastly JavaScript SDK 2.1.0 adds SimpleCache class for caching.

Implement a SimpleCache Class

1 detail in Everything

Go SDK 0.1.4 May 30, 2023 · release notes

Go SDK 0.1.4 adds Core Cache API, Purge API, and fixes Content-Length for empty requests.

Add Core Cache API introduces a new interface for interacting with Fastly's caching layer.
Add Purge API provides a new capability to purge cached content programmatically.
package level documentation for Secret Store and KV Store APIs enhances discoverability of existing secret management capabilities.

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Requests without a body now use Content-Length: 0 instead of Transfer-Encoding: chunked.

Rust SDK 0.9.4 May 30, 2023 · release notes

Fastly Rust SDK 0.9.4 adds Compute Core Cache API in fastly::core

Removes experimental status from Backend::builder and deprecates BackendExt trait usage

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!BackendExt::builder is deprecated in favor of the native Backend::builder function

Fastly Terraform Provider 5.0.0 May 22, 2023 · release notes

New fastly_package_hash data source and API integration for reliable package hashing in v5.0.0.

Adds the fastly_package_hash data source to generate consistent package hashes via the updated Package API files_hash property
Removes support for using filesha512 as a workaround for inconsistent hashing, requiring migration to the new data source

2 details in Everything

CLI v10.1.0 May 18, 2023 · release notes

Fastly CLI v10.1.0 adds hash-files subcommand for compute package hashing

CLI v10.0.0 May 16, 2023 · release notes

Fastly CLI v10.0.0 adds kv-store-entry bulk import and renames --key-name to --key

Adds bulk_import subcommand to the kv-store-entry command for importing multiple key-value pairs at once
Renames --key-name flag to --key on fastly kv-store-entry commands

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The --key-name flag is renamed to --key in the fastly kv-store-entry command; scripts using the old flag will fail.

Go SDK 0.1.3 May 15, 2023 · release notes

Fastly Go SDK 0.1.3 adds fsthttp.RequestLimits and renames objectstore to kvstore.

Adds fsthttp.RequestLimits struct for controlling request constraints in fsthttp client interactions
Renames the objectstore package to kvstore to standardize key-value store naming conventions

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The objectstore package is renamed to kvstore; imports must change from github.com/fastly/go-fastly/vX/objectstore to .../kvstore

Rust SDK 0.9.3 May 15, 2023 · release notes

Fastly Rust SDK 0.9.3 adds request ID retrieval and stabilizes IO handling for BodyHandle

Adds Request::get_client_request_id() to retrieve the identifier for the current client request
Stabilizes std::io::Write implementations for BodyHandle and StreamingBodyHandle, ensuring they no longer panic upon error

2 details in Everything

JavaScript SDK 1.12.0 May 11, 2023 · release notes

JavaScript SDK 1.12.0 introduces Fanout implementation.

Implements Fanout for the Fastly JavaScript SDK.

1 detail in Everything

Added KV Store's batch endpoint May 5, 2023 · release notes

Fastly adds documentation for the KV store /batch endpoint

Improved PRIVATEFILE signal detection May 3, 2023 · release notes

Improved PRIVATEFILE signal detection in Fastly WAF.

Expands the scope of PRIVATEFILE signal detections for broader coverage.

1 detail in Everything

Edge deployment now available for the Premier platform May 1, 2023 · release notes

Premier platform edge deployment now supports advanced rate limiting and Site Flagged IP signals.

Adds advanced rate limiting rules for Premier plan customers using edge deployment
Adds the Site Flagged IP signal available for use in all types of site rules

2 details in Everything

TLS Certificates in_use filter Apr 28, 2023 · release notes

Adds in_use filter to TLS Certificates API for filtering by activation status.

Adds in_use filter to TLS Certificates endpoint allowing users to retrieve only certificates with associated activations (true) or without (false).

1 detail in Everything

JavaScript SDK 1.11.1 Apr 26, 2023 · release notes

Fastly JavaScript SDK 1.11.1 extends edge JS capabilities with standard Web APIs for text handling.

Nearly full support for TextDecoder and TextEncoder.

1 detail in Everything

Next-Gen WAF for .NET Core 1.3.1 Apr 25, 2023 · release notes

Fastly's Next-Gen WAF for .NET Core 1.3.1 introduces a new configuration option allowing users to define custom content-types.

Next-Gen WAF for Apache 1.9.1 Apr 25, 2023 · release notes

Next-Gen WAF for Apache 1.9.1 allows overriding SigSciAgentHost and SigSciAgentPort in VirtualHost directives.

Adds SigSciAgentHost and SigSciAgentPort configuration keys that can now be overridden within VirtualHost directives

1 detail in Everything

JavaScript SDK 1.11.0 Apr 25, 2023 · release notes

JavaScript SDK v1.11.0 adds Response.json static method

JavaScript SDK 1.10.0 Apr 21, 2023 · release notes

Fastly JS SDK 1.10.0 adds MD5 to crypto.subtle and Response.redirect support

crypto.subtle.digest now supports the "MD5" algorithm identifier
Adds Response.redirect() static method and Response.prototype.redirected getter

2 details in Everything

CLI v9.0.0 Apr 19, 2023 · release notes

Fastly CLI v9.0.0 introduces kv-store command, Secret Store manifest support, and TypeScript Starter Kit

object-store command is renamed to kv-store
Adds Secret Store support under [setup] in fastly.toml
Adds TypeScript Starter Kit via feat(config)
Supports --json output for the service search subcommand

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The object-store command is renamed to kv-store
![setup.dictionaries] and [local_server.dictionaries] in fastly.toml are renamed to their config_stores equivalents, requiring an updated manifest_version

Next-Gen WAF for NGINX (Lua) 1.6.0 Apr 17, 2023 · release notes

Fastly NGWAF 1.6.0 adds configurable granular inspection and new OS support

Added new module configuration option for more granular inspection
Added support Debian 12 (Bookworm)
Added support for Ubuntu 24.04 (Noble)

3 details in Everything

JavaScript SDK 1.9.0 Apr 15, 2023 · release notes

Fastly JS SDK adds crypto.subtle.importKey, sign, and verify for RSASSA-PKCS1-v1 JSONWebKey support

Adds crypto.subtle.importKey to import a JSONWebKey using the RSASSA-PKCS1-v1_5 algorithm
Adds crypto.subtle.sign to sign data with a JSONWebKey using the RSASSA-PKCS1-v1_5 algorithm
Adds crypto.subtle.verify to verify signatures from a JSONWebKey using the RSASSA-PKCS1-v1_5 algorithm

3 details in Everything

JavaScript SDK 1.8.0 Apr 12, 2023 · release notes

JavaScript SDK adds high-resolution timing behind --enable-experimental-high-resolution-time-methods flag.

Custom response codes Apr 10, 2023 · release notes

Fastly custom response codes now support configurable default status and 301/302 redirects with target URLs.

Adds the ability to change the site default blocking response code from 406 to an alternative code
Adds support for 301 and 302 custom response codes with a configurable redirect URL

2 details in Everything

Expanded response code functionality Apr 10, 2023 · release notes

Fastly adds customization of the site default blocking response code and supports redirection with custom response codes.

site_default_blocking_response_code is now configurable to customize the HTTP status returned by the WAF for blocked requests.
Custom response codes can now include redirection logic, allowing blocked traffic to be routed to a different URL.

2 details in Everything

CLI v8.2.4 Apr 6, 2023 · release notes

Adds viceroy check forcing capability in Fastly Compute service operations.

Adds the ability to force a viceroy check when serving Compute services via CLI.

1 detail in Everything

Add files_hash property to Package metadata Apr 5, 2023 · release notes

Fastly Package API returns files_hash in metadata for content integrity verification.

Adds files_hash property to the Package metadata object returned by the Package API

1 detail in Everything

Add NGWAF and Compute Origin Inspector metrics Apr 3, 2023 · release notes

New NGWAF and Compute Origin Inspector metrics for origin request sums

Fastly Terraform Provider 4.2.0 Apr 1, 2023 · release notes

Fastly Terraform Provider 4.2.0 adds Rate Limiter API support

JavaScript SDK 1.6.0 Mar 28, 2023 · release notes

Fastly JavaScript SDK 1.6.0 adds the JS CryptoKey interface for cryptographic operations.

Add DDOS metrics Mar 24, 2023 · release notes

Adds six new DDoS action metrics for visibility into mitigation events

New ddos_action_limit_streams_connections, ddos_action_limit_streams_requests, ddos_action_tarpit_accept, ddos_action_tarpit, ddos_action_close, and ddos_action_blackhole metrics available for monitoring DDoS mitigation actions

1 detail in Everything

Rust SDK 0.9.2 Mar 23, 2023 · release notes

Documentation adjustments and dependency bumps with no new user-facing features.

CLI v8.1.0 Mar 17, 2023 · release notes

Fastly CLI v8.1.0 adds Config Store commands for managing configuration data.

Adds Config Store subcommands via the new config-store feature #829

1 detail in Everything

Fastly Terraform Provider 4.1.0 Mar 16, 2023 · release notes

Fastly Terraform Provider 4.1.0 adds support for the content attribute in fastly_service_compute

Advanced rate limiting user experience Mar 15, 2023 · release notes

Fastly adds Match type, renamed Threshold signal, and new ratelimited field to advanced rate limiting configuration.

Adds Match type field in the Add form with options Rule conditions, Other signal, and All requests to control which client requests are subject to rate limiting

1 detail in Everything

Updated Object Store's query parameters Mar 15, 2023 · release notes

Fastly Object Store adds new query parameters for location, force, prefix, metadata and TTL control

Improved detection of signals Mar 15, 2023 · release notes

Fastly improves detection accuracy for SQLI and XSS signals.

Improved detection of SQLI signals
Improved detection of XSS signals

2 details in Everything

TLS Subscription fail and retry state Mar 14, 2023 · release notes

Adds failed and retry states for TLS Subscriptions with bounded retry logic

TLS Subscription state now transitions to failed after 7 days past expiry or creation if issuance fails, stopping retries.
Allows setting a TLS Subscription's state to retry to manually restart certificate issuance attempts after resolving issues.

2 details in Everything

JavaScript SDK 1.5.0 Mar 10, 2023 · release notes

Fastly JavaScript SDK 1.5.0 adds support for unicode patterns via precompilation.

Fastly Terraform Provider 4.0.0 Mar 9, 2023 · release notes

Fastly Terraform Provider 4.0.0 enables keepalive_time for backends and removes unsupported auto_loadbalance.

Adds keepalive_time attribute support to the backend block in Fastly service resources
Removes auto_loadbalance from fastly_service_compute backend blocks as it was never supported there

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The auto_loadbalance attribute is removed from the backend block for fastly_service_compute resources.

Next-Gen WAF for Java 2.5.4 Mar 8, 2023 · release notes

Adds maxSize config option to Next-Gen WAF for Java

Added the maxSize configuration option

1 detail in Everything

CLI v8.0.0 Mar 8, 2023 · release notes

Fastly CLI v8.0.0 adds global --profile override for profile token and service availability checks on deploy

fastly profile token now accepts a positional argument instead of --name, enabling consistent usage with other profile subcommands.
The --profile flag is now respected by fastly profile token, allowing temporary profile switching during command execution.
fastly compute deploy now checks service availability before deployment.

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The --name flag is no longer supported for fastly profile token; use a positional argument instead (e.g., fastly profile token example).

CLI v7.0.1 Mar 2, 2023 · release notes

CLI v7.0.1 now displays the dictionary ID immediately after creation.

The fastly dict create command now outputs the newly created dictionary's ID.

1 detail in Everything

CLI v7.0.0 Feb 23, 2023 · release notes

Fastly CLI v7.0.0 adds service resource commands and new ignore file support

Switches compute serve --watch to use .fastlyignore instead of .gitignore or .ignore

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!The logging logentries subcommand has been removed due to third-party product deprecation.
!compute serve --watch no longer reads .gitignore, .ignore, or global git ignore configs; it now only consults .fastlyignore.

Fastly Terraform Provider 3.1.0 Feb 21, 2023 · release notes

Fastly Terraform Provider 3.1.0 adds support for HTTP/3 and product enablement APIs.

Adds feat(http3) to implement the HTTP/3 API for Fastly services.
Adds feat(product_enablement) to implement product enablement APIs.

2 details in Everything

CLI v6.0.0 Feb 7, 2023 · release notes

Fastly CLI v6.0.0 removes user environment validation and renames object-store subcommands

Removes user environment validation logic and the --skip-validation flag
Renames objectstore command to object-store and moves entry operations to object-store-entry
Renames dictionary-item subcommand to dictionary-entry

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The --skip-validation flag is removed.
!The objectstore command is renamed to object-store.
!The keys, get, and insert commands are no longer available on object-store; use object-store-entry instead.
!The dictionary-item subcommand is renamed to dictionary-entry.

Go SDK 0.1.2 Jan 30, 2023 · release notes

Fastly Go SDK 0.1.2 adds Object Store API, Secret Store API, and net/http adaptors.

fsthttp package gains support for the edgedict -> configstore rename
HTTP Request/Response field size limit is now configurable via a new setting
Adds Object Store API support
Adds Secret Store API support
Adds adaptor for net/http.RoundTripper enabling net/http.Client integration

+3 more show less

Adds adaptor for net/http.Handler
fsthttp.Error() helper for standard error responses
fsthttp.NotFound() helper for 404 responses

8 details in Everything

└──▷ BREAKING ON UPGRADE

!The edgedict package name is renamed to configstore, breaking imports that reference the old name.

Add Object Store metrics Jan 30, 2023 · release notes

Fastly adds object_store_class_a/b_operations metrics to monitor Object Store usage.

Added the Login Discovery templated rule Jan 26, 2023 · release notes

Fastly adds a Login Discovery templated rule to help identify login endpoints.

Rule builder supports new operator Jan 24, 2023 · release notes

Fastly Rule Builder adds Greater than or equal to operator

JavaScript SDK 1.3.0 Jan 24, 2023 · release notes

Fastly JS SDK adds SubtleCrypto.prototype.digest for browser-side hashing.

SubtleCrypto.prototype.digest method implemented in the JavaScript SDK.

1 detail in Everything

Update bandwidth description Jan 23, 2023 · release notes

Fastly updates bandwidth calculation to include new fanout metrics for deeper traffic analysis.

The bandwidth metric now includes four new fanout components: fanout_resp_header_bytes, fanout_resp_body_bytes, fanout_bereq_header_bytes, and fanout_bereq_body_bytes.

1 detail in Everything

CLI v5.0.0 Jan 19, 2023 · release notes

CLI v5.0.0 adds JSON output for object store commands and a --watch-dir flag for local dev

Adds --json flag to keys/list subcommand in the objectstore command to output key listings in JSON format
Adds --json flag to the get subcommand in the objectstore command to retrieve key values as JSON
Adds Object Store to the manifest generated by compute/deploy setup for linked services
Adds --watch-dir flag to the compute/serve subcommand to enable directory watching during local development

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The objectstore command's long flags for keys were renamed from --k and --v to --key and --value; the short flag -k was added as a replacement for the previous single-character variants.

Rust SDK 0.9.0 Jan 18, 2023 · release notes

Fastly Rust SDK 0.9.0 adds Secret Store module and dynamic backend connection reuse control.

Adds support for enabling or disabling reuse of connections for the experimental dynamic backend interface

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!Streaming bodies must now be explicitly finish()ed in order to be properly framed; the default behavior on drop for StreamingBody or StreamingBodyHandle now can yield an error to the recipient of the message
!Request::with_header() has been changed to have appending behavior rather than set behavior

JavaScript SDK 1.2.0 Jan 17, 2023 · release notes

Fastly JavaScript SDK 1.2.0 introduces Request.prototype.clone for request duplication.

Adds Request.prototype.clone method to allow duplicating request objects.

1 detail in Everything

JavaScript SDK 1.1.0 Jan 6, 2023 · release notes

Fastly JavaScript SDK 1.1.0 adds crypto.randomUUID support for generating unique identifiers in edge functions.

Adds crypto.randomUUID function to generate RFC 4122 compliant v4 UUIDs within the Fastly Edge Workers runtime.

1 detail in Everything

CLI v4.6.0 Jan 3, 2023 · release notes

CLI v4.6.0 introduces a new DevHub-based metadata acquisition path and dynamic snippet handling.

--dynamic flag now passes AllowActiveLocked when updating VCL snippets

1 detail in Everything

Agent management functionality (Beta) Dec 19, 2022 · release notes

Fastly adds beta agent auto-updates and HashiCorp Vault plugin for key rotation.

