Getting started

These articles provide basic instructions for getting started with Fastly services.

Basics

These articles provide basic information and instructions for configuring Fastly services after getting started.

• Content and its delivery
• Shielding
• Using Fastly's global POP network
• Working with CNAME records and your DNS provider
• Working with domains
• Working with health checks
• Working with hosts
• Working with services on refreshed pages
• Working with services

Web interface

These articles describe key features of the Fastly web interface controls.

• About the account menu
• About the Compute page
• About the Dashboards page
• About the Deliver page
• About the Domains page
• About the Home page
• About the Logs page
• About the Observability page
• About the Origin Inspector stats
• About the Origins page
• About the plan usage page
• About the refreshed Compute page
• About the refreshed Deliver page
• About the refreshed Home page
• About the Resources page
• About the Secure page
• About the Services page
• About the stats for Compute services
• About the stats for Deliver services
• About the web interface controls on refreshed pages
• About the web interface controls
• About the billing overview page
• About the Domain Inspector stats

Configuration

These articles provide basic instructions for configuring Fastly services after getting started.

Caching

These articles describe configuration settings and changes you can make to your cache settings when setting up Fastly services.

• Caching configuration best practices
• Checking cache
• Controlling caching
• Enabling API caching
• Implementing API cache control
• Overriding caching defaults based on a backend response
• Preventing cache poisoning via HTTP X-headers
• Segmented Caching
• Temporarily disabling caching

Conditions

These articles describe conditions and how to use them in VCL and the Fastly web interface.

• Troubleshooting conditions
• Using conditions
• About conditions

Custom VCL

These articles describe how to create your own VCL files with specialized configurations.

• About VCL Snippets
• Basic authentication
• Custom responses that don't hit origin servers
• Guide to VCL
• Isolating header values without regular expressions
• Manipulating the cache key
• Response Cookie handling
• Understanding the different PASS action behaviors
• Uploading custom VCL
• Using dynamic VCL Snippets
• Using regular VCL Snippets
• VCL regular expression cheat sheet

Dictionaries

These articles describe how to move rapid key/value pair decision logic to the edge using dictionaries.

• Working with dictionaries using the web interface
• About dictionaries

Domains & Origins

These articles describe configuration settings and changes you can make to your domains and origins when setting up Fastly services.

• Automatic load balancing
• Changing connection timeouts to your origin
• Changing origins based on user location
• Failover configuration
• IPv6 support
• Maintaining separate HTTP and HTTPS requests to origin servers
• Routing assets to different origins
• Setting up redundant origin servers
• Specifying an override host
• Using Fastly with apex domains

Headers

These articles describe configuration settings and changes you can make to your headers when setting up Fastly services.

• Adding or modifying headers on HTTP requests and responses
• Enabling cross-origin resource sharing (CORS)
• Removing headers from backend response
• Setting Content Type based on file extension

Image optimization

These articles provide basic instructions for and examples of setting up and beginning to use the Fastly Image Optimizer.

• About Fastly Image Optimizer

Observability

These articles provide information about monitoring your services via the web interface.

• Working with the Edge Observer dashboards

Performance

These articles describe how to adjust the performance of Fastly's services beyond standard configuration methods.

• Debugging with mtr
• Enabling automatic compression
• Enabling HTTP/3 for Fastly services
• Failure modes with large files
• Fastly's service status
• HTTP/2 server push
• Making query strings agnostic
• Precision Path
• Serving stale content
• Streaming Miss

Purging

These articles describe how to purge cache.

• Authenticating URL purge requests via API
• Purging a URL via the web interface
• Purging all content via the web interface
• Purging with surrogate keys
• Setting Surrogate-Key headers for Amazon S3 origins
• Soft purges
• Working with surrogate keys

Requests

These articles describe configuration settings and changes you can make to requests when working with Fastly services.

• Checking multiple backends for a single request
• Conditionally changing a URL
• How request settings are applied

Responses

These articles describe configuration settings and changes you can make to your response settings when setting up Fastly services.

• Creating and customizing a robots.txt file
• Creating error pages with custom responses
• Redirecting apex domains, wildcard domains, and subdomains
• Responses tutorial

Video

These articles describe setup and configuration guidelines for setting up live stream delivery or video on-demand.

