Fastly — The Cyber Toolchain

Fastly Fastly Terraform Provider (beta) 0.2.7 (2026-11-03)

Tue, 03 Nov 2026 00:00:00 GMT

Fastly Terraform Provider (beta) adds audit log event routing, domain management routing configs, and a new migration CLI foundation⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `fastly_audit_log_event_mapping` resource and data source to route audit log events to integrations.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `fastly_routing_config_auto` and `fastly_routing_config_domain_link` resources for domain management routing configs with automatic versioning. • Adds initial `fastly-tf-migrate` CLI foundation with version reporting and dedicated build/test targets for Terraform migration workflows. • Adds a typed legacy-to-`_auto` compatibility registry to support Terraform migration analysis. • Adds support for legacy simple product enablement state during VCL-to-CDN Auto migration in `fastly_service_cdn_auto`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly JavaScript SDK 4.1.0 (2026-11-03)

Tue, 03 Nov 2026 00:00:00 GMT

Fastly JavaScript SDK 4.1.0 upgrades StarlingMonkey to v0.4.0⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Fastly JavaScript SDK now uses StarlingMonkey v0.4.0.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly Terraform Provider (beta) 0.2.6 (2026-10-27)

Tue, 27 Oct 2026 00:00:00 GMT

Fastly Terraform Provider (beta) 0.2.6 adds automated virtual patching support and a VCL-to-CDN-auto state migration path.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds automated virtual patching support to the `ngwafworkspace` resource.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a proof-of-concept state migration path from legacy `fastly_service_vcl` resources to `service_cdn_auto`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Rust SDK 0.13.2 (2026-10-27)

Tue, 27 Oct 2026 00:00:00 GMT

Rust SDK 0.13.2 adds VPN/proxy client detection, product enumeration, and between-bytes timeout for shield backends.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Request::get_vpn_proxy_data`, `Request::get_vpn_proxy_*`, and `RequestHandle::vpn_proxy_*` methods to expose metadata for detecting whether a downstream client is residential, a VPN, or a proxy.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `fastly::compute_runtime::products` to report which products are enabled on the service. • Supports adding a between-bytes timeout for shield backends. • When `Request::with_image_optimizer` is used on a service where Image Optimizer is not enabled, the origin response is passed through unmodified with a `Fastly-Io-Error` response header instead of failing. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly CLI v17.0.0 (2026-10-26)

Mon, 26 Oct 2026 00:00:00 GMT

Fastly CLI v17.0.0 adds `--autoEnableNewVirtualPatches` flag to NGWAF workspace commands for Automated Virtual Patching.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--autoEnableNewVirtualPatches` flag to `ngwaf workspace create` and `ngwaf workspace update` for Automated Virtual Patching, and surfaces it in `ngwaf workspace get`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Breaking changes: • `ai-runtime-control key create` no longer accepts the `--user-id` flag, which was removed from the API. • `--json` output for `ai-runtime-control usage-metrics list`, `ngwaf workspace list`, `ngwaf rule list`, and `ngwaf workspace rule list` is now a bare array instead of an object with `data` and `meta` fields. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Automatically enable new virtual patches for Next-Gen WAF workspaces (2026-10-22)

Thu, 22 Oct 2026 00:00:00 GMT

Next-Gen WAF workspaces gain `auto_enable_new_virtual_patches` to block new virtual patches automatically without manual enablement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `auto_enable_new_virtual_patches` setting to Next-Gen WAF workspaces: when `true`, virtual patches released after the setting is enabled are automatically activated in block mode, requiring no per-patch manual action.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Automatically enable CVE virtual patches (2026-10-22)

Thu, 22 Oct 2026 00:00:00 GMT

Fastly adds Automatic CVE Virtual Patching setting to apply future CVE patches to your workspace on release.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables the 'Automatic CVE Virtual Patching' setting in the Fastly control panel to auto-apply all future CVE virtual patches to a workspace as soon as they are released.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly Terraform Provider (beta) 0.2.5 (2026-10-22)