Adds an agent auto-update service that checks the Signal Sciences package downloads site for new versions and updates agents on Debian 8+, Red Hat CentOS 7+, or Ubuntu 18.04+ by default on the second Thursday of the month.
Adds the Signal Sciences plugin for HashiCorp Vault to store and rotate Agent Access Keys and Agent Secret Keys.

2 details in Everything

CLI v4.5.0 Dec 15, 2022 · release notes

Fastly CLI v4.5.0 adds TOML secret_store support and improves compute init experience

Adds support for secret_store section in TOML configuration files to define storage backends for sensitive data

1 detail in Everything

JavaScript SDK 0.7.0 Dec 10, 2022 · release notes

JavaScript SDK 0.7.0 adds compute runtime component build and restricts Node support to 16-18.

Restricts supported Node versions to 16, 17, and 18

1 detail in Everything

└──▷ BREAKING ON UPGRADE

!Node versions other than 16, 17, or 18 are no longer supported due to dependency compatibility.

Professional Plan Edge Deployment Updates Dec 9, 2022 · release notes

Professional Plan edge deployments gain custom signals, dashboards, lists, templated rules, and custom response codes

Adds Threshold functionality accessible in the Rules menu under Site Alerts for Professional plan edge deployments
Adds backend.health property to skip security processing when the edge security service is unhealthy

2 details in Everything

Improved Signals dashboard Dec 9, 2022 · release notes

Added a legend to the Signals dashboard graphs to improve observability for rate limiting.

JavaScript SDK 0.5.15 Dec 8, 2022 · release notes

Fastly JS SDK 0.5.15 adds allowDynamicBackends to fastly:experimental and upgrades SpiderMonkey engine

Adds allowDynamicBackends function to the fastly:experimental module for enabling dynamic backend configuration.
Upgrades runtime from SpiderMonkey 96 to SpiderMonkey 107, providing new JavaScript language features and performance improvements.

2 details in Everything

JavaScript SDK 0.5.14 Dec 7, 2022 · release notes

JavaScript SDK 0.5.14 updates header append logic for Set-Cookie compliance.

JavaScript SDK 0.5.12 Nov 30, 2022 · release notes

Fastly JS SDK 0.5.12 adds fastly:experimental module with includeBytes and enableDebugLogging.

Add Fanout and Status 406 metrics Nov 30, 2022 · release notes

Adds Fanout and Status 406 metrics for detailed traffic and connection monitoring.

status_406 metric to track Not Acceptable responses.
fanout_req_header_bytes metric added.
fanout_req_body_bytes metric added.
fanout_resp_header_bytes metric added.
fanout_resp_body_bytes metric added.

+5 more show less

fanout_bereq_header_bytes metric added.
fanout_bereq_body_bytes metric added.
fanout_beresp_header_bytes metric added.
fanout_beresp_body_bytes metric added.
fanout_conn_time_ms metric added.

10 details in Everything

JavaScript SDK 0.5.9 Nov 29, 2022 · release notes

JavaScript SDK 0.5.9 introduces fastly:cache-override module and exposes Fastly features via namespaced modules

add fastly:cache-override module enables cache control operations within the SDK.
add geo ip lookup function to fastly:geolocation adds geolocation lookup capability.
Adds Logger constructor to fastly:logger module for new logging instance creation.
expose fastly loggers via fastly:logger module allows access to logging functionality.
expose the fastly features via 'fastly:' namespaced modules provides a unified interface to SDK features.

5 details in Everything

CLI v4.4.0 Nov 29, 2022 · release notes

Fastly CLI v4.4.0 adds PrintLines to the text package for structured logging support

Add created_at fields to Secret Store API endpoint responses Nov 28, 2022 · release notes

Secret Store API now includes created_at fields on Secret and Store response objects

Adds created_at to the response object of a Secret in the Secret Store API
Adds created_at to the response object of a Store in the Secret Store API

2 details in Everything

JavaScript SDK 0.5.6 Nov 24, 2022 · release notes

Fastly JS SDK v0.5.6 adds support for standard timer functions.

Adds setTimeout, setInterval, clearTimeout, and clearInterval to the JavaScript SDK.

1 detail in Everything

JavaScript SDK 0.5.5 Nov 23, 2022 · release notes

JavaScript SDK 0.5.5 adds Request.prototype.setCacheKey and stream support in Response methods

Adds Request.prototype.setCacheKey method to configure request cache keys programmatically
Enables guest-provided streams for Response.json, Response.text, and Response.arrayBuffer methods

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Responds with a 500 Internal Server Error when an unhandled error occurs and no response has already been sent to the client

Fastly Terraform Provider 3.0.0 Nov 16, 2022 · release notes

Fastly Terraform Provider 3.0.0 adds Google account names to GCP logging endpoints

└──▷ BREAKING ON UPGRADE

!The deprecated ssl_hostname backend attribute has been removed; use ssl_cert_hostname or ssl_sni_hostname instead.

Add new Fanout publish API endpoint Nov 10, 2022 · release notes

Adds a new Fanout publish API endpoint to Fastly services.

New /fanout endpoint for publishing events via the API.

1 detail in Everything

October 2022 VCL release Nov 4, 2022 · release notes

Fastly October 2022 VCL release reorders init section for reliable API-generated ACL and dictionary usage

Changes the ordering of the init section so ACL and dictionary definitions always precede snippets, enabling safe reference to API-generated objects

1 detail in Everything

Add Config Store API Nov 2, 2022 · release notes

Adds documentation for the ConfigStore and ConfigStoreItem APIs to manage configuration data via the Fastly service.

Adds ConfigStore API resource representing a collection of configuration items.
Adds ConfigStoreItem API resource representing an individual key-value entry within a store.

2 details in Everything

Update bandwidth description Nov 1, 2022 · release notes

Fastly adds websocket metric support to bandwidth calculations

Bandwidth calculation now includes websocket_resp_header_bytes, websocket_resp_body_bytes, websocket_bereq_header_bytes, and websocket_bereq_body_bytes metrics.

1 detail in Everything

CLI v4.3.0 Oct 26, 2022 · release notes

Fastly CLI v4.3.0 adds --quiet flag and updates fiddle URL

Implements the new --quiet global flag to suppress non-essential output.
Changes the Fiddle web app URL from fiddle.fastly.dev to fiddle.fastlydemo.net.
Ensures help output no longer causes an exit code 1.

3 details in Everything

Add WebSocket and Object Store metrics Oct 24, 2022 · release notes

Adds eight new WebSocket and Object Store metrics to Fastly's monitoring data

Adds websocket_req_header_bytes metric to track request header volume for WebSocket connections.
Adds websocket_bereq_header_bytes, websocket_bereq_body_bytes, websocket_beresp_header_bytes, and websocket_beresp_body_bytes metrics to monitor backend request/response sizes for WebSockets.
Adds websocket_conn_time_ms metric to measure WebSocket connection time in milliseconds.

3 details in Everything

Rust SDK 0.8.8 Oct 18, 2022 · release notes

Rust SDK 0.8.8 adds mTLS cert access, websocket/fanout handoffs, and http::purge module

Added Request::get_tls_raw_client_certificate to return the client's mutual TLS certificate
Added Request::get_tls_client_cert_verify_result to return an error code if applicable
Added experimental Request::handoff_websocket interface to hand off a WebSocket request to a backend
Added experimental Request::handoff_fanout interface to pass a request to the Fanout GRIP proxy
Added http::purge module containing interfaces to purge surrogate keys

5 details in Everything

CLI v4.2.0 Oct 18, 2022 · release notes

CLI v4.2.0 adds Object Store API calls and raises Go toolchain limit

Removes upper limit on Go toolchain version for building the CLI

1 detail in Everything

Update datacenters endpoint with new region fields Oct 17, 2022 · release notes

Adds region, stats_region, and billing_region fields to the datacenters endpoint; removes x/y coordinates.

└──▷ BREAKING ON UPGRADE

!The x and y fields are no longer returned in the datacenters endpoint response.

Next-Gen WAF for NGINX (Lua) 1.5.1 Oct 17, 2022 · release notes

Adds support for Kong 3.0 and Ubuntu 22.04 (Jammy).

Added support for Kong 3.0
Added support for Ubuntu 22.04 (Jammy)

2 details in Everything

Add edge rate limiting to Professional Next-Gen WAF platform Oct 11, 2022 · release notes

Add edge rate limiting to Fastly Professional Next-Gen WAF

Add custom headers to healthchecks Oct 8, 2022 · release notes

Adds headers property to healthcheck model for custom probe headers

CLI v4.0.0 Oct 4, 2022 · release notes

CLI v4.0.0 adds compute hashsum command and GCS S3 logging enhancements

Adds compute hashsum subcommand to calculate hashes of Edge Compute packages.
Adds --account-name flag to the GCS logging endpoint configuration.
Supports additional S3 storage classes for object store configurations.

3 details in Everything

JavaScript SDK 0.5.4 Sep 28, 2022 · release notes

Fastly JS SDK v0.5.4 adds ConfigStore class and dynamic backend support via fastly.allowDynamicBackends

Adds the ConfigStore class as the new name for the previously named Dictionary class to store key-value pairs in Fastly services.
Adds fastly.allowDynamicBackends configuration setting to enable creation of new backend server definitions dynamically within JavaScript applications without service deployment.
Introduces the Backend class constructor allowing full control over TLS settings (e.g., sslMinVersion, sslMaxVersion) for dynamically created backends.

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The Dictionary class is deprecated; it will be fully removed in a future version, requiring migration to ConfigStore.

Edge WAF deployments now support custom client IP Sep 26, 2022 · release notes

Edge WAF deployments in version 1.5.0 add support for defining custom client IPs.

Add account_name support to GCP logging configurations Sep 23, 2022 · release notes

GCP logging configs now support account_name for secret-free setup

account_name property added to GCS, Google PubSub, and Google BigQuery logging configurations for secret-free configuration

1 detail in Everything

DATACENTER signal can now be used in rules Sep 19, 2022 · release notes

The DATACENTER signal is now available for use in Fastly VCL rules.

AWS Lambda Integration is now GA Sep 15, 2022 · release notes

Fastly Next-Gen WAF and Signal Sciences now support general availability for AWS Lambda integration.

Enables Fastly Next-Gen WAF to protect serverless and FaaS traffic via AWS Lambda
Makes the AWS Lambda integration generally available to all Signal Sciences and Fastly Next-Gen WAF customers

2 details in Everything

Improved detection of signals Sep 14, 2022 · release notes

Fastly improves detection for CMDEXE and SQLI signals.

CMDEXE signal detection improved
SQLI signal detection improved

2 details in Everything

Replace wildcard URL purge endpoint with new POST endpoint Sep 1, 2022 · release notes

Fastly replaces wildcard PURGE /* endpoint with POST /purge/{cached_url}

└──▷ BREAKING ON UPGRADE

!The existing PURGE /* single URL purge method is removed; use POST /purge/{cached_url} instead.

Enabling and disabling logging via the rule builder Aug 30, 2022 · release notes

New Request Logging menu in site and corp rule builder enables logging for matching rules without custom signals.

Adds a Request Logging menu to the site and corp rule builder UI to control whether matched requests are stored as logs
Sets Request Logging to None to disable log storage for a rule, while new rules have logging enabled by default

2 details in Everything

JavaScript SDK 0.5.0 Aug 30, 2022 · release notes

Fastly JS SDK 0.5.0 adds ObjectStore classes, btoa/atob globals, and multi-arg console logging

Adds ObjectStore and ObjectStoreEntry classes for interacting with Fastly Object-store globally consistent key-value storage
Adds native btoa and atob global functions for Base64 encoding/decoding
Improves console methods to support multiple arguments and better complex object logging

3 details in Everything

Updated DOUBLEENCODING signal Aug 29, 2022 · release notes

Fastly's DOUBLEENCING signal now inspects POST bodies for double-encoding.

DOUBLEENCODING signal now reports double encoding found within a request's POST body
Agent supports decoding and inspecting double-encoded payloads for the DOUBLEENCODING signal

2 details in Everything

Allow skipping billing address verification checks Aug 26, 2022 · release notes

Fastly adds skip_verification flag to skip billing address checks

Improved detection of CMDEXE signal Aug 24, 2022 · release notes

Improved detection of CMDEXE signal

Rust SDK 0.8.7 Aug 19, 2022 · release notes

Rust SDK 0.8.7 adds Compute Object Store interface, surrogate key purge API, H2 fingerprinting, and backend health checks.

Adds Backend::is_healthy() to the experimental module for checking backend status
Adds get_client_h2_fingerprint to Request and client_h2_fingerprint to RequestHandle to extract HTTP/2 fingerprints
Adds an interface to the Compute Object Store for storage operations
Adds interfaces to issue surrogate key purges for cache invalidation

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The Dictionary type is renamed to ConfigStore; code referencing the old name will no longer compile

Improved detection of signals Aug 17, 2022 · release notes

Fastly improves detection accuracy for CMDEXE and CODEINJECTION signals.

Improved CMDEXE signal detection.
Improved CODEINJECTION signal detection.

2 details in Everything

Exclusions for the new code-generated Rust API client Aug 2, 2022 · release notes

Adds x-fastly-preprocess-exclude exclusions to the code-generated Rust API client

Exclude TLS and Sudo API endpoints from code-generator Aug 2, 2022 · release notes

Fastly code-generator excludes TLS and Sudo endpoints via x-fastly-preprocess-exclude

Add Fanout metrics Aug 2, 2022 · release notes

Fastly exposes two new Fanout-related metrics for operational monitoring.

Adds fanout_send_publishes metric alongside fanout_recv_publishes to provide full visibility into Fanout publish activity.

1 detail in Everything

JavaScript SDK 0.4.0 Jul 28, 2022 · release notes

Fastly JavaScript SDK 0.4.0 adds DecompressionStream builtin support and improves regex performance.

Adds the DecompressionStream builtin to enable on-the-fly decompression in edge logic

1 detail in Everything

CLI v3.2.1 Jul 27, 2022 · release notes

Enhancement to CLI v3.2.1 improves debugging by logging executed subprocess commands when verbose mode is enabled.

CLI v3.2.0 Jul 27, 2022 · release notes

Fastly CLI v3.2.0 adds Compute@Edge TinyGo support and --json flag for the list command.

Adds TinyGo as a supported runtime for Compute@Edge applications

1 detail in Everything

Add new Automation Token API endpoints Jul 27, 2022 · release notes

New IAM Automation Token API endpoints added.

Rule builder supports new field Jul 22, 2022 · release notes

Fastly Rule Builder adds an IP Address (Connecting) field to distinguish client from connecting IP.

Add documentation for sudo endpoint Jul 20, 2022 · release notes

Fastly has published documentation for its sudo endpoint, making the details publicly accessible.

Add websocket metrics Jul 15, 2022 · release notes

Fastly adds websocket_req_body_bytes, websocket_resp_header_bytes, and websocket_resp_body_bytes metrics for WebSocket traffic visibility

Adds the websocket_req_body_bytes metric to track the size of incoming WebSocket request bodies.
Adds the websocket_resp_header_bytes metric to measure the size of outgoing WebSocket response headers.
Adds the websocket_resp_body_bytes metric to monitor the size of outgoing WebSocket response bodies.

3 details in Everything

Request logging added to the rule builder Jul 12, 2022 · release notes

Fastly adds request logging configuration to the rule builder

Adds Rules Request Logging feature to specify whether requests matching a rule should be logged

1 detail in Everything

Updated AWS-SSRF signal Jul 5, 2022 · release notes

Fastly updates AWS-SSRF signal to detect IPv6 IMDS server

Remove beta tags from the Origin Inspector and the Domain Inspector docs Jun 30, 2022 · release notes

Origin and Domain Inspector APIs are now generally available for all customers.

JavaScript SDK 0.3.0 Jun 29, 2022 · release notes

JavaScript SDK 0.3.0 adds CompressionStream support and removes several breaking CLI/console requirements

Adds CompressionStream builtin for handling data compression directly in compute code
Removes the requirement for a fastly.toml file when using the js-compute-runtimes CLI to compile WASM
Removes the --skip-pkg argument from the js-compute-runtime CLI (breaking change)
Removes the console.trace method from the runtime environment (breaking change)

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The --skip-pkg argument is removed from the js-compute-runtime CLI; scripts relying on this flag will fail to compile
!The console.trace method is no longer available in the runtime environment; code attempting to call it will throw an error

Fastly Terraform Provider 2.1.0 Jun 27, 2022 · release notes

Fastly Terraform Provider 2.1.0 introduces support for Service Authorizations, allowing infrastructure-as-code management of service access controls.

