Next-Gen WAF: Enabling WAF at the Edge

Next-Gen WAF: Enabling WAF at the Edge

Walkthrough your first Edge Deployment

rate limit

Code not recognized.

About this course

Course Details:

Fastly’s Next-Gen WAF is powered by Fastly’s Signal Sciences platform. With this course we’ll walk you through the steps for deploying WAF at the Edge. Since the Edge Deployment links with a Delivery Service, which uses VCL, we’ll walk you through how the Edge Deployment integrates with a Delivery Service.

This course makes reference to a number of VCL concepts and terms. We recommend you review the following courses first if you are not familiar with Shielding & the VCL Subroutines.

  • VCL 105: Shielding
  • VCL 107: Receive, Fetch, & Deliver Fundamentals
  • VCL 108: Hash, Hit, Miss and Pass Subroutines
  • VCL 109: Error, Restart and Log

We’ll also discuss how to ramp traffic, control inbound requests using available Varnish functions and data structures (such as ACLs & edge rate limiting), how shielding works, how back-ends are handled, and how to enable Health Checks.

Learning Objectives:

  • How does a SigSci site pair with a VCL service?
  • What is an Edge Security service?
  • Synchronizing VCL backends with the Edge Security service.
  • What are Snippets and Dynamic Snippets
  • What does the edge_security subroutine do?
  • Handling inspection with Shielding enabled.
  • Handling inspection with HealthChecks enabled.

Curriculum27 min

  • Varnish Basics 2 min
  • Edge Security Service 3 min
  • Enabling the Edge Deployment 4 min
  • Snippets & the Edge Security subroutine 10 min
  • Inspecting Requests with Shielding Enabled 3 min
  • Ramping Traffic onto the Edge Deployment 2 min
  • Handling Blocked requests with Varnish
  • Health Checks 3 min
  • Quiz
  • Course Feedback

About this course

Course Details:

Fastly’s Next-Gen WAF is powered by Fastly’s Signal Sciences platform. With this course we’ll walk you through the steps for deploying WAF at the Edge. Since the Edge Deployment links with a Delivery Service, which uses VCL, we’ll walk you through how the Edge Deployment integrates with a Delivery Service.

This course makes reference to a number of VCL concepts and terms. We recommend you review the following courses first if you are not familiar with Shielding & the VCL Subroutines.

  • VCL 105: Shielding
  • VCL 107: Receive, Fetch, & Deliver Fundamentals
  • VCL 108: Hash, Hit, Miss and Pass Subroutines
  • VCL 109: Error, Restart and Log

We’ll also discuss how to ramp traffic, control inbound requests using available Varnish functions and data structures (such as ACLs & edge rate limiting), how shielding works, how back-ends are handled, and how to enable Health Checks.

Learning Objectives:

  • How does a SigSci site pair with a VCL service?
  • What is an Edge Security service?
  • Synchronizing VCL backends with the Edge Security service.
  • What are Snippets and Dynamic Snippets
  • What does the edge_security subroutine do?
  • Handling inspection with Shielding enabled.
  • Handling inspection with HealthChecks enabled.

Curriculum27 min

  • Varnish Basics 2 min
  • Edge Security Service 3 min
  • Enabling the Edge Deployment 4 min
  • Snippets & the Edge Security subroutine 10 min
  • Inspecting Requests with Shielding Enabled 3 min
  • Ramping Traffic onto the Edge Deployment 2 min
  • Handling Blocked requests with Varnish
  • Health Checks 3 min
  • Quiz
  • Course Feedback