Thu, 22 Oct 2026 00:00:00 GMT

Adds `api_endpoint` provider argument and `FASTLY_API_URL` env var to target non-default Fastly API endpoints (HTTPS only).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `api_endpoint` provider argument and `FASTLY_API_URL` environment variable to target a non-default Fastly API endpoint (HTTPS only).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly Terraform Provider 10.0.0 (2026-10-21)

Wed, 21 Oct 2026 00:00:00 GMT

Fastly Terraform Provider 10.0.0 adds multi-service monitoring in a single alert resource.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds support for monitoring multiple services using a single `alert` resource.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Breaking changes: • The `user_id` argument in `ai_runtime_control_virtual_key` is no longer configurable — it is now a computed (read-only) attribute. Any Terraform configuration that sets `user_id` will fail to plan after upgrading. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly Terraform Provider (beta) 0.2.4 (2026-10-20)

Tue, 20 Oct 2026 00:00:00 GMT

Extends the beta testing guide with an explicit resource family workflow using terraform query and service-scoped discovery.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Extends the beta testing guide with an explicit resource family workflow using `terraform query` and service-scoped discovery.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Retrieve historical metrics with improved performance and flexibility (2026-10-20)

Tue, 20 Oct 2026 00:00:00 GMT

Fastly adds Platform Metrics V2 API endpoints with cursor-based pagination, predefined metric sets, and flexible grouping.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds new Platform Metrics API endpoints for retrieving historical metrics data with cursor-based pagination for large datasets.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports predefined metric sets that bundle related metrics for simpler querying. • Enables grouping of historical metrics by point of presence or datacenter. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly CLI v16.2.0 (2026-10-15)

Thu, 15 Oct 2026 00:00:00 GMT

Fastly CLI v16.2.0 adds routing-config support, GCS public-key logging flag, and a short `-h` help flag.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds CLI support for routing configs via the new `routing-config` subcommand.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `--public-key` flag to GCS logging commands (`service/logging`). • Adds `-h` as a short alias for `--help` across all commands. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly Terraform Provider (beta) 0.2.3 (2026-10-13)

Tue, 13 Oct 2026 00:00:00 GMT

Fastly Terraform Provider (beta) 0.2.3 adds five new resource types and optional service_id filtering for List Resources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds optional `service_id` filtering to service-scoped Terraform query List Resources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `fastly_service_request_setting` explicit/default resource with Terraform query support. • Adds `fastly_service_response_object` explicit/default resource with Terraform query support. • Adds `fastly_service_resource_link` explicit resource with Terraform query support. • Adds support for explicit image optimizer defaults via `image_optimizer_default_explicit` with Terraform query support. Breaking changes: • Enum attributes `action`, `xff`, and `logger_type` on `request_setting`, `cache_setting`, and `rate_limiter` resources now only accept lowercase values — uppercase values that previously worked will now be rejected. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Purge a service's staging environment through the API (2026-10-05)

Mon, 05 Oct 2026 00:00:00 GMT

Fastly API now supports targeted cache purges for staging environments via the `Fastly-Purge-Environment: staging` header.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `Fastly-Purge-Environment: staging` header support to purge-everything, purge-by-surrogate-key, and purge-multiple-surrogate-key-tags API requests, scoping the purge to the staging environment instead of production.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports purging an individual URL from the staging environment by sending a purge-a-URL request to the staging IP address of the service. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly New anomaly signal: INSECURE-DESER (2026-10-05)

Mon, 05 Oct 2026 00:00:00 GMT

Fastly NGWAF adds INSECURE-DESER anomaly signal to detect insecure deserialization attempts.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `INSECURE-DESER` anomaly signal to the NGWAF to detect attempts to exploit unsafe deserialization of data, with planned promotion to a full attack signal in a future release.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Challenge suspicious clients with DDoS Protection rules (2026-10-01)

Thu, 01 Oct 2026 00:00:00 GMT

Fastly DDoS Protection rules gain a `client_challenge` action to challenge suspicious clients instead of blocking them.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `client_challenge` as a new action for DDoS Protection rules, letting suspicious clients prove legitimacy instead of being blocked outright — also returned in list/retrieve rule responses alongside `default`, `block`, `log`, and `off`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly Terraform Provider 9.8.0 (2026-10-01)

