Skip to content

Use Fastly to do Compression #120

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Use Fastly to do Compression #120

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
52 changes: 52 additions & 0 deletions terraform/warehouse/vcl/main.vcl
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -296,6 +296,29 @@ sub vcl_recv {
}


# Common logic for both miss and pass
sub miss_pass {
# Remove Accept-Encoding header to prevent origin server from doing
# gzip by itself, since we want to do it at the Edge
unset bereq.http.Accept-Encoding;
}


sub vcl_pass {
#FASTLY pass

call miss_pass;
}


sub vcl_miss {
#FASTLY miss

call miss_pass;
}



sub vcl_fetch {

# These are newer kinds of redirects which should be able to be cached by
Expand Down Expand Up @@ -342,6 +365,35 @@ sub vcl_fetch {
set beresp.http.Fastly-Restarts = req.restarts;
}

# We want to enable compression, but due to CRIME attacks we want to skip
# compressing anything that Varies on a Cookie or Authorization header
# because we don't know if they are safe to compress.
#
# We also want to skip it if we've already gotten a Content-Encoding
if (beresp.http.Vary !~ "(?i)(Cookie|Authorization)" &&
!beresp.http.Content-Encoding) {
# Always set a Vary header, even if we don't end up compressing
# the object, because the uncompressed version should only be
# used when the request does NOT request the compressed one.
if (!beresp.http.Vary ~ "Accept-Encoding") {
if (beresp.http.Vary) {
set beresp.http.Vary = beresp.http.Vary ", Accept-Encoding";
} else {
set beresp.http.Vary = "Accept-Encoding";
}
}

# Perform compression if the client claims to understand it
if (req.http.Accept-Encoding == "gzip") {
set beresp.gzip = true;
} else if (req.http.Accept-Encoding == "br") {
set beresp.brotli = true;
} else {
set beresp.gzip = false;
set beresp.brotli = false;
}
}

# If there is a Set-Cookie header, we'll ensure that we do not cache the
# response.
if (beresp.http.Set-Cookie) {
Expand Down