• Adaptive bitrate playback URL guidelines
• Collecting OTFP metrics
• Common OTFP errors
• Streaming configuration guidelines

Security

These articles provide information about the administrative, physical, and technical safeguards that protect Fastly's product and services, as well as describe how to secure communications between Fastly and your origin servers and customers.

Access Control Lists

These articles describe how to restrict access to resources by allowing or blocking IP addresses with access control lists (ACLs).

• Manually creating access control lists
• Using the IP block list
• Working with ACLs using the web interface
• About ACLs

Rate Limiting

These articles describe how to work with Fastly's rate limiting features.

• About rate limiting
• Working with rate limiting policies

Securing communications

These articles describe how to secure communications between Fastly, your origin servers, and your customers.

• Support for App Transport Security

Security measures

These articles provide information about the administrative, physical, and technical safeguards that protect Fastly's product and services.

• Data management
• Fastly Next-Gen WAF (powered by Signal Sciences) security measures
• Penetration testing your service behind Fastly
• Security program

TLS

These articles describe how to set up TLS certificates with Fastly services.

• About the TLS dashboard
• Enabling HSTS through Fastly
• Enabling TLS 1.3 through Fastly
• Forcing a TLS redirect
• Setting up Mutual TLS authentication
• Setting up TLS on a shared Fastly domain
• Setting up TLS with certificates Fastly manages
• Setting up TLS with your own certificates
• TLS certificate errors
• TLS origin configuration messages
• Fastly TLS prerequisites and limitations
• TLS termination

Web Application Firewall (2020)

These articles provide information about the Fastly Web Application Firewall (WAF 2020) security product.

• About the Fastly WAF dashboard (2020)
• About the Fastly WAF rule management interface (2020)
• Creating a custom WAF error page (2020)
• Fastly WAF logging (2020)
• Managing rules on the Fastly WAF (2020)
• WAF Rule Exclusions (2020)
• Web Application Firewall (WAF) (2020)

Web Application Firewall (original)

These articles provide information about the original Fastly Web Application Firewall (WAF) security product.

• About the Fastly WAF dashboard (original)
• About the Fastly WAF rule management interface (original)
• Creating a custom WAF error page (original)
• Fastly WAF logging (original)
• Fastly WAF rule set updates and maintenance (original)
• Managing the Fastly WAF (original)
• Web Application Firewall (WAF) (original)

Integrations

These articles describe how Fastly services interoperate with non-Fastly services.

Streaming logs

These articles describe how we support real-time log streaming of data that passes through Fastly.

• About Fastly's real-time log streaming features
• Changing log compression formats
• Changing log line formats
• Changing log placement
• Changing where log files are written
• Configuring Google IAM service account impersonation to avoid storing keys on Fastly logging
• Creating an AWS IAM role for Fastly logging
• Custom log formats
• Encrypting logs
• Setting up remote log streaming for Compute
• Setting up remote log streaming
• Useful conditions for logging
• Useful log formats
• Useful variables to log

Logging endpoints

These articles describe Fastly's support for protocols that allow you to stream logs to a variety of locations, including third-party services, for storage and analysis.

• Log streaming: Amazon Kinesis Data Streams
• Log streaming: Amazon S3
• Log streaming: Microsoft Azure Blob Storage
• Log streaming: Cloud Files
• Log streaming: Coralogix
• Log streaming: Datadog
• Log streaming: DigitalOcean Spaces
• Log streaming: Elasticsearch
• Log streaming: FTP
• Log streaming: Google BigQuery
• Log streaming: Google Cloud Pub/Sub
• Log streaming: Google Cloud Storage
• Log streaming: Honeycomb
• Log streaming: HTTPS
• Log streaming: Hydrolix
• Log streaming: Kafka
• Log streaming: Log Shuttle
• Log streaming: LogDNA
• Log streaming: Loggly
• Log streaming: Heroku's Logplex
• Log streaming: New Relic Logs
• Log streaming: New Relic OTLP
• Log streaming: OpenStack
• Log streaming: Oracle Cloud Storage
• Log streaming: Papertrail
• Log streaming: Scalyr
• Log streaming: SFTP
• Log streaming: Shape Log Analysis
• Log streaming: Splunk
• Log streaming: Storj DCS
• Log streaming: Sumo Logic
• Log streaming: Syslog
• Log streaming: Wasabi Hot Cloud Storage

Non-Fastly services

These articles describe how non-Fastly services interoperate with Fastly.