Thu, 01 Oct 2026 00:00:00 GMT

Fastly Terraform Provider 9.8.0 adds `fastly_routing_config` and `fastly_routing_config_domain_link` resources for Domain Management routing configs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `fastly_routing_config` and `fastly_routing_config_domain_link` Terraform resources for managing Domain Management routing configs with automatic versioning and linking them to domains.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Add Network Protect API (2026-09-29)

Tue, 29 Sep 2026 00:00:00 GMT

Fastly adds a Network Protect API for programmatic DDoS filtering, IP prefix registration, GRE endpoints, and rule management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the Network Protect API, enabling programmatic registration of customer-owned IP prefixes, configuration of GRE delivery endpoints, management of reusable source prefix lists, and definition of ordered rules for filtering network-layer DDoS traffic.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly Terraform Provider (beta) 0.2.0 (2026-09-29)

Tue, 29 Sep 2026 00:00:00 GMT

Fastly Terraform Provider beta 0.2.0 adds 20+ new logging integrations, 10+ data sources, and explicit resource management for Edge Dictionaries, Gzip, and Cache Settings.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `fastly_service_logging_grafanacloudlogs` resource for streaming logs to Grafana Cloud Logs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `fastly_service_logging_digitalocean` resource for streaming logs to DigitalOcean Spaces. • Adds `fastly_service_logging_elasticsearch` resource for streaming logs to Elasticsearch. • Adds `fastly_service_logging_ftp` resource for streaming logs via FTP. • Adds `fastly_service_logging_googlepubsub` resource for streaming logs to Google Cloud Pub/Sub. • Adds `fastly_service_logging_heroku` resource for streaming logs to Heroku. • Adds `fastly_service_logging_kafka` resource for streaming logs to Kafka. • Adds `fastly_service_logging_honeycomb` resource for streaming logs to Honeycomb. • Adds `fastly_service_logging_logshuttle` resource for streaming logs to Log Shuttle. • Adds `fastly_service_logging_loggly` resource for streaming logs to Loggly. • Adds `fastly_service_logging_kinesis` resource for streaming logs to AWS Kinesis. • Adds `fastly_service_logging_scalyr` resource for streaming logs to Scalyr. • Adds `fastly_service_logging_openstack` resource for streaming logs to OpenStack. • Adds `fastly_service_logging_sftp` resource for streaming logs via SFTP. • Adds `fastly_service_logging_papertrail` resource for streaming logs to Papertrail. • Adds `fastly_service_logging_bigquery` resource for streaming logs to BigQuery. • Adds `fastly_service_logging_blobstorage` resource for streaming logs to Azure Blob Storage. • Adds `fastly_service_logging_datadog` resource for streaming logs to Datadog. • Adds `fastly_service_logging_gcs` resource for streaming logs to Google Cloud Storage. • Adds `fastly_service_logging_https` resource for streaming logs via HTTPS. • Adds `fastly_service_logging_newrelic` resource for streaming logs to New Relic. • Adds `fastly_service_logging_newrelicotlp` resource for streaming logs to New Relic via OTLP. • Adds `fastly_service_logging_s3` resource for streaming logs to Amazon S3. • Adds `fastly_service_logging_splunk` resource for streaming logs to Splunk. • Adds `fastly_service_logging_sumologic` resource for streaming logs to Sumo Logic. • Adds `fastly_service_logging_syslog` resource for streaming logs via Syslog. • Adds `fastly_api_security_discovered_operations` data source for querying discovered API operations. • Adds `fastly_api_security_operations` and `fastly_api_security_operation_tags` data sources for querying API Security operations and their tags. • Adds `fastly_ngwaf_workspace_templated_signal_rules` dedicated data source for Templated Signal Rules. • Adds `fastly_datacenters` data source for querying Fastly datacenter metadata. • Adds `fastly_staging_ips` data source for querying Fastly staging IP ranges. • Adds `fastly_tls_domain` data source for querying TLS domain configuration. • Adds `fastly_package_hash` data source for querying Compute package hashes. • Adds `fastly_services` data source for listing all Fastly services. • Adds `fastly_ip_ranges` data source for querying Fastly IP ranges. • Adds `fastly_dictionaries` data source, ported from the legacy provider. • Adds `fastly_service_settings` resource for explicit service version management of general settings on CDN services. • Adds `fastly_service_dictionary` resource for explicit management of Edge Dictionaries on CDN and Compute services. • Adds `fastly_service_gzip` resource for explicit service version management of Gzip configurations on CDN services. • Adds explicit family support for Rate Limiting via the `rate_limiter` resource family. • Adds explicit family support for Cache Settings. • Adds `staging_ip` attribute to the `fastly_tls_configuration` data source. • Adds `client_challenge` mode support to the `service_product_ddos_protection` resource. Breaking changes: • The `fastly_service_vcl` resource is renamed to `fastly_service_custom_vcl`; any existing Terraform state or config referencing `fastly_service_vcl` must be updated. • The nested `vcl` block on `fastly_service_cdn_auto` is renamed to `custom_vcl`; any existing configs using the `vcl` block inside `fastly_service_cdn_auto` must be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Automation tokens now support multiple roles (2026-09-24)