CLI v3.1.0 Jun 24, 2022 · release notes

Fastly CLI v3.1.0 adds the profile token command for managing authentication tokens

Rust SDK 0.8.6 Jun 22, 2022 · release notes

Fastly Rust SDK 0.8.6 adds experimental dynamic backend interface

Supports the Config Stores API, replacing the deprecated Dictionaries interface.

1 detail in Everything

Announcing the AWS Lambda Integration (Beta) Jun 22, 2022 · release notes

Fastly adds AWS Lambda integration for Next-Gen WAF protection of serverless traffic (Beta).

Adds AWS Lambda support to Fastly Next-Gen WAF capabilities to protect serverless and FaaS traffic.
Introduces a feature flag to enable the AWS Lambda integration for Signal Sciences and Fastly Next-Gen WAF customers.

2 details in Everything

Go SDK 0.1.0 Jun 11, 2022 · release notes

Fastly releases its first Go SDK version 0.1.0, enabling programmatic management of shield backend timeout settings.

Initial release of the Fastly Go SDK.

1 detail in Everything

Add get token by id endpoint Jun 6, 2022 · release notes

Adds GET /tokens/:id endpoint to retrieve a single Fastly token by ID.

Protection from CVE-2022-26134 (Unauthenticated RCE in Confluence) Jun 4, 2022 · release notes

New Templated Rule for CVE-2022-26134 in Signal Sciences console

Essential Plan Updates May 31, 2022 · release notes

Fastly Essential plan adds CVE signals and WAF traffic ramping via new APIs

Supports Common Vulnerabilities and Exposures (CVE) signals for Essential plan customers through the Signals menu or templated rules API.
Adds a percentage ramp up feature to control the amount of traffic flowing through the edge security service for the Next-Gen WAF.

2 details in Everything

CLI v3.0.0 May 30, 2022 · release notes

Fastly CLI v3.0.0 adds Viceroy inline-toml format support and scripts.post_build hook

scripts.post_build section supported in configuration files.
Viceroy inline-toml format and new contents field are now supported.

2 details in Everything

Add token ID to events May 24, 2022 · release notes

Fastly event logs now include token_id and support filtering by it.

event_logs endpoints now include the token_id field in returned events.
list_events endpoint adds a token_id parameter to filter results.

2 details in Everything

Add Lint VCL for Service endpoint May 7, 2022 · release notes

Adds /service/vcl/lint endpoint for validating VCL against a specific Fastly service configuration.

Rust SDK 0.8.5 May 3, 2022 · release notes

Fastly Rust SDK 0.8.5 adds get_headers(), JA3 MD5 access, and WebSocket upgrade interface

Request::get_headers() and Response::get_headers() methods return an iterator over all header values.
Request::get_tls_ja3_md5() method for getting the JA3 hash of the TLS ClientHello message.
Added experimental WebSocket upgrade interface.

3 details in Everything

User login can no longer be changed via API Apr 27, 2022 · release notes

Fastly updates user endpoint to ignore login parameter

└──▷ BREAKING ON UPGRADE

!Passing the login parameter to the update user API endpoint no longer changes the user's login.

Fastly Terraform Provider 1.1.3 Apr 25, 2022 · release notes

Fastly Terraform Provider 1.1.3 removes backend block requirement for fastly_service_compute

Added anomaly signal Apr 18, 2022 · release notes

Adds three new GraphQL Anomaly Signals: duplicate/undefined variables and missing operation names.

Added GRAPHQL-DUPLICATE-VARIABLES anomaly signal to detect duplicated string substitution variable names in GraphQL requests
Added GRAPHQL-UNDEFINED-VARIABLES anomaly signal to detect undefined string substitution variables in GraphQL requests
Added GRAPHQL-MISSING-REQUIRED-OPERATION-NAME anomaly signal to detect the absence of the active operation required for multi-operation GraphQL requests

3 details in Everything

Next-Gen WAF for NGINX (Native) 1.1.6 Apr 14, 2022 · release notes

Next-Gen WAF for NGINX (Native) 1.1.6 adds improved WebSocket inspection and broadens platform support.

Improved WebSocket messages inspection
Added support for Amazon Linux 2 (x86-64 and arm64)
Added Arm64 support for NGINX 1.21.6, 1.22.0, 1.23.0 on CentOS 7,8
Added Arm64 support for Amazon Linux 2, CentOS 7,8, Ubuntu 18.04/20.04/22.04, Debian 10/11

4 details in Everything

Add new Secret Store API endpoints Apr 7, 2022 · release notes

Adds new Secret Store API endpoints to Fastly's service for managing secrets via API.

Add the new Secret Store API endpoints.

1 detail in Everything

CLI v2.0.0 Apr 5, 2022 · release notes

Fastly CLI v2.0.0 adds --debug to compute serve, supports multiple profiles via [profiles] config

Adds --debug flag to compute serve for verbose local development output
Supports multiple profiles via the [profiles] section in the configuration file

2 details in Everything

Announcing GraphQL Inspection Mar 31, 2022 · release notes

Fastly adds GraphQL Inspection capabilities to Next-Gen WAF with new signals and rule templating.

Adds ability to apply WAF detections and custom rules to GraphQL requests in Fastly's Next-Gen WAF.
Introduces GraphQL-specific attack and anomaly Signals for targeted attacks in Fastly's Next-Gen WAF.
Requires enabling the GraphQL API Query templated rule for tracking GraphQL API requests.

3 details in Everything

Support for ARM Processors Mar 28, 2022 · release notes

Adds ARM-compatible Agent and NGINX-native Module for Fastly Next-Gen WAF to enable ARM processor support.

Adds NGINX-native Module supporting NGINX v1.18.0 and above for ARM architecture

1 detail in Everything

Rust SDK 0.8.4 Mar 8, 2022 · release notes

Fastly Rust SDK 0.8.4 adds manual framing header control and requires Rust 1.56+

Adds set_framing_headers_mode and with_framing_headers_mode methods to Request and Response structs for manual Content-Length and Transfer-Encoding control
Bumps minimum supported Rust version to 1.56.0

2 details in Everything

Add shield hit and miss metrics Mar 8, 2022 · release notes

Add shield hit and miss metrics for monitoring Fastly edge cache performance.

Adds shield_hit_requests, shield_miss_requests, shield_hit_resp_header_bytes, shield_hit_resp_body_bytes, shield_miss_resp_header_bytes, and shield_miss_resp_body_bytes metrics to track shield traffic.

1 detail in Everything

Fastly Terraform Provider 1.1.0 Feb 23, 2022 · release notes

Adds fastly_datacenters data resource to lookup Fastly datacenter IDs

Rust SDK 0.8.3 Feb 23, 2022 · release notes

Rust SDK 0.8.3 adds Body::try_get_prefix_mut for handling I/O errors when reading a body prefix.

CLI v1.7.0 Feb 22, 2022 · release notes

Adds --name requirement for service search, Compute@Edge trial activation, and Sentry suspect commit support in Fastly CLI v1.7.0

service search now requires the --name flag; omitting it causes an error instead of a warning or broad results.
Adds support for Sentry suspect commit feature integration with Fastly deployments.
Implements Compute@Edge Free Trial Activation via the CLI.
Populates the language.manifest.name field with the project name during Dockerfile generation.
Updates the config last_checked field even when a config load error occurs, ensuring more accurate cache state tracking.

5 details in Everything

└──▷ BREAKING ON UPGRADE

!The --name flag for the service search command is now required; previously it was optional.

JavaScript SDK 0.2.4 Feb 9, 2022 · release notes

Fastly JS SDK 0.2.4 adds support for streaming upstream request bodies.

Add new Domain Ownerships endpoint Feb 7, 2022 · release notes

Fastly adds a new domain_ownerships API endpoint

Add Origin Inspector latency metrics Feb 7, 2022 · release notes

Adds twelve new origin latency bucket metrics to Fastly Origin Inspector

JavaScript SDK 0.2.2 Feb 3, 2022 · release notes

Fastly JS SDK 0.2.2 adds TransformStream support, queueMicrotask, structuredClone, and class static blocks.

Adds full support for TransformStreams, enabling direct piping of Request/Response bodies
Adds support for the queueMicrotask global function
Adds support for the structuredClone global function
Adds support for the location global object as an instance of WorkerLocation
Enables class static blocks syntax

5 details in Everything

Rust SDK 0.8.2 Jan 21, 2022 · release notes

Rust SDK adds *_str_lossy accessors for HTTP headers and bodies that handle invalid UTF-8 without panicking

CLI v1.5.0 Jan 20, 2022 · release notes

Fastly CLI v1.5.0 adds --json output for describe and list commands

fastly ... --json outputs structured JSON for describe and list operations

1 detail in Everything

Next-Gen WAF for HAProxy 1.3.0 Jan 19, 2022 · release notes

Next-Gen WAF for HAProxy 1.3.0 adds Ubuntu 20.04 support and improves HTTP inspection data

Adds Ubuntu 20.04 (focal) platform support for the Next-Gen WAF module
Improves URL path and query information sent to the agent during content-type header inspection

2 details in Everything

Next-Gen WAF for Apache 1.9.0 Jan 18, 2022 · release notes

Next-Gen WAF for Apache adds Content-Type header inspection and Debian 11 / Ubuntu 22.04 support

Adds Debian 11 (bullseye) platform support
Adds Ubuntu 22.04 (jammy) platform support

2 details in Everything

Next-Gen WAF for Java 2.4.0 Jan 18, 2022 · release notes

Next-Gen WAF for Java 2.4.0 adds Servlet 3.0 API support and Content-Type header inspection.

Adds support for getParts() and getPart() Servlet 3.0 APIs to the WAF module
Improves Content-Type header inspection capabilities

2 details in Everything

Fastly Terraform Provider 0.40.0 Jan 13, 2022 · release notes

Fastly Terraform Provider 0.40.0 adds modsec_rule_ids filter to fastly_waf_rules.

Adds modsec_rule_ids filter to fastly_waf_rules data source
Changes fastly_waf_condition resource to force new resource if type attribute is modified

2 details in Everything

Added SITE-FLAGGED-IP signal Jan 12, 2022 · release notes

Fastly adds SITE-FLAGGED-IP anomaly signal to detect requests from IPs exceeding per-site attack thresholds.

Add edge byte and cacheable byte metrics Jan 11, 2022 · release notes

Adds six edge byte and cacheable byte ratio metrics for tracking byte-level caching efficiency

Adds edge_hit_resp_body_bytes, edge_hit_resp_header_bytes, edge_miss_resp_body_bytes, edge_miss_resp_header_bytes, origin_cache_fetch_resp_body_bytes, and origin_cache_fetch_resp_header_bytes stats to track byte-level caching metrics

1 detail in Everything

CLI v1.4.0 Jan 7, 2022 · release notes

Adds viceroy.ttl config, gotest support, FASTLY_CUSTOMER_ID env var, and --service-name flag to Fastly CLI v1.4.0

viceroy.ttl is a new configurable setting in the CLI app config
New gotest command support for running tests locally with Viceroy
The FASTLY_CUSTOMER_ID environment variable is now supported for authentication
--service-name flag is added as a swap-in replacement for the existing --service-id

4 details in Everything

Added Edge Deployment API endpoints Dec 14, 2021 · release notes

Fastly adds Edge Deployment API endpoints for programmatic management.

Added BODY-PARSER-EVASION signal Dec 11, 2021 · release notes

Fastly adds BODY-PARSER-EVASION anomaly signal to detect unparseable request bodies.

Adds the BODY-PARSER-EVASION Anomaly Signal to detect requests that may not have had their body parsed correctly by the inspection engine.

1 detail in Everything

Rust SDK 0.8.1 Dec 10, 2021 · release notes

Fastly Rust SDK 0.8.1 adds dictionary error handling, gzip decompression, and query parameter access

Adds Dictionary::try_open() method for explicit open failure handling via Result<Dictionary, OpenError>
Adds automatic gzip decompression for backend responses via Request::set_auto_decompress_gzip()
Adds Request::get_query_parameter() for accessing individual query parameter strings
Adds get_ttl() and get_stale_while_revalidate() accessors for CacheOverride
Adds OpenError::DictionaryDoesNotExist error variant to identify missing dictionaries

5 details in Everything

└──▷ BREAKING ON UPGRADE

!with_body_bytes() and set_body_bytes() are renamed to with_body_octet_stream() and set_body_octet_stream(); original names deprecated

Fastly Terraform Provider 0.39.0 Dec 8, 2021 · release notes

Fastly Terraform Provider 0.39.0 exposes certificate_id attribute and updates go-fastly SDK

Exposes certificate_id read-only attribute from the fastly_tls_subscription resource for integration with other Fastly services
Bumps underlying go-fastly SDK to v5.1.3, potentially affecting supported API features

2 details in Everything

CLI v1.2.0 Nov 25, 2021 · release notes

CLI v1.2.0 adds API metadata to commands and SEE ALSO help sections

Adds command API metadata to the Fastly CLI
Implements SEE ALSO section in CLI help output

2 details in Everything

JavaScript SDK 0.2.1 Nov 10, 2021 · release notes

Fastly JS SDK 0.2.1 adds Env namespace to access environment variables

CLI v1.1.0 Nov 8, 2021 · release notes

Fastly CLI v1.1.0 adds --watch flag to compute serve for live-reload during development.

Implements --watch flag on the compute serve command to enable file-watching and automatic reloads

1 detail in Everything

Fastly Terraform Provider 0.37.0 Nov 1, 2021 · release notes

Fastly Terraform Provider 0.37.0 adds force_http2 and use_tls configs with keepalive transport support.

Adds force_http2 provider option to override Transport for HTTP/2 enforcement
Adds use_tls attribute to Splunk logging resources

2 details in Everything

CLI v0.41.0 Oct 19, 2021 · release notes

Adds --from archive support to compute init and new region support for logentries endpoints.

compute init --from <archive_path> now supports initializing from archives
Adds setup.log_endpoints.<name> configuration key support
Adds region parameter support for logentries logging endpoint

3 details in Everything

CLI v0.40.0 Oct 13, 2021 · release notes

Fastly CLI v0.40.0 introduces configuration support for dictionary management via the new [setup.dictionaries] section.

CLI v0.39.3 Oct 6, 2021 · release notes

Fastly CLI v0.39.3 adds an abstraction layer for [setup.backends] configuration.

Add new Customer Contacts endpoints Oct 6, 2021 · release notes

Adds new Customer Contacts API endpoints to the Fastly service.

CLI v0.39.0 Sep 21, 2021 · release notes

CLI v0.39.0 introduces user and auth-token commands plus New Relic logging support

Adds user commands for managing Fastly identities
Adds auth-token commands for generating and managing authentication tokens

2 details in Everything

Add ability to filter TLS subscriptions with active order Sep 16, 2021 · release notes

Adds order filter parameter to the TLS subscriptions endpoint

Fastly Terraform Provider 0.35.0 Sep 15, 2021 · release notes

Fastly Terraform Provider 0.35.0 allows backend blocks to be optional and audits sensitive attributes

Make backend block optional in service configurations

1 detail in Everything

Next-Gen WAF for HAProxy 1.2.3 Sep 13, 2021 · release notes

Adds example SPOE configuration files for communicating with the Signal Sciences agent.

CLI v0.37.0 Sep 3, 2021 · release notes

Fastly CLI v0.37.0 adds Windows arm64 support and improves fastly setup configuration with backend integration.

Adds setup command support for configuring backends
Adds --accept-defaults flag to omit messaging prompts

2 details in Everything

Rust SDK 0.8.0 Sep 1, 2021 · release notes

Fastly Rust SDK 0.8.0 adds Dictionary::try_get and close methods for handle management.