• Alibaba Object Storage Service
• Amazon S3
• Backblaze B2 Cloud Storage
• Data transfer with Backblaze B2
• DigitalOcean Spaces
• Discounted egress from Google
• Google Cloud Storage
• Google Compute Engine
• HUMAN Bot Defender
• Microsoft Azure Blob Storage
• Oracle Cloud Storage
• Outbound data transfer from Azure
• Storj DCS Object Storage
• Wasabi Hot Cloud Storage

Account info

These articles describe how to manage account access, billing, and security.

Account management

These articles describe how to manage account access.

• Account lockouts
• Changing company profile details
• Enabling an IP allowlist for account logins through the web interface
• Enabling and disabling two-factor authentication
• Monitoring account activity with the audit log
• Reviewing service activity with the event log
• Using API tokens

Billing

These articles describe Fastly's billing and payment plans and how to make adjustments to your billing information.

• Account types
• How we calculate your bill
• Managing account plans and usage details
• Paying your bill

User access and control

These articles describe how to manage users with permission to access to your account.

• Adding and deleting user accounts
• Changing profile information
• Configuring user roles and permissions
• Managing multiple accounts
• Setting up single sign-on (SSO)
• Transferring services to other accounts
• Unsubscribing from Fastly marketing email

Compute

These articles describe how to configure Compute services.

Edge Data Storage

These articles describe how to work with the edge data storage features available with Compute.

• Working with config stores
• Working with KV stores

Reference

These articles provide reference information about common Fastly terms and configuration settings.

• Resource limits

What's new

Learn about recently released features and products.

• Announcements

Getting started

These articles provide basic information about the Next-Gen WAF product and architecture.

• About Next-Gen WAF
• About the architecture
• Start here

Install guides

These articles explain how to install and configure the Next-Gen WAF.

• Compatibility and requirements
• Edge deployment
• Installation: Getting started
• Module configuration
• Network requirements
• Package downloads

Agent management

These articles describe how to install, configure, and update the Signal Sciences agent.

• Agent end-of-support policy
• Creating agent alerts
• Getting started with the agent
• Installing the agent on Alpine Linux
• Installing the agent on Amazon Linux
• Installing the agent on Debian
• Installing the agent on Red Hat
• Installing the agent on Ubuntu
• Installing the agent on Windows
• Upgrading the agent
• Configuring the agent

Apache module

These articles describe how to install the Apache module.

• Amazon Linux Apache Module Install
• Apache Module Overview
• Debian Apache Module Install
• Red Hat Apache Module Install
• Ubuntu Apache Module Install
• Windows Apache Module Install

Java module

These articles describe how to install the Java module.

• Installing the Java Module with Dropwizard
• Java module overview
• Installing the Java Module as a Jetty Handler
• Installing the Java Module as a Netty Handler
• Installing the Java Module as a Servlet Filter
• Installing the Java Module on Weblogic

NGINX module

These articles describe how to install the NGINX module.

• Alpine Linux NGINX 1.15.3+
• Amazon Linux NGINX 1.10-1.14
• Amazon Linux NGINX 1.14.1+
• Amazon Linux NGINX 1.9 or lower
• Amazon Linux NGINX-Plus
• Debian NGINX 1.10-1.14
• Debian NGINX 1.14.1+
• Debian NGINX 1.9 or lower
• Debian NGINX-Plus
• Nginx module overview
• Red Hat NGINX 1.10-1.14
• Red Hat NGINX 1.14.1+
• Red Hat NGINX 1.9 or lower
• Red Hat NGINX-Plus
• Ubuntu NGINX 1.10-1.14
• Ubuntu NGINX 1.14.1+
• Ubuntu NGINX 1.9 or lower
• Ubuntu NGINX-Plus

All other modules

These articles describe how to install other types of modules.

• .Net Core module install
• .Net module install
• Golang module install
• HAProxy module install
• HAProxy SPOE module install
• IBM HTTP Server
• IIS module install
• Kong plugin install
• Modules overview
• Node.js module install

Agent-only deployment

These articles describe the agent-only deployment options.