Thu, 24 Sep 2026 00:00:00 GMT

Fastly automation tokens now support multiple roles for fine-grained access control across CDN and Next-Gen WAF.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports assigning multiple roles to a single automation token via the Automation Tokens API, enabling combined permissions across Fastly products such as CDN management and Next-Gen WAF.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Add AI Firewall metrics to Historical Stats and Real-Time Analytics APIs (2026-09-23)

Wed, 23 Sep 2026 00:00:00 GMT

Fastly Historical Stats and Real-Time Analytics APIs gain two new AI Firewall metrics for AI Runtime Control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `arc_ai_firewall_requests` and `arc_ai_firewall_blocked` metrics to the Historical Stats API and Real-Time Analytics API, tracking AI Firewall activity in AI Runtime Control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Add Content Guard challenge metrics to Historical Stats and Real-Time Analytics APIs (2026-09-23)

Wed, 23 Sep 2026 00:00:00 GMT

Fastly: Adds ten new metrics to the Historical Stats API and Real-Time Analytics API covering Content Guard challenge and token creation, validation outcomes, and Private Access Token (PAT) challenges issued during rule enforcement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Add AI Runtime Control product (2026-09-22)

Tue, 22 Sep 2026 00:00:00 GMT

Fastly product enablement API adds support for the AI Runtime Control product via `ai_runtime_control`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `ai_runtime_control` as a supported product identifier in the Fastly product enablement API, enabling programmatic enable/disable of the AI Runtime Control product.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Route, control, and monitor AI model traffic with the new AI Runtime Control API (2026-09-22)

Tue, 22 Sep 2026 00:00:00 GMT

Fastly launches AI Runtime Control API to route, rate-limit, failover, and monitor AI model traffic through a managed gateway.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the AI Runtime Control API gateway — point existing SDKs at Fastly by changing only the base URL and credentials to gain per-key controls and usage reporting without rewriting application code.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds provider connection management to supply credentials (API key or, for Amazon Bedrock, an AWS IAM role) that AI Runtime Control uses to reach a provider on your behalf; also exposes endpoints to look up supported providers and models and retrieve Bedrock IAM setup information. • Adds virtual key management with per-key `request-per-minute` and `token-per-minute` limits to control how each application authenticates to and consumes the gateway. • Adds failover policy configuration on a virtual key to automatically retry against alternate provider connections after timeouts, rate limiting, or server errors. • Supports the OpenAI Chat Completions and Responses APIs, the Anthropic Messages API, and the Amazon Bedrock Runtime invoke APIs through the gateway. • Adds usage metrics for requests, sessions, and token consumption, filterable by virtual key, provider, or model, with CSV export. • Adds session logs with full request and response data for debugging and audits. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Adding Bots time series metrics API (2026-09-17)