Adds Dictionary::try_get to explicitly handle lookup failures
Adds close method to RequestHandle and ResponseHandle
Exports the fastly::dictionary module for importing Dictionary and LookupError together

3 details in Everything

└──▷ BREAKING ON UPGRADE

!Removed Copy implementation from ConnSpeed, ConnType, Continent, ProxyDescription and ProxyType in the geo module

JavaScript SDK 0.2.0 Aug 31, 2021 · release notes

Fastly JS SDK 0.2.0 adds WHATWG URL/URLSearchParams and FetchEvent#waitUntil support

Adds URL and URLSearchParams class implementations compliant with WHATWG standards
Adds FetchEvent#waitUntil() method for managing request lifecycle beyond response return
Enables private class fields (#field) and methods, plus ergonomic brand checks (in operator)
Allows binary files to be included and typed arrays to be used as Response bodies

4 details in Everything

└──▷ BREAKING ON UPGRADE

!FetchEvent handling is now more spec-compliant; waitUntil() must be used for async work instead of implicit waiting

Add region to New Relic logging endpoint schema Aug 17, 2021 · release notes

Adds region field to New Relic logging endpoint schema (US, EU)

Supports US and EU values for the new region field

1 detail in Everything

TLS Subscriptions with GlobalSign Email Validation Aug 16, 2021 · release notes

New API endpoints for GlobalSign email validation in TLS subscriptions

GET /tls/domains, GET /tls/subscriptions, and GET /tls/subscriptions/{tls_subscription_id} now support the tls_authorizations.globalsign_email_challenge parameter to include GlobalSign email challenge data in responses.
POST /tls/subscriptions/{tls_subscription_id}/authorizations/{tls_authorization_id}/globalsign_email_challenges endpoint added for creating email challenges used to validate domain ownership via email.
DELETE /tls/subscriptions/{tls_subscription_id}/authorizations/{tls_authorization_id}/globalsign_email_challenges/{globalsign_email_challenge_id} endpoint added for removing an existing email challenge.

3 details in Everything

Add Compute backend and resource limit metrics Aug 16, 2021 · release notes

Adds eight new Fastly Compute backend stats including bereqs, bereq_errors, and limit exceeded counters.

Fastly Terraform Provider 0.34.0 Aug 9, 2021 · release notes

Fastly Terraform Provider 0.34.0 adds service version selection during import.

Enables service version selection when importing Fastly resources

1 detail in Everything

Add new invoice endpoint and new formats Aug 6, 2021 · release notes

Fastly introduces a new API endpoint to fetch individual invoices and expands supported export formats.

Adds GET /invoices/{id} endpoint to retrieve a specific invoice by ID
Adds support for csv and pdf formats when retrieving invoices via the new endpoint

2 details in Everything

Add Compute delivery to bandwidth calculation Aug 6, 2021 · release notes

Fastly adds compute delivery stats to bandwidth calculation and compute_requests field in usage endpoints

CLI v0.36.0 Jul 30, 2021 · release notes

Fastly CLI v0.36.0 introduces a new subcommand for managing New Relic logging integrations.

Adds logging newrelic subcommand to configure New Relic logging destinations

1 detail in Everything

Next-Gen WAF for Apache 1.8.4 Jul 29, 2021 · release notes

Adds application/graphql Content-Type support in Next-Gen WAF for Apache 1.8.4

Next-Gen WAF for IIS 3.1.1 Jul 29, 2021 · release notes

Fastly NGWAF adds Content-Type support for application/graphql.

Next-Gen WAF for HAProxy 1.2.2 Jul 29, 2021 · release notes

Next-Gen WAF for HAProxy adds Debian 11 and GraphQL Content-Type support in v1.2.2

Adds Debian 11 (bullseye) support for the Next-Gen WAF module.
Adds support for application/graphql content type detection.

2 details in Everything

CLI v0.35.0 Jul 29, 2021 · release notes

CLI v0.35.0 adds ACL commands, Compute@Edge JS SDK support, and new HTTP flags

Adds acl command to manage access control lists
Adds acl-entry command for granular ACL entry management
Implements --override-host flag for host header manipulation
Implements --ssl-sni-hostname flag for SNI configuration
Supports Compute@Edge JS SDK (Beta)

5 details in Everything

Next-Gen WAF for NGINX (Lua) 1.4.3 Jul 29, 2021 · release notes

Fastly NGWAF module 1.4.3 adds GraphQL Content-Type and Debian 11 support.

Adds Content-type application/graphql support to the WAF rule engine
Adds Debian 11 platform support for the NGINX Lua module

2 details in Everything

Next-Gen WAF for .NET 1.6.1 Jul 29, 2021 · release notes

Next-Gen WAF for .NET 1.6.1 adds support for the application/graphql content type, enabling scanning of GraphQL requests.

Added rules response feature Jul 25, 2021 · release notes

Fastly adds custom 4xx response codes for blocked requests via the Rules Response feature

Adds ability to specify a custom 4xx response code when blocking traffic

1 detail in Everything

CLI v0.34.0 Jul 16, 2021 · release notes

Fastly CLI v0.34.0 adds compute serve, --comment, and config visibility flags.

Adds the compute serve subcommand for local development of Fastly Compute@Edge services
Enables passing a comment during publishing via fastly compute publish --comment or deploy --comment
New flags added to display the CLI config file path and current configuration values

3 details in Everything

Fastly Terraform Provider 0.33.0 Jul 16, 2021 · release notes

Fastly Terraform Provider 0.33.0 adds darwin/arm64 support and a new no_auth provider option.

Adds darwin/arm64 build support by upgrading to Go 1.16
Introduces the no_auth provider option for environments with no authentication required

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Replaces the ActivateVCL call with the Main field on CreateVCL
!Replaces StateFunc validation with ValidateDiagFunc

New Cache Fetches and Compute Backend Stats Jun 30, 2021 · release notes

Adds shield_cache_fetches, origin_cache_fetches, and four new compute backend byte stats

Introduces shield_cache_fetches stat to count total requests made to shields
Introduces origin_cache_fetches stat to count total requests made to origins
Adds compute_bereq_header_bytes stat for bytes sent in Compute backend request headers
Adds compute_bereq_body_bytes stat for bytes sent in Compute backend request body
Adds compute_beresp_header_bytes stat for bytes received in Compute backend response headers

+1 more show less

Adds compute_beresp_body_bytes stat for bytes received in Compute backend response body

6 details in Everything

CLI v0.32.0 Jun 30, 2021 · release notes

Fastly CLI v0.32.0 adds vcl custom/snippet, purge, and $FASTLY_SERVICE_ID support

Adds vcl custom commands for managing custom VCL files directly from the CLI
Adds vcl snippet commands for managing VCL snippets via the CLI
Adds purge command to purge content from Fastly edge servers
Service ID lookup now includes $FASTLY_SERVICE_ID environment variable
Embeds app config into compiled CLI binary to reduce external dependencies

5 details in Everything

Add Link header info to paginated endpoints Jun 18, 2021 · release notes

Adds Link header info to paginated GET endpoints for service, ACL entries, and dictionary items.

CLI v0.31.0 Jun 17, 2021 · release notes

Fastly CLI v0.31.0 adds pops and ip-list commands, new flags for compute service management

Adds pops subcommand to list available Fastly Points of Presence
Adds ip-list subcommand to retrieve the public IP addresses used by Fastly infrastructure
Adds --version and --autoclone flags to compute service management commands

3 details in Everything

Next-Gen WAF for Java 2.2.4 Jun 15, 2021 · release notes

Fastly Next-Gen WAF for Java 2.2.4 adds GraphQL support and exception handling improvements

Added support for Content-type application/graphql
Improved rethrowing application exceptions in container

2 details in Everything

Fastly Terraform Provider 0.31.0 Jun 14, 2021 · release notes

Fastly Terraform Provider 0.31.0 adds S3 ACL and redundancy options.

Adds acl and extra_redundancy arguments to the S3 logging block to control access control lists and data replication for stored logs
Updates the default initial value for health checks

2 details in Everything

Rust SDK 0.7.2 Jun 10, 2021 · release notes

Fastly Rust SDK 0.7.2 adds experimental cache key control API and specific SendError causes

Adds an experimental API for controlling the cache keys used for requests
Splits HeadTooLarge and InvalidStatus into separate variants of SendErrorCause to provide more insight into response failures

2 details in Everything

New Edge Hit Requests and Edge Miss Requests stats Jun 2, 2021 · release notes

Fastly adds edge_hit_requests and edge_miss_requests stats for edge traffic counting

Adds the edge_hit_requests stat to count cache hits at the edge
Adds the edge_miss_requests stat to count cache misses at the edge

2 details in Everything

New Compute Platform Response Status Code Stats Jun 2, 2021 · release notes

Adds five new stats for tracking response status codes in Fastly Compute.

Adds compute_resp_status_1xx stat to track 1xx responses
Adds compute_resp_status_2xx stat to track 2xx responses
Adds compute_resp_status_3xx stat to track 3xx responses
Adds compute_resp_status_4xx stat to track 4xx responses
Adds compute_resp_status_5xx stat to track 5xx responses

5 details in Everything

June 2021 VCL release ("Pizza") Jun 2, 2021 · release notes

Fastly VCL Pizza adds segmented_caching.block_size variable and bin.base64_to_hex function; introduces AF-West region.

Adds the bin.base64_to_hex function to convert Base64-encoded strings to hexadecimal representation in VCL
Introduces the new AF-West region, documented in the server.region variable

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The client.sess_timeout VCL token is withdrawn and no longer available for customer use
!The req.backend.is_cluster VCL token is withdrawn and no longer available for customer use

Next-Gen WAF for Go 1.10.0 May 26, 2021 · release notes

Fastly Next-Gen WAF adds application/graphql content-type support in Go module v1.10.0

Adds application/graphql to the list of supported content-types

1 detail in Everything

CLI v0.30.0 May 19, 2021 · release notes

Internal dependency updates for rustup and go-git alongside the new pack functionality.

Update messaging for rustup self update
Replace archived go-git dependency

2 details in Everything

Next-Gen WAF for NGINX (Native) 1.1.5 May 17, 2021 · release notes

NGWAF 1.1.5 adds Arm64 builds and supports NGINX Plus R24/R25 and several new NGINX versions.

Adds Arm64 support for NGINX 1.18.0, 1.19.x, and 1.20.x on Ubuntu 18.04/20.04 and Debian 10/11
Adds cryptographic signatures to released RPM packages
Adds support for NGINX Plus Release 24 (R24)
Adds support for NGINX Plus Release 25 (R25)

4 details in Everything

Fastly Terraform Provider 0.30.0 May 12, 2021 · release notes

Fastly Terraform Provider 0.30.0 adds director support for compute resources

CLI v0.28.0 May 11, 2021 · release notes

CLI v0.28.0 adds isBool flag option and moves service creation to fastly compute deploy.

Adds isBool to command flags allowing boolean flag configuration #267
Moves service creation functionality into the fastly compute deploy subcommand #266

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Service creation is now performed via fastly compute deploy rather than a dedicated command.

Fastly Terraform Provider 0.29.0 May 4, 2021 · release notes

Fastly Terraform Provider 0.29.0 adds configuration options for Azure logging, S3/Kinesis IAM roles, and file compression codecs.

Adds file_max_bytes configuration to Azure logging endpoint resources
Allows IAM role usage in S3 and Kinesis logging endpoints via new arguments
Adds compression_codec argument to logging file sink endpoints

3 details in Everything

Next-Gen WAF for VMWare Tanzu Tile v1.1.2 Apr 16, 2021 · release notes

Next-Gen WAF for VMWare Tanzu Tile v1.1.2 adds Windows 2019 stemcell and TAS 2.11 support

CLI v0.27.0 Apr 15, 2021 · release notes

Adds compute publish CLI subcommand, Kinesis/S3 IAM role support, and Azure file sink configuration keys.

Support IAM role in Kinesis logging endpoint
Support IAM role in S3 and Kinesis logging endpoints
Add support for file_max_bytes configuration for Azure logging endpoint
Add support for compression_codec to logging file sink endpoints

4 details in Everything

Fastly Terraform Provider 0.28.0 Apr 6, 2021 · release notes

Fastly Terraform Provider 0.28.0 adds PATCH endpoint for TLS subscriptions and debug mode

Adds PATCH endpoint support for TLS subscriptions enabling targeted updates without full replacement

1 detail in Everything

Next-Gen WAF for Java 2.2.3 Mar 22, 2021 · release notes

Next-Gen WAF for Java adds CIDR, IP range, path, and hostname bypass options

CLI v0.25.0 Mar 16, 2021 · release notes

Fastly CLI v0.25.0 adds manifest_version to fastly.toml and dynamic configuration support.

Adds manifest_version field to fastly.toml to specify the manifest schema version
Implements Dynamic Configuration feature in the Fastly CLI

2 details in Everything

New Identity Provider Integration - Manage users with Okta Mar 9, 2021 · release notes

Fastly (Signal Sciences) adds Okta integration for automated user provisioning and role assignment.

Adds Okta identity provider integration to support automated user lifecycle management
Enables synchronization of Signal Sciences roles and site memberships via Okta groups

2 details in Everything

Rust SDK 0.7.0 Mar 3, 2021 · release notes

Fastly Rust SDK 0.7.0 adds body type-specific convenience methods and redirect builders.

Response::see_other, Response::redirect, and Response::temporary_redirect builders to construct redirect responses with the Location header
with_body_text_plain(), set_body_text_plain(), with_body_text_html(), and set_body_text_html() convenience methods that set body contents along with respective content types
SendError::root_cause and SendErrorCause to describe specific upstream request failure causes

3 details in Everything

└──▷ BREAKING ON UPGRADE

!RequestHandle::send, RequestHandle::send_async, and PendingRequestHandle::send_async_streaming now return a specific SendErrorCause on errors, replacing an anyhow::Error
!select_handles now returns a specific SendErrorCause on errors, replacing an anyhow::Error
!PendingRequestHandle::poll and PendingRequestHandle::wait now return a specific SendErrorCause on errors, replacing an anyhow::Error

Fastly Terraform Provider 0.25.0 Feb 26, 2021 · release notes

Fastly Terraform Provider 0.25.0 adds TLS client cert/key for Splunk logging, Dictionary resource for Compute services, and resources for Custom/Platform/Managed TLS.

Adds tls_client_cert and tls_client_key arguments to the fastly_splunk_logging resource for mTLS authentication
Adds the fastly_compute_dictionary resource to manage dictionaries on Compute@Edge services
Adds resources for Custom TLS (fastly_tls_subscription) and Platform TLS (fastly_platform_tls_subscription) products
Adds resources for Managed TLS Subscriptions (fastly_managed_tls_subscription)
Adds force_destroy flag to ACLs and Dicts resources to allow deleting non-empty lists

5 details in Everything

New Observed IPs page Feb 25, 2021 · release notes

New Observed IPs page in Signal Sciences control panel consolidates suspicious, flagged, and rate-limited IP lists.

Moves the Rate Limited IPs tab from the Events page to the new Observed IPs page

1 detail in Everything

Moved - Rate Limited IPs list Feb 25, 2021 · release notes

Fastly moves Rate Limited, Suspicious, and Flagged IP lists to the new Observed IPs page.

Next-Gen WAF for IIS 3.0.0 Feb 4, 2021 · release notes

Next-Gen WAF for IIS 3.0.0 adds improved Azure support with a re-release targeting 32-bit app pool compatibility

Re-released as version 3.0.0 to provide broadened support for 32-bit application pools in Azure

1 detail in Everything

CLI v0.24.0 Feb 2, 2021 · release notes

Fastly CLI v0.24.0 adds static content starter kit

Next-Gen WAF for IIS 2.4.0 Jan 28, 2021 · release notes

Next-Gen WAF for IIS 2.4.0 adds a single installer supporting 32-bit app pools

Adds support for 32-bit application pools via a unified installer for 32-bit, 64-bit, and mixed app pool environments (64-bit OS only).

1 detail in Everything

CLI v0.23.0 Jan 22, 2021 · release notes

Adds Compute@Edge log tailing support to the CLI.

Rust SDK 0.6.0 Jan 21, 2021 · release notes

Fastly Rust SDK 0.6.0 adds Dictionary::contains methods for Edge Dictionaries and overhauls Request/Response APIs

Adds Dictionary::contains method to check if a key exists in a Fastly Edge Dictionary.
Adds DictionaryHandle::contains method to check if a key exists in a Fastly Edge Dictionary handle.

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Request and Response APIs have been overhauled, requiring migration via the fastly crate documentation.

Next-Gen WAF for NGINX (Native) 1.1.4 Jan 13, 2021 · release notes

Fastly Next-Gen WAF for NGINX 1.1.4 adds support for Ubuntu 20.04 and NGINX Plus R23

Added support for Ubuntu 20.04 (Focal Fossa)
Added support for NGINX Plus Release 23 (R23)

2 details in Everything

Next-Gen WAF for Apache 1.8.2 Jan 8, 2021 · release notes

Next-Gen WAF for Apache adds Ubuntu 20.04 support in v1.8.2

└──▷ BREAKING ON UPGRADE

!Drops support for Apache 2.2 on 32-bit LSB for CentOS 6 (EL6); existing setups on this configuration will no longer be supported.