• About agent-only deployment
• Configuring agent reverse proxy deployments
• Configuring Envoy proxy deployments

Platform as a Service (PaaS)

These articles describe set up and deployment of the Signal Sciences agent using one of our compatible PaaS platforms.

• AWS Lambda
• Azure App Service Site Extension
• Heroku installation
• IBM Cloud installation
• OpenShift installation
• PaaS overview
• VMware Tanzu installation

Kubernetes

These articles describe how to install the Next-Gen WAF on Kubernetes.

• AWS Elastic Container Service (ECS) setup
• Example helloworld test web application
• Kubernetes Agent + Ingress Controller + Module
• Kubernetes Agent + Module
• Agent scaling and running as a service
• Signal Sciences agent container image
• Kubernetes Ambassador
• Kubernetes Envoy
• Kubernetes installation overview
• Kubernetes Istio
• Kubernetes reverse proxy
• Pivotal Container Services (PKS) setup

Cloud WAF

These articles describe how to use Cloud WAF.

• Cloud WAF certificate management
• Cloud WAF instance management
• Cloud WAF overview

Using the Next-Gen WAF

These articles provide information about working with the Next-Gen WAF web interface.

• Header links
• Site alerts

Web interface

These articles describe key features of the Next-Gen WAF web interface controls.

• Viewing agent details
• About the Agents page
• About the Corp Manage menu
• About the Corp Overview page
• About the Corp Rules menu
• About the Manage menu
• About the Monitor menu
• About the My Profile Menu
• About the Requests page
• About the Rules menu
• About the Signals page
• About the Site Overview page
• About the web interface controls

Account info

These articles describe how to manage account access and security.

• Automating user management (IdP)
• Enabling and disabling two-factor authentication
• Linking Fastly accounts
• Managing users
• Monitoring account activity with audit logs
• Setting up single sign-on (SSO)
• Using user roles and permissions

Agent mode

These articles describe how to set the Agent mode on the Signal Sciences agent.

• About the agent mode
• Testing with attack tooling

Agent response codes

These articles describe how to set custom agent response codes on the Signal Sciences agent.

• About agent response codes
• Troubleshooting agent response codes
• Using custom agent response codes

Data storage and privacy

These articles describe how we store and make available request and response data via the web interface and API.

• About data storage and privacy
• Anonymizing IP addresses
• Redacting data

Rules

These articles describe how to work with rules.

• About rules
• Converting requests to rules
• Defining rule conditions
• Using lists in rules
• Working with advanced rate limiting rules
• Working with request rules
• Working with signal exclusion rules
• Working with templated rules

Signals

These articles describe how to work with signals.

• About signals
• Using system signals
• Working with custom signals

Sites

These articles describe how to work with sites (also known as workspaces).

• About sites
• Managing sites
• Using site dashboards

Upgrading

These articles provide information on keeping your agents and modules up-to-date.

• Upgrading the Apache module
• Upgrading the IIS module
• Upgrading the NGINX module

Integrations

These articles explain how to work with integrations to notify you about activity within your corps and sites.

• Cisco Threat Response (CTR) / SecureX
• Datadog
• Generic webhooks
• HashiCorp Vault
• Integrations introduction
• Jira
• Mailing list
• OpsGenie
• PagerDuty
• Pivotal Tracker
• Slack
• Sumo Logic
• Microsoft Teams
• VictorOps

Developer

These articles explain how to work with the Next-Gen WAF API.

• Extracting your data
• Data flows
• Using our API
• X-SigSci-* request headers

FAQ

These articles provide answers to frequently asked questions.

• Agent StatsD Metrics
• Client IP addresses
• Fastly Security Labs
• Frequently asked questions
• Glossary
• IPv6 support
• Working with multiple Lua scripts in NGINX
• Search syntax

Troubleshooting

These articles describe how to troubleshoot common problems.

• Console FAQ
• SELinux support
• Troubleshooting

Reference

These articles provide reference information for Next-Gen WAF.

Release notes

These articles provide information about agent and module releases.