Thu, 17 Sep 2026 00:00:00 GMT

Fastly Historical Stats API now exposes bot time series metrics served by ContentGuard.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds bot time series metrics (served by ContentGuard) to the Historical Stats API, enabling per-service bot-protection data retrieval.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Bot Management (2026-09-17)

Thu, 17 Sep 2026 00:00:00 GMT

Fastly launches a Bot Management API to configure ContentGuard actions per bot category, individual bot, and workspace protection mode.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces the Bot Management API to configure ContentGuard, separate from the Next-Gen WAF API, enabling programmatic control over how Fastly responds to bot traffic.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports setting an action for a bot category (such as AI crawlers, search engines, or headless browsers) so that any bot Fastly later adds to that category inherits the action automatically. • Supports overriding the action for an individual bot within a category, with the ability to set the action back to `inherit` to return it to the category default. • Supports updating a workspace to switch between `off`, `log`, and `block` protection modes. • Adds a list-all-bots endpoint that returns every bot across every category in a single request, with each bot reporting its `category_id` so a complete bot-to-category map can be built in one pass. • Adds a `service_id` filter on the list workspaces endpoint to find the workspace serving a given service. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Add DDoS protection challenge metrics to Historical Stats and Real-Time Analytics APIs (2026-09-17)

Thu, 17 Sep 2026 00:00:00 GMT

Fastly: Adds ten new DDoS protection challenge metrics to the Historical Stats API and Real-Time Analytics API, covering challenge and token creation, validation outcomes, and Private Access Token (PAT) challenges issued during DDoS protection rule enforcement.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly Terraform Provider 9.7.0 (2026-09-17)

Thu, 17 Sep 2026 00:00:00 GMT

Fastly Terraform Provider 9.7.0 adds AI Runtime Control resources and `client_challenge` DDoS protection mode.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds support for `client_challenge` mode in the `product_enablement/ddos_protection` resource.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Add AI Runtime Control requests metric to Historical Stats and Real-Time Analytics APIs (2026-09-15)

Tue, 15 Sep 2026 00:00:00 GMT

Historical Stats and Real-Time Analytics APIs gain `arc_requests` metric for AI Runtime Control traffic.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `arc_requests` metric to the Historical Stats and Real-Time Analytics APIs to track requests received by AI Runtime Control.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly CLI v16.1.0 (2026-09-14)

Mon, 14 Sep 2026 00:00:00 GMT

Fastly CLI v16.1.0 adds Log Explorer/Insights commands and AI Runtime Control support.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `logging` subcommands for Log Explorer and Insights to the Fastly CLI.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly JavaScript SDK 3.46.0 (2026-09-14)

Mon, 14 Sep 2026 00:00:00 GMT

Fastly JavaScript SDK 3.46.0 adds CoreCache.transactionLookupAsync for async cache transaction lookups.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `CoreCache.transactionLookupAsync` method for performing asynchronous cache transaction lookups.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Next-Gen WAF configuration changes now recorded in the event log (2026-09-08)

Tue, 08 Sep 2026 00:00:00 GMT

Event logs API now captures Next-Gen WAF config changes from all sources — API, Fastly panel, NG WAF panel, and Terraform.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `filter[event_type]` support on the list events API for all `ngwaf.*` event types, covering workspaces, rules, lists, custom signals, redactions, virtual patches, thresholds, workspace alerts, header links, rate limited sources, custom dashboards, request reports, and agent keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Extends the Event logs API to record Next-Gen WAF configuration changes made through any surface — the Next-Gen WAF API, the Fastly control panel, the Next-Gen WAF control panel, or Terraform — not just changes made through Fastly. Breaking changes: • The event types `security.workspace.create`, `security.workspace.update`, `security.workspace.delete`, `security.redaction.create`, `security.redaction.update`, `security.redaction.delete`, `security.rule.create`, `security.rule.update`, `security.rule.delete`, `security.virtual_patch.create`, `security.virtual_patch.update`, `security.virtual_patch.delete`, and `security.event.update` are deprecated and no longer recorded — use the `ngwaf.*` equivalents (e.g. `ngwaf.rule.create` in place of `security.rule.create`); existing log entries keep their original event type. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly Terraform Provider (beta) 0.1.0 (2026-09-08)