CLI v0.22.0 Jan 7, 2021 · release notes

CLI v0.22.0 enhances Splunk logging options and introduces Kinesis support.

CLI v0.21.0 Dec 14, 2020 · release notes

CLI v0.21.0 adds support for managing edge dictionaries via new subcommands.

Adds edge-dictionary subcommand group to manage Fastly edge dictionaries

1 detail in Everything

CLI v0.20.0 Nov 24, 2020 · release notes

Fastly CLI v0.20.0 migrates to Go-Fastly 2.0.0

Migrates the underlying client library to Go-Fastly 2.0.0

1 detail in Everything

CLI v0.19.0 Nov 19, 2020 · release notes

Fastly CLI v0.19.0 introduces initial support for SASL Kafka integration.

November 2020 VCL release ("Croquette") Nov 11, 2020 · release notes

Fastly November 2020 VCL release adds querystring.get and setcookie.delete_by_name, expands client.ip docs.

Adds querystring.get to read query string parameters in VCL
Adds setcookie.delete_by_name to delete cookies by name in VCL
Updates documentation for client.ip, fastly_info.state, and obj.hits

3 details in Everything

Next-Gen WAF Heroku Buildpack 0.2.1 Nov 9, 2020 · release notes

The Next-Gen WAF Heroku Buildpack now supports a server-flavor option.

Adds server-flavor configuration key to distinguish the buildpack

1 detail in Everything

CLI v0.18.0 Oct 27, 2020 · release notes

Adds AssemblyScript support to fastly compute init and build commands

fastly compute init now supports AssemblyScript as a scaffold option for new projects.

1 detail in Everything

Rust SDK 0.5.0 Oct 22, 2020 · release notes

Fastly Rust SDK 0.5.0 adds Edge Dictionary lookup and request cache-control builders.

fastly::dictionary::Dictionary allows programs to look up values in Fastly Edge Dictionaries
pci field on fastly::request::RequestBuilderExt for PCI compliance control
set_surrogate_key on fastly::request::RequestExt and surrogate_key on fastly::request::RequestBuilderExt allow surrogate keys to be added to cached content for group purging
Continent::as_code() for easy access to two-letter continent codes
cache_override and cache_override_mut accessors on fastly::request::RequestExt replace the previous get_ and set_ pair

5 details in Everything

└──▷ BREAKING ON UPGRADE

!fastly::request::RequestExt now offers cache_override and cache_override_mut as accessors to a Request's CacheOverride instead of the get_ and set_ pair.

Next-Gen WAF for Go 1.9.0 Oct 22, 2020 · release notes

Fastly Next-Gen WAF Go module 1.9.0 adds server_flavor config option

Fastly Terraform Provider 0.21.0 Oct 14, 2020 · release notes

Fastly Terraform Provider 0.21.0 adds WAF rule exclusion support

resource/fastly_service_waf_configuration: Add rule_exclusion block which allows rules to be excluded from the WAF configuration.

1 detail in Everything

Next-Gen WAF for IIS 2.3.0 Sep 29, 2020 · release notes

Fastly Next-Gen WAF for IIS 2.3.0 adds Azure site extension reporting and debug logging enhancements.

CLI v0.17.0 Sep 24, 2020 · release notes

New CLI subcommand for service discovery.

Adds the service search command to enable service discovery via the Fastly CLI

1 detail in Everything

Next-Gen WAF for .NET 1.6.0 Sep 21, 2020 · release notes

Next-Gen WAF for .NET adds status code blocking and new inspection methods

ngwaf now inspects OPTIONS and CONNECT HTTP methods in addition to standard verbs
Adds support for blocking responses with 300-599 status codes
Enables blocking rules that trigger an HTTP redirect instead of a standard error

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The tool no longer filters out OPTIONS and CONNECT methods; these are now subject to WAF inspection.

September 2020 VCL release ("Cheerios") Sep 21, 2020 · release notes

September 2020 VCL release adds QUIC packet/byte counters and RTT variables, plus new req.backend.* vars.

req.backend.name variable available for subdomain extraction
req.backend.ip variable available for upstream IP address
req.backend.port variable available for upstream port
quic.num_packets.received counter for total QUIC packets received
quic.num_packets.decryption_failed counter for decryption failures

+12 more show less

quic.num_packets.sent counter for total QUIC packets sent
quic.num_packets.lost counter for lost QUIC packets
quic.num_packets.ack_received counter for acknowledged packets
quic.num_packets.late_acked counter for late-acknowledged packets
quic.num_bytes.received counter for bytes received over QUIC
quic.num_bytes.sent counter for bytes sent over QUIC
quic.rtt.minimum variable for minimum round-trip time
quic.rtt.smoothed variable for smoothed RTT
quic.rtt.variance variable for RTT variance
quic.rtt.latest variable for latest RTT reading
quic.cc.cwnd variable for congestion window size
quic.cc.ssthresh variable for slow start threshold

17 details in Everything

New Request Volume Graph Sep 9, 2020 · release notes

Adds a new Request Volume graph showing request count and average RPS to the default Overview dashboard.

Next-Gen WAF for .NET Core 1.3.0 Aug 24, 2020 · release notes

Next-Gen WAF for .NET Core 1.3.0 adds redirect location setting, response code blocking, and new HTTP method support

Adds support for setting the redirect_location parameter to control HTTP redirect behavior.
Enables blocking requests based on response code ranges (e.g., 300-599) in WAF rules.
Permits OPTIONS and CONNECT HTTP methods, which were previously blocked by default.

3 details in Everything

Next-Gen WAF for IIS 2.2.0 Aug 11, 2020 · release notes

Fastly Next-Gen WAF for IIS 2.2.0 adds blocking on all HTTP 3xx-5xx codes and HTTP redirect support

Added support for using all codes 300-599 as "blocking"
Added HTTP redirect support

2 details in Everything

Fastly Terraform Provider 0.20.0 Aug 10, 2020 · release notes

Fastly Terraform Provider 0.20.0 adds WAF resource and data source

Adds the fastly_waf_rules data source to fetch Fastly WAF rules
Adds the fastly_service_waf_configuration resource to provide WAF configuration
Adds a waf block to the resource/fastly_service_v1/waf resource

3 details in Everything

Next-Gen WAF for Node.js 1.6.0 Jul 30, 2020 · release notes

Adds Hapi v17 framework support to Fastly Next-Gen WAF module

Supports Hapi v17
Adds Hapi v17 integration

2 details in Everything

Next-Gen WAF for Java 2.1.4 Jul 27, 2020 · release notes

Fastly NGWAF Java module adds new rule options for redirect, blocking, and allowing actions.

Fastly Terraform Provider 0.19.0 Jul 22, 2020 · release notes

Fastly Terraform Provider 0.19.0 adds fastly_service_compute resource and FTP logging field support

fastly_service_compute new resource allows managing Compute services via Terraform.
resource/fastly_service_v1/ftp_logging adds message_type field for FTP logging endpoints.
resource/fastly_service_compute gains import support to manage existing compute services.

3 details in Everything

customer_id added to token response Jul 20, 2020 · release notes

Adds customer_id field to GET /tokens responses for easier identity correlation

The GET /tokens endpoint now returns the customer_id field in its JSON response.

1 detail in Everything

API Access Token updates Jul 16, 2020 · release notes

Fastly introduces Corp Owners with token expiration, IP whitelisting, and per-user restrictions via new Manage pages.

Adds Corp Manage > User Authentication page for setting global token TTL and IP range restrictions
Adds Corp Manage > API Access Tokens page for viewing all corp tokens and their statuses

2 details in Everything

New rules conditions Jul 13, 2020 · release notes

Fastly adds Response code, Response header, and custom signals as conditions for request and signal exclusion rules

Adds Response code as a selectable condition type in request rules and signal exclusion rules.
Adds Response header as a selectable condition type in request rules and signal exclusion rules.
Enables custom signals to be used as conditions in request rules for complex rule logic.

3 details in Everything

Next-Gen WAF for Apache 1.8.1 Jul 13, 2020 · release notes

NGWAF Apache module 1.8.1 adds configurable Location header for X-Sigsci-Redirect responses

Added support for setting the Location header when the SigSci agent responds with X-Sigsci-Redirect

1 detail in Everything

CLI v0.16.0 Jul 9, 2020 · release notes

CLI v0.16.0 adds hashsum comparison during deployment and reinvocable compute init.

Adds package hashsum comparison during fastly compute deploy to prevent redundant uploads
Allows fastly compute init to be reinvoked within an existing package directory

2 details in Everything

Next-Gen WAF for NGINX (Native) 1.0.45 Jul 8, 2020 · release notes

Next-Gen WAF for NGINX (Native) 1.0.45 adds X-Sigsci-Redirect support

Adds support for setting the Location header when the agent responds with X-Sigsci-Redirect

1 detail in Everything

Fastly Terraform Provider 0.18.0 Jul 1, 2020 · release notes

Fastly Terraform Provider 0.18.0 adds DigitalOcean, Rackspace, OpenStack, Log Shuttle, Honeycomb, and Heroku logging resources.

Adds resource/fastly_service_v1/logging_digitalocean resource for DigitalOcean Spaces logging
Adds resource/fastly_service_v1/logging_cloudfiles resource for Rackspace Cloud Files logging
Adds resource/fastly_service_v1/logging_openstack resource for OpenStack logging
Adds resource/fastly_service_v1/logging_logshuttle resource for Log Shuttle logging
Adds resource/fastly_service_v1/logging_honeycomb resource for Honeycomb logging

+1 more show less

Adds resource/fastly_service_v1/logging_heroku resource for Heroku logging

6 details in Everything

└──▷ BREAKING ON UPGRADE

!The GZIP value is renamed to Gzip in resource/fastly_service_v1/

CLI v0.15.0 Jun 29, 2020 · release notes

Fastly CLI v0.15.0 adds OpenStack logging support

TLS Configuration relationship added to all subscription responses Jun 25, 2020 · release notes

The subscription API now exposes TLS settings directly in the response object.

TLS configuration data is included in subscriptions responses as a relationship.

1 detail in Everything

Next-Gen WAF for NGINX (Lua) 1.4.0 Jun 25, 2020 · release notes

New NGWAF 1.4.0 adds HTTP method passthrough, flexible agent response codes, and Ubuntu 20.04 support

OPTIONS and CONNECT methods can now be passed to the WAF agent
Any WAF response code from 300–599 received from the agent can now be used for blocking decisions
The Location header is now supported if the agent responds with X-Sigsci-Redirect
Added support for Ubuntu 20.04 (Focal Fossa)

4 details in Everything

Rust SDK 0.4.0 Jun 23, 2020 · release notes

Rust SDK 0.4.0 adds async streaming, explicit error types, and new API methods for backend interaction.

get_header_value method on fastly::request::RequestHandle allows retrieving header values
SendError and BufferSizeError provide specific error types for API call failures
RequestExt::send_async_streaming() enables writing bytes to upstream request bodies after headers are sent
Backend::name() retrieves the string representation of a backend instance
ResponseExt::backend_request() retrieves the original request associated with a response

+1 more show less

PendingRequest handles via PendingRequest::sent_req() now expose the sent Request object

6 details in Everything

└──▷ BREAKING ON UPGRADE

!Backend::new() is renamed to Backend::from_name(); the old name is deprecated
!Internal errors in Body, BodyHandle, RequestHandle, and ResponseHandle now cause panics instead of returning Result
!fastly::abi submodule removed from public interface
!impl From<PendingRequestHandle> for PendingRequest removed; PendingRequests must be built with the backend Request they were sent with

Next-Gen WAF for IIS 2.1.1 Jun 23, 2020 · release notes

Next-Gen WAF for IIS 2.1.1 adds support for reading status page path via environment variable

Fastly Terraform Provider 0.17.0 Jun 22, 2020 · release notes

Fastly Terraform Provider 0.17.0 adds logging resources for Google Pub/Sub, Kafka, Scalyr, New Relic, Datadog, Loggly, SFTP, FTP, and Elasticsearch.

Adds resource/fastly_service_v1/logging_googlepubsub resource to configure Google Cloud Pub/Sub logging endpoints in Fastly services
Adds resource/fastly_service_v1/logging_kafka resource to configure Kafka logging endpoints in Fastly services
Adds resource/fastly_service_v1/logging_scalyr resource to configure Scalyr logging endpoints in Fastly services
Adds resource/fastly_service_v1/logging_newrelic resource to configure New Relic logging endpoints in Fastly services
Adds resource/fastly_service_v1/logging_datadog resource to configure Datadog logging endpoints in Fastly services

+5 more show less

Adds resource/fastly_service_v1/logging_loggly resource to configure Loggly logging endpoints in Fastly services
Adds resource/fastly_service_v1/logging_sftp resource to configure SFTP logging endpoints in Fastly services
Adds resource/fastly_service_v1/logging_ftp resource to configure FTP logging endpoints in Fastly services
Adds resource/fastly_service_v1/logging_elasticsearch resource to configure Elasticsearch logging endpoints in Fastly services
Adds public_key field support to the existing resource/fastly_service_v1/s3logging resource

10 details in Everything

Next-Gen WAF for IIS 2.1.0 Jun 22, 2020 · release notes

Fastly's Next-Gen WAF for IIS 2.1.0 introduces Azure App Service platform support and environment variable configuration capabilities.

Adds azure app services as a supported platform for the Next-Gen WAF module.
Enables reading configuration directly from environment variables instead of requiring file-based configs.

2 details in Everything

Next-Gen WAF for .NET 1.5.5 Jun 22, 2020 · release notes

Release 1.5.5 introduces a new distribution mechanism (NuGet) for the WAF module, expanding installation options for .NET developers.

Nuget packaging support allows distributing the WAF module via the NuGet package manager.

1 detail in Everything

Next-Gen WAF for .NET Core 1.2.5 Jun 17, 2020 · release notes

The Next-Gen WAF for .NET Core cyber tooling version 1.2.5 extends its integration surface by adding support for the NuGet.org package repository, enabling scanning capabilities for packages sourced from this platform.

Adds NuGet.org support

1 detail in Everything

Next-Gen WAF for Go 1.8.0 Jun 15, 2020 · release notes

Adds HTTP redirect support and deprecates AltResponseCodes in favor of standard blocking codes

Added HTTP redirect support for Next-Gen WAF rules
Deprecated the AltResponseCodes concept; use all codes 300-599 as blocking

2 details in Everything

Next-Gen WAF Heroku Buildpack 0.2.0 Jun 15, 2020 · release notes

Adds SIGSCI_HEROKU_BIND_RACE_WORKAROUND config and improved health check logging for Next-Gen WAF Heroku Buildpack 0.2.0

Adds the SIGSCI_HEROKU_BIND_RACE_WORKAROUND=1 configuration to prevent race conditions on listener port binding

1 detail in Everything

CLI v0.13.0 Jun 15, 2020 · release notes

CLI v0.13.0 enables initializing compute services from an existing service ID.

Next-Gen WAF for NGINX (Native) 1.0.44 Jun 15, 2020 · release notes

Next-Gen WAF for NGINX (Native) 1.0.44 adds custom blocking codes and expands platform support.

Non-406 WAF blocking response codes are now configurable via the agent
Added Amazon Linux 2 platform support
Added NGINX 1.19.0 and NGINX Plus Release 22 platform support

3 details in Everything

Next-Gen WAF for Apache 1.8.0 Jun 10, 2020 · release notes

Fastly NGWAF 1.8.0 adds OPTIONS/CONNECT support, deprecates SigSciAltResponseCodes

Added support for OPTIONS and CONNECT requests
Deprecated SigSciAltResponseCodes alternative blocking response codes

2 details in Everything

└──▷ BREAKING ON UPGRADE

!SigSciAltResponseCodes configuration is deprecated and no longer supported for defining alternative blocking responses.

June 2020 VCL release Jun 9, 2020 · release notes

Fastly June 2020 VCL release adds new crypto functions and TLS variables

Adds crypto.encrypt_hex, crypto.encrypt_base64, crypto.decrypt_hex, and crypto.decrypt_base64 functions for cryptographic operations in VCL
Adds beresp.handshake_time_to_origin_ms variable to access handshake latency metrics in backend responses
Adds tls.client.iana_chosen_cipher_id variable to inspect the TLS cipher suite selected by the client

3 details in Everything

CLI v0.12.0 Jun 5, 2020 · release notes

CLI v0.12.0 adds configuration fields for SFTP, Cloudfiles, Scalyr, S3, GCS, and BigQuery integrations.

