Getting started

Basics

• About the web interface controls
• Always-on DDoS mitigation
• Browser recommendations when using the Fastly web interface
• Content and its delivery
• Fastly POP locations
• Getting started with Fastly
• How caching and CDNs work
• How Fastly's CDN Service works
• HTTP status codes cached by default
• Self-provisioned Fastly services
• Sign up and create your first service
• Working with services

Domains & Origins

• Adding CNAME records
• Testing setup before changing domains
• Working with domains
• Working with health checks

Performance

• Shielding

---

Configuration

Basics

• Conditionally changing a URL

Conditions

• About conditions
• Troubleshooting conditions
• Using conditions

Dictionaries

• About Edge Dictionaries
• Private Edge Dictionaries
• Working with Edge Dictionaries using the API
• Working with Edge Dictionaries using the web interface
• Working with Edge Dictionary items using the API

Domains & Origins

• Changing origins based on user location
• Connecting to origins
• Enabling global POPs
• Failover configuration
• IPv6 support
• Maintaining separate HTTP and HTTPS requests to origin servers
• Routing assets to different origins
• Setting up redundant origin servers
• Specifying an override host
• Using Fastly with apex domains

Request settings

• Checking multiple backends for a single request
• How request settings are applied
• Manipulating the X-Forwarded-For header

Cache settings

• Overriding caching defaults based on a backend response

Headers

• Adding or modifying headers on HTTP requests and responses
• Enabling cross-origin resource sharing (CORS)
• Removing headers from backend response
• Setting Content Type based on file extension
• Understanding cache HIT and MISS headers with shielded services
• Understanding the X-Timer header

Responses

• Creating and customizing a robots.txt file
• Creating error pages with custom responses
• Generating HTTP redirects at the edge
• Responses tutorial

Performance

• About Dynamic Servers
• Authenticating URL purge requests via API
• Cache control tutorial
• Caching configuration best practices
• Controlling caching
• Creating and using pools with Dynamic Servers
• Creating and using server entries with Dynamic Servers
• Enabling API caching
• Enabling automatic gzipping
• Failure modes with large files
• Getting started with surrogate keys
• HTTP/2 server push
• Implementing API cache control
• Large File Support
• Logging purge requests
• Making query strings agnostic
• Purging API cache with surrogate keys
• Request collapsing
• Serving stale content
• Setting Surrogate-Key headers based on a URL
• Setting Surrogate-Key headers for Amazon S3 origins
• Single purges
• Soft purges
• Streaming Miss
• Wildcard purges

Custom VCL

• Accept-Language header VCL features
• Authenticating before returning a request
• Basic authentication
• Creating location-based tagging
• Custom responses that don't hit origin servers
• Delivering different content to different devices
• Enabling URL token validation
• Guide to VCL
• Isolating header values without regular expressions
• Manipulating the cache key
• IP geolocation variables: Migrating to the new dataset
• Overriding which IP address the geolocation features use
• Response Cookie handling
• Support for the Edge-Control header
• Understanding the different PASS action behaviors
• Using edge side includes (ESI)
• VCL regular expression cheat sheet

Image optimization

• Automating optimization
• Controlling image quality
• Cropping images
• Image optimization VCL boilerplate
• Purging optimized images
• Reorienting images
• Resizing images
• Serving images
• Serving responsive images
• Setting up image optimization
• Trimming images

Video

• Adaptive bitrate playback URL guidelines
• Collecting OTFP metrics
• Configuration guidelines for live streaming

---

Security

Access Control Lists

• About ACLs
• Manually creating access control lists
• Using the IP block list
• Working with ACLs using the API
• Working with ACLs using the web interface

Monitoring and testing

• Monitoring account activity with event logs
• Penetration testing your service behind Fastly

Securing communications

• Accessing Fastly's IP ranges
• Support for App Transport Security

TLS

• Domain validation for TLS certificates
• Enabling HSTS through Fastly
• Forcing a TLS redirect
• Managing domains on TLS certificates
• Setting up free TLS
• TLS key and certificate replacement
• TLS termination

Web Application Firewall

• About the Fastly WAF dashboard
• Creating a custom WAF error page
• Fastly WAF logging
• Fastly WAF rule set updates and maintenance
• Managing the Fastly WAF
• Web Application Firewall (WAF)

---

Integrations

Logging endpoints

• Log streaming: Amazon S3
• Log streaming: Microsoft Azure Blob Storage
• Log streaming: Cloud Files
• Log streaming: Datadog
• Log streaming: DigitalOcean Spaces
• Log streaming: FTP
• Log streaming: Google BigQuery
• Log streaming: Google Cloud Storage
• Log streaming: Honeycomb
• Log streaming: Kafka
• Log streaming: Log Shuttle
• Log streaming: LogDNA
• Log streaming: Logentries
• Log streaming: Loggly
• Log streaming: Heroku's Logplex
• Log streaming: OpenStack
• Log streaming: Papertrail
• Log streaming: Scalyr
• Log streaming: SFTP
• Log streaming: Splunk
• Log streaming: Sumo Logic
• Log streaming: Syslog

Non-Fastly services

• Amazon S3
• DigitalOcean Spaces
• Discounted egress from Google
• Google Cloud Storage
• Google Compute Engine
• Microsoft Azure Blob Storage
• Outbound data transfer from Azure
• PerimeterX Bot Defender
• Wasabi

---

Diagnostics

Streaming logs

• About Fastly's Real-Time Log Streaming features
• Changing log line formats
• Changing where log files are written
• Custom log formats
• Encrypting logs
• Setting up remote log streaming
• Useful conditions for logging
• Useful log formats
• Useful variables to log

Debugging techniques

• Changing connection timeouts to your origin
• Checking cache
• Debugging with mtr
• Debugging with WebPageTest
• Fastly's network status
• Google Pagespeed module errors
• Googlebot crawl stats
• Temporarily disabling caching
• Using GET instead of HEAD for command line caching tests

Common errors

• Common 503 errors
• Common service and domain errors
• Error 1000 with CloudFlare DNS
• Fixing cross-domain errors
• Loop detection
• TLS certificate errors
• TLS origin configuration messages

---

Account info

Account management

• Account lockouts
• Changing your account's company name
• Enabling an IP allowlist for account logins through the web interface
• Enabling and disabling two-factor authentication
• Finding and managing your account info
• Using API tokens

Billing

• Accounts and pricing plans
• How we calculate your bill
• Paying your bill
• Who receives your bill

User access and control

• Adding and deleting user accounts
• Configuring user roles and permissions
• Email and password changes
• Merging accounts
• Setting up single sign-on (SSO)

---

Reference

• Glossary of terms
• Resource limits