Tue, 08 Sep 2026 00:00:00 GMT

Fastly Terraform Provider beta 0.1.0 rewrites on Plugin Framework with auto-managed services, TLS, and NGWAF resources.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Introduces `_auto` service resources with provider-managed version lifecycle (auto-clone, validate, and activate on every CRUD operation).⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds Terraform resources for core service building blocks: `domain`, `backend`, `ACL` + ACL entries, `config store` + items, `secret store`, `dictionary items`, `cache settings`, `response object`, `request setting`, `custom dashboard`, `syslog logging`, and `DNS zone`. • Adds TLS resources covering certificates, private keys, mutual authentication, activation, subscriptions, and Platform TLS. • Adds Next-Gen WAF (NGWAF) resources: account rules, workspaces, workspace rules, thresholds, lists, signals, redactions, alert integrations, and virtual patching. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly Terraform Provider (beta) 0.1.3 (2026-09-08)

Tue, 08 Sep 2026 00:00:00 GMT

Fastly Terraform Provider beta 0.1.3 adds Cloudfiles logging, TSIG key resources, and object storage access key management.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `fastly_tsig_key` resource and `fastly_tsig_keys` data source for managing TSIG keys.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new resource for managing Fastly object storage access keys. • Adds support for Cloudfiles logging via `logging_cloudfiles`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Go SDK 1.10.0 (2026-09-03)

Thu, 03 Sep 2026 00:00:00 GMT

Fastly Go SDK 1.10.0 adds compliance region metadata, raw headers, dynamic backend healthchecks, and shielding byte timeouts. • Adds `ComplianceRegion` and `RawHeaders` fields to `FastlyMeta` in the `fsthttp` package for richer request metadata access. • Adds support for dynamic backend healthchecks via the `fsthttp` package. • Adds first-byte and between-bytes timeouts to the `shielding` package. • Exports `SendErrorDetailTag` from the `fsthttp` package for programmatic error detail handling. • Allows removing support for `net/http` in the `fsthttp` package, enabling leaner builds. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly JavaScript SDK 3.45.0 (2026-09-03)

Thu, 03 Sep 2026 00:00:00 GMT

Fastly JavaScript SDK 3.45.0 adds `clientSNI` to `FetchEvent.client` for SNI-aware edge logic. • Adds `clientSNI` property to `FetchEvent.client`, exposing the TLS Server Name Indication value from the incoming client connection at the edge. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Add Image Optimizer Input and Output metrics (2026-09-01)

Tue, 01 Sep 2026 00:00:00 GMT

Fastly stats APIs now expose `imgopto_input_image_bytes` and `imgopto_output_image_bytes` for Image Optimizer traffic.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `imgopto_input_image_bytes` and `imgopto_output_image_bytes` metrics to real-time analytics and historical stats API responses, enabling visibility into Image Optimizer input and output data volumes.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Add status 499 metric to Historical Stats, Real-Time Analytics, and Domain Inspector APIs (2026-09-01)

Tue, 01 Sep 2026 00:00:00 GMT

Fastly adds `status_499` metric to Historical Stats, Real-Time Analytics, and Domain Inspector APIs to track client disconnects. • Adds `status_499` metric to the Historical Stats API, Real-Time Analytics API, Domain Inspector Historical API, and Domain Inspector Real-Time API to surface client disconnects from Varnish services. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Rust SDK 0.13.1 (2026-08-24)

Mon, 24 Aug 2026 00:00:00 GMT

Fastly Rust SDK 0.13.1 adds cache lookup timeout, bot category detection, dynamic backend healthchecks, and new handle constructors. • Adds `Request::as_handles` method to the Rust SDK. • Adds `from_handle` functions for `ConfigStore`, `SecretStore`, and `Log`. • Adds `ToBackend` implementation for `Arc`. • Adds cache lookup timeout support, respected for HTTP guest caching. • Adds `BotCategory::Headless` to the list of known bot categories. • Adds experimental support for dynamic backend healthchecks. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Add headless bot metric to Historical Stats and Real-Time Analytics APIs (2026-08-24)