Adds MessageType field to SFTP integration
Adds User field to Cloudfiles Updates
Adds Region field to Scalyr integration
Adds PublicKey field to S3 integration
Adds MessageType field to GCS Updates

+1 more show less

Adds ResponseCondition and Placement fields to BigQuery Creates

6 details in Everything

Fastly Terraform Provider 0.16.0 Jun 1, 2020 · release notes

Fastly Terraform Provider 0.16.0 exposes IPv6 CIDR blocks via data source

CLI v0.11.0 May 29, 2020 · release notes

Fastly CLI v0.11.0 adds build file exclusion

CLI v0.10.0 May 28, 2020 · release notes

Fastly CLI v0.10.0 adds support for five new logging endpoint types including Google Cloud Pub/Sub and Datadog.

Adds googlecloudpubsub logging endpoint support
Adds https logging endpoint support
Adds elasticsearch logging endpoint support
Adds azureblobstorage logging endpoint support

4 details in Everything

Rust SDK 0.3.3 May 21, 2020 · release notes

Rust SDK 0.3.3 adds header removal and count APIs, separates low-level bindings

Adds downstream_original_header_count to get the original number of headers of the downstream request
Adds ResponseHandle::remove_header and RequestHandle::remove_header to remove headers directly from handles

2 details in Everything

CLI v0.9.0 May 21, 2020 · release notes

Fastly CLI v0.9.0 adds support for numerous logging endpoint providers and basic stats capabilities.

Adds --name short flag -n to the describe subcommand (replacing -d).
Adds Kafka logging endpoint support via the CLI.

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The describe subcommand's short flag for name has changed from -d to -n, which will break scripts relying on the old flag.

Next-Gen WAF Heroku Buildpack 0.1.10 May 19, 2020 · release notes

Next-Gen WAF Heroku Buildpack 0.1.10 adds agent failure retry logic and new SIGSCI_HEROKU_BUILDPACK_DEBUG=1 startup diagnostics

Adds automatic retry on agent start failure to improve buildpack stability.
Enables verbose startup debugging when SIGSCI_HEROKU_BUILDPACK_DEBUG is set to 1.

2 details in Everything

CLI v0.8.0 May 13, 2020 · release notes

Fastly CLI v0.8.0 adds --force flag to compute build, Syslog endpoint support, and improved Rust error messaging.

Adds --force flag to fastly compute build to skip verification steps
Adds Syslog logging endpoint support

2 details in Everything

Scalyr logging supports different regions May 12, 2020 · release notes

Scalyr logging now supports an optional region property (US or EU) for GDPR compliance.

Adds a region property to Scalyr remote logging configuration to specify the log data destination.

1 detail in Everything

Next-Gen WAF for NGINX (Native) 1.0.43 May 11, 2020 · release notes

Next-Gen WAF for NGINX adds WebSocket inspection capability in v1.0.43.

Added support to inspect WebSockets

1 detail in Everything

New Fields for Historical Stats and Real-time Analytics May 7, 2020 · release notes

Adds new fields to Fastly Historical Stats and Real-Time Analytics APIs for Compute and response metrics

Adds status_206 and status_429 fields to the Historical Stats API and Real-Time Analytics API to track partial content and rate-limiting responses

1 detail in Everything

Rust SDK 0.3.1 Apr 29, 2020 · release notes

Rust SDK 0.3.1 adds downstream_client_ip_addr() and fastly::geo module

#[fastly::main] now accepts any function name, not just main.
Adds downstream_client_ip_addr() to get the downstream client IP address.
Adds fastly::geo module for IP address geolocation information.

3 details in Everything

Fastly Terraform Provider 0.15.0 Apr 28, 2020 · release notes

Fastly Terraform Provider 0.15.0 adds httpslogging and Splunk TLS args

Adds httpslogging argument to resource/fastly_service_v1 to configure HTTPS log shipping.
Adds tls_hostname and tls_ca_cert arguments to resource/fastly_service_v1/splunk for secure Splunk logging.

2 details in Everything

CLI v0.6.0 Apr 24, 2020 · release notes

Fastly CLI v0.6.0 adds Homebrew publishing and updates the Rust template default.

Adds homebrew formula for Fastly CLI installation via brew install
Updates default Rust environment template to v0.3.0 in fastly compute init

2 details in Everything

April 2020 VCL release Apr 21, 2020 · release notes

April 2020 VCL release adds geolocation and digest functions, new table lookup methods, and regex linting warnings.

Adds client.geo.conn_type, client.geo.proxy_type, client.geo.proxy_description, and region variables (utf8/ascii/latin1) to access client connection details
Adds beresp.backend.src_ip variable to access the backend source IP address
Adds digest.hash_sha1_from_base64, digest.hash_sha256_from_base64, and digest.hash_sha516_from_base64 functions for base64 input hashing
Adds h2.disable_header_compression function to control HTTP/2 header compression
Adds math.exp, math.exp2, math.log, math.log2, and math.log10 mathematical functions

+3 more show less

Adds xml_escape utility function for escaping XML content
Adds std.dirname and std.basename string manipulation functions
Adds table.contains, table.lookup_acl, table.lookup_bool, table.lookup_integer, table.lookup_float, table.lookup_ip, table.lookup_backend, and table.lookup_rtime methods to the table object

8 details in Everything

Next-Gen WAF for HAProxy 1.1.12 Apr 17, 2020 · release notes

Fastly Next-Gen WAF for HAProxy adds support for HAProxy 1.9+ and Debian Buster.

Adds support for HAProxy versions 1.9 and above
Adds Debian buster platform support

2 details in Everything

Rust SDK 0.3.0 Apr 16, 2020 · release notes

Rust SDK 0.3.0 adds #[fastly::main], TLS ClientHello access, and panic logging

Adds the #[fastly::main] attribute to reduce boilerplate in program entrypoints
Adds downstream_tls_client_hello() to get raw bytes of the TLS ClientHello message
Adds downstream_original_header_names_with_len() to retrieve request header names in their original received order

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The dependency on the regex crate has been removed; code relying on it must adjust imports or dependencies

Fastly Terraform Provider 0.14.0 Apr 14, 2020 · release notes

Fastly Terraform Provider 0.14.0 adds fastly_user_v1 resource support

Rust SDK 0.2.0-alpha4 Prerelease Apr 8, 2020 · release notes

Rust SDK 0.2.0-alpha4 introduces CacheOverride, XqdStatus error codes, and fastly::log module

Adds request::CacheOverride type to override backend caching behavior including stale-while-revalidate, replacing the ttl: i32 argument in send() and send_async()
Adds RequestBuilderExt trait entirely new for constructing requests with cache overrides
Adds XqdStatus enum containing hostcall error code definitions for updated hostcall implementations
Adds fastly::log module providing a basic interface for writing to Fastly log endpoints

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The ttl: i32 argument is removed from send() and send_async(), requiring use of request::CacheOverride instead

CLI v0.5.0 Apr 8, 2020 · release notes

Fastly CLI v0.5.0 adds --branch flag to init command for specific project branches

TLS Domains in_use filter Apr 7, 2020 · release notes

Adds in_use filter to the List all TLS Domains API endpoint.

Next-Gen WAF for HAProxy 1.1.10 Apr 6, 2020 · release notes

Next-Gen WAF for HAProxy 1.1.10 adds configurable response headers via extra_blocking_resp_hdr.

extra_blocking_resp_hdr config key allows setting custom response headers on 406 blocking responses

1 detail in Everything

Next-Gen WAF for Java 2.1.3 Apr 2, 2020 · release notes

Release 2.1.3 of the Next-Gen WAF for Java service introduces configuration parameters for thread pool and queue size management.

Adds thread_pool and queue_size configuration options to control concurrency limits in the WAF engine.

1 detail in Everything

Templated rules response header and value conditions Apr 1, 2020 · release notes

Adds response header and value conditions to ATO templated rules (Login/Registration Success/Failure).

Fastly Terraform Provider 0.13.0 Apr 1, 2020 · release notes

Fastly Terraform Provider 0.13.0 adds S3 logging encryption args and snippet type validation

Adds server_side_encryption and server_side_encryption_kms_key_id arguments to the fastly_service_v1/s3logging resource.
Supports hash in type validation for the fastly_service_v1/snippet resource.
Supports hash in type validation for the fastly_service_v1/dynamicsnippet resource.

3 details in Everything

Next-Gen WAF for NGINX (Native) 1.0.40 Mar 30, 2020 · release notes

Next-Gen WAF for NGINX 1.0.40 adds native support for the sigsci-nginx-ingress-controller.

CLI v0.4.0 Mar 20, 2020 · release notes

Fastly CLI v0.4.0 adds S3 logging endpoint commands and deploy enhancements

Adds new subcommands for creating and managing S3 logging endpoints
Adds next step links in the output of compute deploy to guide users after deployment
Persists the service version to the manifest file during compute deploy operations

3 details in Everything

Rust SDK 0.2.0-alpha3 Prerelease Mar 18, 2020 · release notes

Fastly Rust SDK 0.2.0-alpha3 adds TLS metadata functions, Backend::FromStr, and stricter backend validation

└──▷ TRY IT

Parse a backend configuration from a string literal

$ let backend = "exampleOrigin".parse::<Backend>().unwrap();

request::downstream_tls_cipher_openssl_name() returns the downstream client's TLS cipher name as a string
request::downstream_tls_protocol() returns the downstream client's TLS protocol version as a string
Adds FromStr implementation for Backend, enabling parsing via .parse::<Backend>()
Backend requests now validate complete URIs and valid backend names, returning errors before transmission

4 details in Everything

└──▷ BREAKING ON UPGRADE

!Blanket RequestExt and ResponseExt implementations for AsRef<[u8]> removed in favor of specific concrete type implementations (e.g., String, &str, Vec<u8>)

Next-Gen WAF for Go 1.7.0 Mar 11, 2020 · release notes

Adds AltResponseCodes option in NGWAF Go v1.7.0 to configure alternative response codes for blocking.

Added the AltResponseCodes configuration option to set alternative (non-406) HTTP response codes used when the WAF blocks a request.

1 detail in Everything

Next-Gen WAF for NGINX (Native) 1.0.38 Mar 11, 2020 · release notes

Next-Gen WAF for NGINX (Native) 1.0.38 adds Alpine Linux platform support

Additional params for listing TLS certificates and domains Mar 6, 2020 · release notes

Adds filtering and sorting params for List all TLS certificates and domains endpoints

Adds not_after filter to the List all TLS certificates endpoint to filter by expiration date.
Adds tls_domains.id filter to the List all TLS certificates endpoint to filter by associated domain ID.
Adds sort[tls_activations.created_at] support and include param for related objects on the List all TLS certificates endpoint.
Adds sort[id] and sort[tls_activations.created_at] options to the List all TLS domains endpoint.

4 details in Everything

GET /events supports sorting by created_at Mar 6, 2020 · release notes

GET /events endpoint now supports sorting by created_at parameter

Adds sort=created_at parameter to GET /events to control event ordering

1 detail in Everything

Next-Gen WAF for IIS 2.0.0 Mar 3, 2020 · release notes

Next-Gen WAF for IIS adds SigsciCtl.exe utility and changes default ports/installs

Replaces PowerShell utilities with SigsciCtl.exe for manual configuration and diagnostics
Changes installer default behavior to per-machine installation (previously per-user)

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Default agent rpc-address changes from port 9999 to port 737
!Installer now defaults to per-machine installation; previous installs may need uninstallation first

Next-Gen WAF for Apache 1.7.15 Mar 2, 2020 · release notes

Next-Gen WAF for Apache adds configurable agent response codes.

Next-Gen WAF for .NET Core 1.2.4 Feb 28, 2020 · release notes

Next-Gen WAF for .NET Core 1.2.4 adds HTTP response AsyncFlush support

AsyncFlush support added to HTTP responses in the Next-Gen WAF module

1 detail in Everything

Next-Gen WAF for Java 2.1.1 Feb 25, 2020 · release notes

Fastly Next-Gen WAF for Java 2.1.1 adds agent response code 429 support

Next-Gen WAF for Apache 1.7.14 Feb 24, 2020 · release notes

Next-Gen WAF for Apache adds agent response code 429 support and CentOS 6 32-bit support.

Added support for agent response code 429
Added support for Apache 2.2 32-bit LSB for CentOS 6 (EL6)

2 details in Everything

Elasticsearch logger supports pipelines Feb 14, 2020 · release notes

Fastly Elasticsearch logger adds pipeline parameter for ingest pipeline support.

Next-Gen WAF for Java 2.1.0 Feb 13, 2020 · release notes

Next-Gen WAF for Java 2.1.0 adds support for Servlets 3.1 async features

Next-Gen WAF for NGINX (Native) 1.0.36 Feb 11, 2020 · release notes

Adds CentOS (EL8) platform support for Fastly Next-Gen WAF for NGINX module.

Added CentOS (EL8) support

1 detail in Everything

Next-Gen WAF for Apache 1.7.12 Feb 4, 2020 · release notes

Next-Gen WAF for Apache adds support for Debian 10 and CentOS 8

Next-Gen WAF for NGINX (Lua) 1.3.1 Jan 30, 2020 · release notes

Fastly NGWAF adds Debian 10 and CentOS 8 platform support

Adds Debian 10 (buster) operating system support for the NGINX Lua module
Adds CentOS 8 (EL8) operating system support for the NGINX Lua module

2 details in Everything

Next-Gen WAF for HAProxy 1.1.8 Jan 24, 2020 · release notes

Adds explicit socket close capability to Next-Gen WAF for HAProxy.

Next-Gen WAF for NGINX (Native) 1.0.35 Jan 21, 2020 · release notes

Fastly releases Next-Gen WAF for NGINX (Native) 1.0.35

Releases packages for NGINX 1.17.8

1 detail in Everything

Fastly Terraform Provider 0.12.0 Jan 21, 2020 · release notes

Adds TLS client cert/key args to fastly_service_v1 syslog resource

Enabling company-wide 2FA logs out users who don't already have 2FA enabled Jan 9, 2020 · release notes

Enabling company-wide 2FA now invalidates sessions for non-compliant users.

Update Customer endpoint now correctly logs out users who do not have 2FA when company-wide enforcement is enabled
Session token invalidation for users lacking 2FA upon company-wide policy enforcement

2 details in Everything

Next-Gen WAF for VMWare Tanzu Tile v1.1.1 Dec 12, 2019 · release notes

Fastly Next-Gen WAF for Tanzu Tile v1.1.1 updates agent config generation and adds supply buildpack checksum verification.

Updates agent config file generation to use new revproxy config options
Added supply buildpack functionality to optionally verify the checksum of the sigsci-agent package

2 details in Everything

Pagination metadata is added to the response from the List All Events endpoint Dec 6, 2019 · release notes

New pagination metadata fields added to GET /events API response

GET /events now returns meta.record_count, meta.current_page, meta.total_pages, and meta.per_page in the response body alongside data and links

1 detail in Everything

Next-Gen WAF for Go 1.6.4 Nov 6, 2019 · release notes

Fastly NGWAF Go v1.6.4 adds support for inspecting gRPC (protobuf) content

Adds the ability to inspect gRPC (protobuf) content within Next-Gen WAF for Go modules.

1 detail in Everything

Next-Gen WAF for Node.js 1.5.1 Oct 17, 2019 · release notes

Fastly NGWAF Node.js module adds Hapi v18 support

Fastly Terraform Provider 0.11.0 Oct 15, 2019 · release notes

Fastly Terraform Provider 0.11.0 adds write_only to dictionary resource and updates provider SDK.

Adds write_only argument to fastly_service_v1/dictionary resource
Includes Terraform version in the User-Agent header for Terraform 0.12+

2 details in Everything

Next-Gen WAF for IIS 1.10.0 Oct 8, 2019 · release notes

Next-Gen WAF for IIS adds TimeoutMillis config parameter to control inspection timeout

Fastly Terraform Provider 0.10.0 Oct 2, 2019 · release notes

Adds cloned_version argument to the fastly_service_v1 resource.

Next-Gen WAF for Node.js 1.5.0 Sep 26, 2019 · release notes

Fastly Next-Gen WAF for Node.js 1.5.0 adds Hapi v18 framework support

Next-Gen WAF for Go 1.6.3 Sep 12, 2019 · release notes

Fastly Next-Gen WAF Go module adds a custom header extractor for POST requests

Next-Gen WAF for NGINX (Native) 1.0.26 Sep 5, 2019 · release notes

Next-Gen WAF for NGINX Native adds support for Debian 10 buster.

