Response Cookie handling

The traditional way to read response cookies in VCL is to inspect either the beresp.http.Set-Cookie or the resp.http.Set-Cookie variables and then extract values using regular expressions. However this is not ideal since attempting to parse potentially complicated or quoted strings with regular expressions is brittle and prone to being tripped up by edge cases. It also doesn't allow for reading multiple headers with the same name such as when an origin sends multiple Set-Cookie headers. Because of these two reasons Fastly supports a method for extracting a named value out of Set-Cookie headers no matter how many there are.

To access a named value simply use the function with either beresp or resp depending on what part of the request you're in - so either

setcookie.get_value_by_name(beresp, "name")

or

setcookie.get_value_by_name(resp, "name")

as appropriate, replacing "name" with whatever the name of the value is. So for example, given this HTTP response from an origin

1HTTP/1.1 200 OK
2Cache-Control: max-age=60
3Content-Type: text/html; charset=utf-8
4Content-Length: 80806
5Accept-Ranges: bytes
6Date: Tue, 11 Aug 2015 19:00:04 GMT
7Age: 123
8Connection: keep-alive
9Set-Cookie: one=a; httponly; secure
10Set-Cookie: two=b or not to b; httponly

then using the function like this

set resp.http.X-One = setcookie.get_value_by_name(resp, "one");
set resp.http.X-Two = setcookie.get_value_by_name(resp, "two");

will set resp.http.X-One to be "a" and resp.http.X-Two to "b or not to b".

This logic can be used in uploaded custom VCL, as well as throughout the web interface. For example:

An example of response cookie logic set via a header using the web interface

Was this guide helpful?

Do not use this form to send sensitive information. If you need assistance, contact support@fastly.com.