Mon, 24 Aug 2026 00:00:00 GMT

Fastly Historical Stats and Real-Time Analytics APIs add `bot_edge_requests_headless_count` metric for headless bot traffic. • Adds `bot_edge_requests_headless_count` metric to the Historical Stats API and Real-Time Analytics API to track edge requests originating from headless bots. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly CLI v16.0.0 (2026-08-13)

Thu, 13 Aug 2026 00:00:00 GMT

Fastly CLI v16.0.0 now offers all available starter kits for each language during compute init. • The `compute/init` flow now presents all available starter kits for each language, rather than a limited subset. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly Terraform Provider 9.6.0 (2026-08-11)

Tue, 11 Aug 2026 00:00:00 GMT

Fastly Terraform Provider 9.6.0 adds a new resource and data source for managing Audit Log Event Mappings. • Adds `fastly_audit_log_event_mapping` as a new Terraform resource and data source for managing Audit Log Event Mappings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Add Private Access Token (PAT) challenge metrics to Historical Stats and Real-Time Analytics APIs (2026-08-11)

Tue, 11 Aug 2026 00:00:00 GMT

Fastly Historical Stats and Real-Time Analytics APIs gain two new Private Access Token challenge metrics. • Adds two new PAT challenge metrics to the Historical Stats API and Real-Time Analytics API: count of issued PAT challenges and count of successful PAT challenges, enabling troubleshooting of Private Access Token flows. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly CLI v15.6.0 (2026-08-07)

Fri, 07 Aug 2026 00:00:00 GMT

Fastly CLI v15.6.0 adds the `audit-log event-mapping` command group for managing audit log event mappings. • Adds `audit-log event-mapping` command group to the Fastly CLI for managing audit log event mappings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Next-Gen WAF: `created_by` field now included in rules and signals (2026-08-04)

Tue, 04 Aug 2026 00:00:00 GMT

Fastly Next-Gen WAF Rules and Signals APIs now return a `created_by` field showing the creator's email. • Adds `created_by` field to Next-Gen WAF Rules and Next-Gen WAF Signals API responses, identifying the email address of the user who created the rule or signal. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly CLI v15.5.0 (2026-08-04)

Tue, 04 Aug 2026 00:00:00 GMT

Fastly CLI v15.5.0 adds Python support for Compute init and new Notification Service Integrations management. • Adds Python language support to `compute/init`, enabling Python-based Compute service scaffolding. • Adds support for Notification Service Integrations via the `integrations` commands. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly Terraform Provider 9.5.0 (2026-08-04)

Tue, 04 Aug 2026 00:00:00 GMT

Fastly Terraform Provider 9.5.0 adds five new integration types to `fastly_integration`: Datadog, Jira Issue, JSM, OpsGenie, and Splunk On-Call. • Adds `datadog`, `jiraissue`, `jsm`, `opsgenie`, and `splunkoncall` integration types to the `fastly_integration` resource. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Next-Gen WAF for Apache 1.11.0 (2026-07-29)

Wed, 29 Jul 2026 00:00:00 GMT

Next-Gen WAF Apache module now logs failed-open requests for better visibility into bypass events. • Logs failed-open requests, giving practitioners visibility into traffic that bypassed WAF inspection. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly Fastly DNS (2026-07-28)

Tue, 28 Jul 2026 00:00:00 GMT

Fastly launches authoritative DNS service backed by its global edge network. • New Fastly DNS authoritative DNS service leverages Fastly's global edge network to serve DNS query responses at high performance. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly

Fastly JavaScript SDK 3.44.0 (2026-07-27)

Mon, 27 Jul 2026 00:00:00 GMT

Fastly JavaScript SDK 3.44.0 adds bot detection capability. • Adds bot detection support to the Fastly JavaScript SDK. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/fastly