Next-Gen WAF for NGINX (Native) 1.0.25 Aug 30, 2019 · release notes

Next-Gen WAF for NGINX Native 1.0.25 adds Amazon Linux image 2018.03 support

Next-Gen WAF for Go 1.6.2 Aug 25, 2019 · release notes

The Go module release introduces an extensible interface for header extraction, enabling custom WAF logic integration.

Added support for a custom header extractor function

1 detail in Everything

Fastly Terraform Provider 0.9.0 Aug 7, 2019 · release notes

Fastly Terraform Provider 0.9.0 adds new resources for ACL entries, dictionary items, and dynamic snippet content.

fastly_service_acl_entries_v1 resource is added to manage access control list entries within a Fastly service configuration
fastly_service_dictionary_items_v1 resource is added to manage key-value pairs in service dictionaries via Terraform
fastly_service_dynamic_snippet_content_v1 resource is added to manage dynamic snippet content for VCL customizations
resource/fastly_service_v1: Add acl argument to configure ACL resources directly on the service resource
resource/fastly_service_v1: Add dictionary argument to configure dictionary resources directly on the service resource

+1 more show less

resource/fastly_service_v1: Add dynamicsnippet argument to configure dynamic snippet resources directly on the service resource

6 details in Everything

Next-Gen WAF for NGINX (Lua) 1.3.0 Jul 12, 2019 · release notes

NGWAF module now identifies rewritten PreRequests.

Changes to the User API Jul 8, 2019 · release notes

Fastly User API /api/v0/corps/_/users now returns simplified role values (owner, admin, user, observer).

GET /api/v0/corps/_/users response JSON keys changed from corpOwner, corpAdmin, corpUser, corpObserver to owner, admin, user, observer respectively.
The API now supports the new simplified role values while maintaining backward compatibility with old values until September 27, 2019.

2 details in Everything

└──▷ BREAKING ON UPGRADE

!On Friday, September 27, 2019, the API will stop returning the old role values (corpOwner, corpAdmin, corpUser, corpObserver).
!Clients relying on the specific string literals corpOwner, corpAdmin, corpUser, or corpObserver in the response JSON will need to update their parsing logic to expect owner, admin, user, or observer.

Fastly Terraform Provider 0.7.0 Jun 25, 2019 · release notes

Fastly Terraform Provider 0.7.0 adds new resource arguments for Fastly service configuration

Adds splunk argument to resource/fastly_service_v1 for Splunk logging integration
Adds blobstoragelogging argument to resource/fastly_service_v1 for blob storage logging
Adds comment argument to resource/fastly_service_v1 for service description
Adds version_comment argument to resource/fastly_service_v1 for version notes
Adds override_host argument to resource/fastly_service_v1/backend for backend host overriding

+1 more show less

Adds validation for the type argument in resource/fastly_service_v1/condition

6 details in Everything

Next-Gen WAF for NGINX (Lua) 1.2.8 Jun 10, 2019 · release notes

NGWAF module 1.2.8 adds PreRequests identification

Updated module to identify PreRequests

1 detail in Everything

Next-Gen WAF for NGINX (Native) 1.0.16 Jun 3, 2019 · release notes

Fastly NGWAF native module v1.0.16 adds Ubuntu 19.04 support.

Added support for Ubuntu 19.04 (Disco Dingo)
Released packages for NGINX 1.16.0

2 details in Everything

Next-Gen WAF for Go 1.6.0 May 30, 2019 · release notes

Fastly Next-Gen WAF Go module 1.6.0 adds http.Flusher support

Adds http.Flusher interface integration when the underlying handler supports this interface

1 detail in Everything

Assign multiple users to a site at once May 22, 2019 · release notes

Bulk site user assignment for Owners and Admins via UI

Adds the ability to assign multiple existing users to a site at once from Corp Users or Site Settings pages

1 detail in Everything

Event page updates May 22, 2019 · release notes

New filters, sticky nav, and persistent buttons added to the Events page UI

Adds filters by IP, signal, and status (Active/Expired) on the Events page.
Makes navigation elements sticky so they follow the user while scrolling.
Automatically scrolls to the top of the page when a new event is selected.
Adds always-persistent Next Event and Previous Event buttons for cycling through events.

4 details in Everything

Next-Gen WAF for IIS 1.9.2 May 22, 2019 · release notes

Fastly Next-Gen WAF 1.9.2 adds new detection signatures for IIS

Next-Gen WAF for Apache 1.7.10 May 7, 2019 · release notes

Fastly's Next-Gen WAF Apache module v1.7.10 expands platform coverage by adding Windows support for Apache 2.4.

Next-Gen WAF for Java 1.2.0 May 3, 2019 · release notes

Fastly Next-Gen WAF for Java 1.2.0 adds Netty support.

Added support for Netty

1 detail in Everything

User Management Updates Apr 25, 2019 · release notes

Enhanced filtering for corp-level users and new tabbed layout for Site Settings page.

Adds enhanced filtering to the Users Page so Owners can focus on specific sites or roles
Moves legacy Site Users page functionality into the Users tab on the Site Settings page

2 details in Everything

Next-Gen WAF for Apache 1.7.8 Mar 25, 2019 · release notes

Adds ServerName field to agent messages in Next-Gen WAF for Apache 1.7.8

Next-Gen WAF for Java 1.1.3 Mar 7, 2019 · release notes

Adds expectedContentTypes config option to Next-Gen WAF for Java 1.1.3

expectedContentTypes accepts space-separated media types to extend the list of valid content types checked before sending post body data.

1 detail in Everything

Announcing Corp Signals Mar 4, 2019 · release notes

Fastly Corp Signals enables central management and reporting of business-specific signals at the corp level.

Adds Corp Signals for managing business-specific signals centrally
New Corp Overview page to report on corp-level signals

2 details in Everything

Stay on top of your corp activity Feb 26, 2019 · release notes

Adds Corp Activity integrations with Slack, Microsoft Teams, and email for admin-level event alerts

Next-Gen WAF for NGINX (Native) 1.0.7 Feb 26, 2019 · release notes

Makes the set rewrite phase the default behavior for NGINX WAF module.

Next-Gen WAF for VMWare Tanzu Tile v1.0.4 Feb 20, 2019 · release notes

Adds supply buildpack functionality to Next-Gen WAF for VMWare Tanzu Tile v1.0.4

Added supply buildpack functionality to prepare for meta-buildpack deprecation.

1 detail in Everything

Next-Gen WAF for Java 1.1.2 Feb 19, 2019 · release notes

Next-Gen WAF for Java module now supports zero-dependency operation and conditional POST body parsing.

Adds the ability for the Java module to work without any external dependencies
Changes the module to parse POST body only when content-type is application/x-www-form-urlencoded

2 details in Everything

Fastly Terraform Provider 0.6.0 Feb 8, 2019 · release notes

Fastly Terraform Provider 0.6.0 adds activate argument and request/response logging support.

Adds activate argument to fastly_service_v1 resource to control service activation state directly in configuration
Enables request/response logging at the provider level (issue #120)

2 details in Everything

Brand new Corp Overview Jan 29, 2019 · release notes

Fastly releases new Corp Overview with request graphs, Signal Trends table, and filtering.

Adds Signal Trends table to view corp-level Signal counts across all monitored properties
Adds new request graphs for visualizing attack traffic across all monitored properties and site-by-site summaries
Adds filtering and pagination tools including a time range selector (day, week, month) to the Corp Overview page

3 details in Everything

Next-Gen WAF for Java 1.1.1 Jan 25, 2019 · release notes

Fastly Next-Gen WAF for Java adds a config option to handle missing POST bodies in async handlers

Adds enable_async_post_body_workaround config key to bypass missing post body during asynchronous request handling

1 detail in Everything

Updated Permissions and Roles Jan 17, 2019 · release notes

Fastly introduces Admin role for multi-site management

Introduces the Admin role, allowing users to manage specific sites with Site Admin permissions without corp-wide visibility.
Updates existing Corp Owner users to automatically have full access to all sites within their corporation.

2 details in Everything

└──▷ BREAKING ON UPGRADE

!The option for Corp Owners to optionally choose site membership is removed; they now have default Site Owner permissions on every site.

Fastly Terraform Provider 0.5.0 Jan 8, 2019 · release notes

Fastly Terraform Provider 0.5.0 adds placement argument to logging resources

Adds the placement argument to resource/fastly_service_v1/s3logging, allowing control over log placement.
Adds the placement argument to resource/fastly_service_v1/papertrail, allowing control over log placement.
Adds the placement argument to resource/fastly_service_v1/sumologic, allowing control over log placement.
Adds the placement argument to resource/fastly_service_v1/gcslogging, allowing control over log placement.
Adds the placement argument to resource/fastly_service_v1/bigquerylogging, allowing control over log placement.

+2 more show less

Adds the placement argument to resource/fastly_service_v1/syslog, allowing control over log placement.
Adds the placement argument to resource/fastly_service_v1/logentries, allowing control over log placement.

7 details in Everything

Introducing Corp Lists! Dec 13, 2018 · release notes

Fastly introduces Corp Lists for managing lists at the organization level via Library > Corp Lists.

Adds Corp Lists accessible via Library > Corp Lists in corp-level navigation to manage lists centrally across multiple sites
Enables Corp Owners to use list items in any site-level rule for centralized management of entities like OFAC-sanctioned countries or scanner IPs

2 details in Everything

Customize the Monitor View Nov 19, 2018 · release notes

Monitor View now reflects custom Overview page graphs and arrangements instead of fixed defaults.

Monitor displays custom Overview page graphs or arrangements in a grid (showing first 6 cards) or carousel (cycling through all cards).

1 detail in Everything

Check out the new Custom Signals page! Nov 14, 2018 · release notes

Fastly adds a dedicated Custom Signals page for monitoring signal usage across Rules and Alerts.

Adds a new Custom Signals page under Configure > Custom Signals to monitor traffic visibility
Displays the number of Requests tagged with a signal in the past 7 days on the Custom Signals page
Shows the count of Rules that add a specific Custom Signal via the new UI
Shows the count of Alerts that use a specific Custom Signal via the new UI

4 details in Everything

Rules Simplification Nov 8, 2018 · release notes

Fastly merges Request and Signal Rules management into a single unified page with filtering.

Next-Gen WAF for IIS 1.7.3 Nov 8, 2018 · release notes

Adds agentHost, MaxPostSize, AnomalySize, and AnomalyDurationMillis config options; changes default RPC to v0

Adds agentHost configuration option
Adds MaxPostSize configuration option
Adds AnomalySize configuration option
Adds AnomalyDurationMillis configuration option
Sets default RPC version to RPCv0

5 details in Everything

└──▷ BREAKING ON UPGRADE

!The default RPC version is now RPCv0 (changed from the previous default).

Next-Gen WAF for Java 1.1.0 Oct 31, 2018 · release notes

Next-Gen WAF for Java 1.1.0 updates JARs to match Maven conventions.

sigsci-module-java-{version}.jar contains the module classes without dependencies
sigsci-module-java-{version}-shaded.jar bundles dependencies following maven shaded classifier

2 details in Everything

Coming soon: Updated roles and permissions Oct 22, 2018 · release notes

New Admin role for granular site management and updated Owner permissions across all sites.

Introduces the Admin role, granting Site Admin permissions on specific sites including inviting users and editing configurations/agent mode.
Expands the Owner role to automatically have full access and owner permissions across every site within their corp.
Adds the Observer role for read-only view of specific sites with limited corp-level visibility.
Changes Corp Owner default behavior to grant Site Owner permissions by default, removing the optional site membership choice.

4 details in Everything

└──▷ BREAKING ON UPGRADE

!The optional ability for a Corp Owner to choose whether they are a member of specific sites is removed; they now have access to every site within their corp by default.

Next-Gen WAF for Apache 1.7.6 Oct 3, 2018 · release notes

Adds SigSciAgentPostLen config to disable post body processing in Next-Gen WAF for Apache 1.7.6

Fastly Terraform Provider 0.4.0 Oct 2, 2018 · release notes

Fastly Terraform Provider 0.4.0 adds snippet, director, and bigquerylogging template support to fastly_service_v1 resource

Adds snippet argument to resource/fastly_service_v1 to embed Fastly snippets directly in the Terraform configuration
Adds director argument to resource/fastly_service_v1 to configure load balancing directors within the service resource
Adds template argument to resource/fastly_service_v1/bigquerylogging block to define BigQuery logging formats

3 details in Everything

Next-Gen WAF Heroku Buildpack 0.1.9 Oct 1, 2018 · release notes

Next-Gen WAF Heroku Buildpack 0.1.9 adds health check logic for reverse-proxied app status

Next-Gen WAF for NGINX (Lua) 1.2.6 Oct 1, 2018 · release notes

Next-Gen WAF for NGINX (Lua) 1.2.6 adds SIGSCI_NGINX_DISABLE_JIT env var to disable JIT and explicit socket close support

Adds SIGSCI_NGINX_DISABLE_JIT environment variable to disable the JIT compiler.

1 detail in Everything

Fastly Terraform Provider 0.3.0 Aug 2, 2018 · release notes

Adds bigquerylogging argument to the fastly_service_v1 resource for Cloud Logging support.

Next-Gen WAF for Apache 1.7.5 Jun 7, 2018 · release notes

Adds ability to forward requests to agent when TLS parameters are missing.

Added ability to send request to agent despite missing TLS parameters

1 detail in Everything

Fastly Terraform Provider 0.2.0 Jun 4, 2018 · release notes

Fastly Terraform Provider 0.2.0 adds s3logging redundancy override and provider URL/user-agent overrides.

Adds redundancy argument to resource/fastly_service_v1/s3logging resource
Adds support for overriding base API URL in the provider configuration
Adds support for overriding user agent in the provider configuration

3 details in Everything

Next-Gen WAF for Go 1.4.0 May 24, 2018 · release notes

Fastly NGWAF Go adds multipart/form-data support, WebSocket response writer, and CONNECT/OPTIONS inspection.

Added support for multipart/form-data post
Updated response writer interface to allow for WebSocket use
Removed default filters on CONNECT/OPTIONS methods - now inspected by default

3 details in Everything

└──▷ BREAKING ON UPGRADE

!The default filters on CONNECT and OPTIONS methods are removed, meaning these methods are now inspected by default rather than filtered out.

Next-Gen WAF for NGINX 1.12 (Lua) 1.1.1 May 21, 2018 · release notes

Adds Debian 7 (wheezy) package support for Fastly NGINX WAF

Next-Gen WAF for Apache 1.7.2 May 16, 2018 · release notes

Next-Gen WAF for Apache 1.7.2 introduces configuration validation and granular control over the SigSciAgentInspection directive.

Next-Gen WAF for Apache 1.7.0 May 1, 2018 · release notes

Adds SigSciRunBeforeModulesList and SigSciRunAfterModulesList global directives to control module execution order.

Adds the SigSciRunBeforeModulesList global directive.
Adds the SigSciRunAfterModulesList global directive.

2 details in Everything

Next-Gen WAF for NGINX (Lua) 1.2.4 Apr 26, 2018 · release notes

Next-Gen WAF for NGINX 1.2.4 adds --rpc-version=1 to enable TCP/Unix socket connection reuse.

--rpc-version=1 allows the agent to reuse TCP or Unix socket connections

1 detail in Everything

Next-Gen WAF for NGINX (Lua) 1.2.3 Apr 6, 2018 · release notes

Adds Ubuntu 18.04 (Bionic Beaver) package for Next-Gen WAF for NGINX (Lua) 1.2.3.

Next-Gen WAF for Apache 1.6.1 Apr 6, 2018 · release notes

Fastly Next-Gen WAF 1.6.1 adds SigSciEnableFixups directive and renames existing directives with SigSci prefix

SigSciEnableFixups directive added to control whether the module runs after other modules like mod_auth_oidc.
All existing directive names renamed to include the SigSci prefix for consistency.

2 details in Everything

└──▷ BREAKING ON UPGRADE

!All existing directives have been renamed to include the SigSci prefix (e.g., a directive named OldDirective is now SigSciOldDirective).

Next-Gen WAF for NGINX (Lua) 1.2.2 Mar 27, 2018 · release notes

Fastly NGWAF adds native Kong plugin support and Debian 9 packaging for Next-Gen WNGINX module.

Adds a kong plugin to the Next-Gen WAF for NGINX (Lua) package
Adds Debian 9 (stretch) package availability

2 details in Everything

Next-Gen WAF for IIS 1.7.1 Mar 22, 2018 · release notes

Fastly NGWAF for IIS 1.7.1 adds an MSI installer to the standardised release process.