• Agent release notes
• Apache release notes
• CloudFoundry release notes
• Dotnet Core release notes
• Dotnet release notes
• Golang release notes
• HAProxy release notes
• Heroku release notes
• IBM Cloud release notes
• IIS release notes
• Java release notes
• NGINX C Binary release notes
• NGINX release notes
• NGINX 1.10 Lua Module release notes
• NGINX 1.11 Lua Module release notes
• NGINX 1.12 Lua Module release notes
• NodeJS release notes

Network Services

These articles provide information about Fastly products that focus on performance (speed), availability, and media and that accelerate content delivery with control from an edge cloud platform.

• Capacity Reservation
• Cloud Optimizer
• Dedicated IP addresses
• Fanout
• Fastly’s Full-Site Delivery
• Fastly's On-the-Fly Packaging service
• Fastly’s Streaming Delivery
• Image Optimizer
• Media Shield for Live
• Media Shield for VOD
• Oblivious HTTP Relay
• Origin Connect
• Subscriber Provided Prefix
• WebSockets

Security

These articles provide information about Fastly products that deliver web application and API protection.

• Certainly
• DDoS Protection and Mitigation Service and SLA
• Edge Rate Limiting
• Fastly Next-Gen WAF (powered by Signal Sciences)
• HIPAA-Compliant Caching and Delivery
• PCI-Compliant Caching and Delivery
• Platform TLS
• TLS service options
• WAF Quick Start Package
• WAF Tuning Package
• WAF Tuning Plus Package

Observability

These articles provide information about Fastly products that provide visibility and insights into traffic, security, and performance.

• Domain Inspector
• High Volume Logging
• Logging Insights Package
• Origin Inspector

Compute

These articles provide information about Fastly's serverless compute environment for building applications and executing at the edge.

• Compute
• Edge Data Storage

Support

These articles provide information about Fastly services and support solutions.

• Assurance Services
• Designated Technical Specialist
• Fastly Managed Security Service
• Fastly Next-Gen WAF (powered by Signal Sciences) professional services
• Live Event Monitoring Service
• Network Services service availability SLA
• Network Services Support description and SLA
• Performance Optimization Package
• Professional Services
• Related offerings
• Response Security Service
• Security service SLA
• Security support description and SLA
• Security Technical Account Manager

Resources

These articles provide information about Fastly's product lifecycle and the products within it.

• Fastly product lifecycle
• Summary product definitions

Legacy offerings

These articles provide information about Fastly's legacy offerings.

• Next-Gen WAF legacy support description and SLA
• Fastly's Legacy Full-site Delivery services
• Fastly's Legacy Media Shield
• Legacy Customer-Provided TLS Certificate Hosting Service
• Legacy Platinum Support and SLA
• Legacy Premium Support and SLA
• Legacy Professional Services
• Legacy TAM and Strategic Essentials
• WAF Support and SLA
• Web Application Firewall (WAF) (2020)

Third-party information

These articles provide information about third-party technology and services incorporated into Fastly's products and services.

• Cloud-hosted products
• Open source software in downloadable components
• Sub-processors
• Third-party technology

Compliance

These articles provide information about the administrative, physical, and technical safeguards that protect Fastly's products and services.

• Compliance processes and safeguards
• Security Measures

Essentials

Essentials is a collection of guides that introduce you to core concepts essential to understanding content delivery networks (CDNs) and Fastly.

• What is an API?
• What is caching?
• What is a CDN?
• What is image optimization?
• What is purging?

Introduction to Fastly's CDN

This is a step-by-step tutorial that shows you how to use Fastly with an example website and domain name. It guides you through the steps of caching and delivering a static website using the Jekyll static site generator, Amazon AWS, and the Fastly CDN.

• 1. Introduction
• 2. Getting started with Fastly
• 3. Adding niceties
• 4. Configuring caching
• 5. Go live
• 6. Advanced configuration
• 7. Conclusion

Introduction to Fastly Image Optimizer

This is a step-by-step tutorial that shows you how to set up Fastly's Image Optimizer ("Fastly IO") for a real website. It builds on the concepts introduced in Introduction to Fastly's CDN, and it guides you through the steps of optimizing the images for Taco Labs, the static website we previously used as an example.

• 1. Introduction
• 2. Setting up Fastly IO
• 3. Getting started with transformations
• 4. Updating the Taco Labs website
• 5. Wrapping up