Adds an MSI installer package for deploying Next-Gen WAF for IIS

1 detail in Everything

Next-Gen WAF for VMWare Tanzu Tile v1.0.0 Mar 8, 2018 · release notes

Initial GA release of Next-Gen WAF for VMware Tanzu Tile removes legacy decorator requirement.

Removes the requirement for creating the .enable_sigsci_decorator file.

1 detail in Everything

Next-Gen WAF for NGINX (Lua) 1.2.1 Jan 30, 2018 · release notes

Fastly's Next-Gen WAF for NGINX 1.2.1 adds multipart/form-data POST support

Next-Gen WAF for Node.js 1.4.7 Jan 29, 2018 · release notes

Next-Gen WAF for Node.js 1.4.7 now supports multipart/form-data POST requests.

Next-Gen WAF for Apache 1.5.7 Jan 24, 2018 · release notes

Version 1.5.7 enables processing of multipart/form-data POST requests for enhanced web application firewall capabilities.

Next-Gen WAF for IIS 1.6.6 Jan 23, 2018 · release notes

Next-Gen WAF for IIS 1.6.6 adds multipart/form-data POST support and debug logging

Adds support for parsing and inspecting multipart/form-data POST requests in the Web Application Firewall
Adds a debug logging option to emit verbose internal state information

2 details in Everything

Next-Gen WAF for HAProxy 1.1.1 Jan 12, 2018 · release notes

Next-Gen WAF for HAProxy 1.1.1 updates core to HAProxy 1.8 and adds multipart/form-data POST support.

Updated to HAProxy 1.8 (ISSUE-10459)

1 detail in Everything

Fastly Terraform Provider 0.1.3 Dec 18, 2017 · release notes

Fastly Terraform Provider 0.1.3 adds logentries and syslog arguments to fastly_service_v1 resource.

Adds logentries argument to resource/fastly_service_v1 for configuring log entries
Adds syslog argument to resource/fastly_service_v1 for configuring syslog settings
Adds message_type argument to the resource/fastly_service_v1/syslog resource for specifying message types

3 details in Everything

Next-Gen WAF for .NET 1.5.2 Dec 12, 2017 · release notes

Fastly Next-Gen WAF .NET module adds multipart form post support in v1.5.2

Next-Gen WAF Heroku Buildpack 0.1.8 Nov 14, 2017 · release notes

Next-Gen WAF Heroku Buildpack adds SIGSCI_AGENT_URL to override agent download source.

SIGSCI_AGENT_URL environment variable now allows direct specification of the agent download URL.

1 detail in Everything

Next-Gen WAF for IIS 1.6.5 Nov 8, 2017 · release notes

Next-Gen WAF for IIS 1.6.5 now sends sensitive headers to agent with automatic redaction.

Always forwards sensitive headers to the agent; the agent redacts them before processing.

1 detail in Everything

Next-Gen WAF Heroku Buildpack 0.1.7 Oct 17, 2017 · release notes

Next-Gen WAF Heroku Buildpack 0.1.7 adds wait-for support and unicorn port handling

wait-for command is now available during dyno startup to ensure the web process starts before the agent.
Handles port assignment for unicorn app startup commands.

2 details in Everything

Next-Gen WAF for Java 0.4.0 Aug 3, 2017 · release notes

Adds java servlet filter support to Next-Gen WAF for Java 0.4.0.

Fastly Terraform Provider 0.1.2 Aug 2, 2017 · release notes

Fastly Terraform Provider 0.1.2 adds ssl_ca_cert, message_type, and env var support for secrets.

Adds ssl_ca_cert argument to resource/fastly_service_v1/backend
Adds message_type argument to resource/fastly_service_v1/s3logging
Adds environment variable support for the secret_key argument in resource/fastly_service_v1/gcslogging

3 details in Everything

Next-Gen WAF for Apache 1.5.1 Jul 24, 2017 · release notes

Fastly NGWAF for Apache 1.5.1 adds XML inspection and Alpine Linux support.

Adds XML parsing support and inspection capabilities to the WAF module
Adds Alpine Linux platform support

2 details in Everything

Next-Gen WAF for NGINX 1.12 (Lua) 1.0.1 Jul 22, 2017 · release notes

Fastly NGINX WAF adds per-point version packages and Jenkins build number support for RPM releases

Added per-point version packages to allow more granular version control in the NGINX module distribution

1 detail in Everything

Next-Gen WAF for NGINX 1.10 (Lua) 2.3.2 Apr 17, 2017 · release notes

Next-Gen WAF for NGINX 1.10 (Lua) 2.3.2 adds an amazonlinux 2016.09 package.

Next-Gen WAF for IIS 1.6.0 Apr 16, 2017 · release notes

Next-Gen WAF for IIS adds a configurable stats page for internal performance counters.

stats page enabled via README.md configuration to expose request counts, error counts, RPC call counts, and RCP call timing information.

1 detail in Everything

Next-Gen WAF for Java 0.3.0 Apr 5, 2017 · release notes

Next-Gen WAF for Java 0.3.0 adds XML-like post body forwarding and Unix RPC.

Added ability to forward XML-like post bodies to agent
Revamped TCP RPC
Initial Unix RPC

3 details in Everything

Next-Gen WAF for VMWare Tanzu Tile v0.0.24 Mar 27, 2017 · release notes

Adds SIGSCI_AGENT_VERSION and SIGSCI_REQUIRED config options for VMWare Tanzu Tile

Add configuration option for specifying SIGSCI_AGENT_VERSION.
Add configuration option for specifying SIGSCI_REQUIRED.

2 details in Everything

Next-Gen WAF for Node.js 1.4.3 Mar 22, 2017 · release notes

Adds ability to forward XML-like POST request bodies to the WAF agent

Next-Gen WAF for Go 1.2.1 Mar 21, 2017 · release notes

Version 1.2.1 of Fastly's Next-Gen WAF for Go adds XML post body support and improves content-type processing.

Adds ability to send XML post bodies to agent
Improved content-type processing

2 details in Everything

Next-Gen WAF Cloud Foundry Buildpack 0.1.3 Mar 16, 2017 · release notes

Release introduces configurable health checks for the WAF agent and upstream processes.

Adds configurable health check feature for the agent listener
Adds configurable health check feature for the upstream app process

2 details in Everything

Next-Gen WAF for Node.js 1.4.2 Mar 7, 2017 · release notes

Next-Gen WAF for Node.js 1.4.2 adds connection closing in UpdateResponse and PostResponse callbacks

Adds UpdateResponse callback to close the connection early

1 detail in Everything

Next-Gen WAF Cloud Foundry Buildpack 0.1.1 Mar 3, 2017 · release notes

Next-Gen WAF Cloud Foundry Buildpack adds configurable agent version and access logging via env vars

Adds SIGSCI_AGENT_VERSION environment variable to specify the agent version.
Adds SIGSCI_REVERSE_PROXY_ACCESSLOG environment variable to enable access logging by specifying a log file path.

2 details in Everything

Next-Gen WAF Heroku Buildpack 0.1.3 Mar 3, 2017 · release notes

Next-Gen WAF Heroku Buildpack 0.1.3 adds configurable agent version and access logging via env vars.

SIGSCI_AGENT_VERSION environment variable added to control the specific Next-Gen WAF agent version
SIGSCI_REVERSE_PROXY_ACCESSLOG environment variable added to enable access logging by specifying a log file path

2 details in Everything

└──▷ BREAKING ON UPGRADE

!Access logging is now disabled by default; previously it may have been enabled or the behavior was undefined, requiring explicit configuration via SIGSCI_REVERSE_PROXY_ACCESSLOG to enable.

Next-Gen WAF Heroku Buildpack 0.1.2 Mar 2, 2017 · release notes

The Next-Gen WAF Heroku Buildpack now supports Scala applications, ensuring correct port configuration during the build process.

Next-Gen WAF for Java 0.1.6 Feb 10, 2017 · release notes

Fastly NGWAF Java module adds Jetty 9.3.x and 9.4.x support

Added support for jetty 9.3.x and 9.4.x

1 detail in Everything

Next-Gen WAF for NGINX 1.10 (Lua) 2.2.1 Dec 23, 2016 · release notes

This release expands platform support for Next-Gen WAF by providing native packages for Debian 8 and upgrading its underlying lua-nginx-module dependency.

Adds debian8 packages to distribute the cyber tooling on Debian 8 systems.

1 detail in Everything

Next-Gen WAF for VMWare Tanzu Tile v0.0.12 Dec 22, 2016 · release notes

Initial release of Fastly's Next-Gen WAF for VMware Tanzu Tile v0.0.12

Next-Gen WAF for NGINX (Lua) 1.1.5 Nov 30, 2016 · release notes

Adds log_debug config option for Next-Gen WAF debugging and LuaJIT compatibility checks.

Added log_debug option to aid in debugging
Added ability to detect and warn for non-LuaJIT installs

2 details in Everything

Next-Gen WAF for Apache 1.4.4 Oct 27, 2016 · release notes

Increases max post-body size and default timeout in Next-Gen WAF for Apache

NGWAF_MAX_BODY_SIZE increased from 128KB to 4GB, allowing larger HTTP POST payloads.
Default timeout setting increased from 5ms to 100ms, matching NGINX behavior.

2 details in Everything

Next-Gen WAF for Java 0.1.5 Sep 30, 2016 · release notes

Adds jetty handler source example in Fastly Next-Gen WAF for Java 0.1.5

Next-Gen WAF for Java 0.1.4 Sep 20, 2016 · release notes

Adds ability to configure header forwarding to the WAF agent for inspection in Next-Gen WAF for Java

Sends all HTTP headers to the WAF agent for inspection

1 detail in Everything

Next-Gen WAF for Apache 1.4.3 Sep 15, 2016 · release notes

Adds support for mod_remoteip overrides to determine client IP.

Added support for mod_remoteip over-rides of the client IP address

1 detail in Everything

Next-Gen WAF for NGINX 1.11 (Lua) 1.11.3.2 Sep 9, 2016 · release notes

Fastly NGWAF module for Nginx adds CentOS 6 platform support

Adds CentOS 6 to the list of supported operating systems for the Next-Gen WAF for NGINX 1.11 (Lua) module.

1 detail in Everything

Next-Gen WAF for NGINX 1.10 (Lua) 1.10.1.2 Sep 9, 2016 · release notes

Fastly Next-Gen WAF for NGINX 1.10 adds CentOS 6 support in v1.10.1.2.

Next-Gen WAF for Java 0.1.0 Sep 8, 2016 · release notes

Fastly releases Next-Gen WAF for Java 0.1.0 beta

Next-Gen WAF for NGINX 1.10 (Lua) 1.10.1.1 Aug 23, 2016 · release notes

Fastly releases Next-Gen WAF for NGINX Lua module version 1.10.1.1

Next-Gen WAF for Node.js 1.3.0 Aug 15, 2016 · release notes

Next-Gen WAF for Node.js 1.3.0 adds initial Hapi framework support

Next-Gen WAF for NGINX (Lua) 1.1.2 Jul 20, 2016 · release notes

Fastly Next-Gen WAF for NGINX 1.1.2 adds a new download URL for the module archive.

Adds a new download URL https://dl.signalsciences.net/sigsci-module-nginx/sigsci-module-nginx_latest.tar.gz to obtain the latest module version

1 detail in Everything

Next-Gen WAF for NGINX (Lua) 1.1.0 Jul 13, 2016 · release notes

Next-Gen WAF for NGINX (Lua) 1.1.0 introduces XML inspection support and systemd compatibility via config changes

Allows XML mime types to be passed through to the Agent for document inspection
Removes header filtering from the module to enable custom rules on cookie data at the Agent level

2 details in Everything

Next-Gen WAF for Node.js 1.1.0 May 12, 2016 · release notes

Fastly Next-Gen WAF Node.js v1.1.0 adds Restify support and standardizes Express middleware integration.

Adds Restify framework support to the Next-Gen WAF for Node.js module
Standardizes support for Node.js Express to behave like other express middleware

2 details in Everything

Next-Gen WAF for Node.js 1.0.0 May 2, 2016 · release notes

Fastly launches Next-Gen WAF for Node.js with initial v1.0.0 support.

Initial release of the Next-Gen WAF module for Node.js applications

1 detail in Everything

Next-Gen WAF for Apache 0.340 Apr 15, 2016 · release notes

Next-Gen WAF for Apache adds support for Apache 2.4 on RHEL/CentOS 6

Next-Gen WAF for Apache 0.338 Apr 10, 2016 · release notes

Fastly Next-Gen WAF for Apache 0.338 adds RHEL/CentOS 5 support

RHEL/CentOS 5 platform support is added to the module

1 detail in Everything

Next-Gen WAF for Apache 0.317 Feb 26, 2016 · release notes

Next-Gen WAF for Apache 0.317 adds blocklisted HTTP method detection and backward compatibility with RPCv1.

Inverts HTTP method inspection logic to use a blocklist (e.g., OPTIONS, CONNECT) instead of an allowlist, improving detection of invalid or malicious requests
Adds backward compatibility support for the agent RPCv1 protocol via the -rpc-version=1 argument

2 details in Everything

Next-Gen WAF for NGINX (Lua) 1.0.0+416 Feb 26, 2016 · release notes

Adds rpc-version=1 flag for backward compatibility with agent RPCv1 protocol.

Next-Gen WAF for Apache 0.311 Feb 3, 2016 · release notes

Fastly Next-Gen WAF for Apache 0.311 adds inspection of HEAD requests.

Added support for inspecting HEAD requests

1 detail in Everything

Next-Gen WAF for NGINX (Lua) 1.0.0+407 Jan 27, 2016 · release notes

Adds inspection of HEAD requests to the Next-Gen WAF for NGINX (Lua) module.

Added support for inspecting HEAD requests

1 detail in Everything

Next-Gen WAF for NGINX (Lua) 1.0.0+369 Sep 15, 2015 · release notes

Adds optional site access key specification in prerequest and postrequest functions.

Added ability to specify a site access key in prerequest function
Added ability to specify a site access key in postrequest function

2 details in Everything

Next-Gen WAF for NGINX (Lua) 1.0.0+361 Aug 17, 2015 · release notes

Next-Gen WAF for NGINX (Lua) 1.0.0+361 adds plain Lua support and startup component logging

Allows module to run using plain Lua (not LuaJIT)
Adds a startup notice message in the error log describing the components used

2 details in Everything

Next-Gen WAF for Apache 0.214 Jul 31, 2015 · release notes

Next-Gen WAF for Apache 0.214 adds Scheme and TLS/SSL info reporting to agent.

Adds the ability to send HTTP scheme (e.g., http, https) information to the agent.
Adds the ability to send back TLS (SSL) information to the agent.

2 details in Everything

Next-Gen WAF for NGINX (Lua) 1.0.0+346 Jul 31, 2015 · release notes

Adds scheme, TLS protocol, and cipher suite forwarding to the NGWAF agent

Adds ability to send http or https scheme information to agent
Adds ability to send TLS (SSL) protocol and cipher suite information to agent

2 details in Everything

Next-Gen WAF for Apache 0.207 Jul 20, 2015 · release notes

Next-Gen WAF for Apache 0.207 adds X-SigSci-AgentResponse and X-SigSci-RequestID headers; requires Agent 1.8.3186+ for tags.

Requires Agent 1.8.3186 or later to receive the X-SigSci-Tags header indicating detections

1 detail in Everything

Next-Gen WAF for Apache 0.144 Jul 6, 2015 · release notes

Next-Gen WAF for Apache 0.144 adds PATCH method inspection and response header forwarding.

Added support to inspect PATCH HTTP methods
Enabled sending of response headers to Agent

2 details in Everything

Next-Gen WAF for NGINX (Lua) 1.0.0+322 Jul 6, 2015 · release notes

Adds HTTP PATCH method inspection in Fastly NGWAF 1.0.0+322

Adds PATCH to the list of HTTP methods supported by WAF inspection rules

1 detail in Everything

Fastly

Summary

How Fastly helps

Languages

Features

What Fastly offers you

release 26 total

example

release 19 total

release 13 total

example

release

docs

release

docs

example

release

docs

release

docs

release

release

release 14 total

example

release 13 total

example

release 12 total

example

release 12 total

example

release 11 total

release

release

example

release

release

example

docs

release 40 total

release 17 total

example

release 13 total

example

release

example

release 8 total

example

release

example

release

release

release

release 26 total

example

release 25 total

release 14 total

example

release 14 total

example

release

release

example

release 107 total

example

release 83 total

release 64 total

example

release 29 total

release 16 total

docs

example

release 21 total

release 21 total

release 20 total

release 19 total

release 17 total

example

release 18 total

release 17 total

release 16 total