section-io-gists

#section.io VCL sample. Copy paste into your section.io account to implement instantly
 
#vcl_recv - copy this code into the section called sub vcl_recv
if (req.http.Accept-Encoding) {
	if (req.http.Accept-Encoding ~ "gzip") {
		set req.http.Accept-Encoding = "gzip";
	} else if (req.http.Accept-Encoding ~ "deflate") {
		set req.http.Accept-Encoding = "deflate";
	} else {
		unset req.http.Accept-Encoding;

section-io-gists

#section.io VCL sample. Copy paste into your section.io account to implement instantly
#This code example requires you to use a Varnish version that has the GEO IP vmod installed

#Import vmod to do geoip on requests
import geoip;

#vcl_recv - copy this code into the section called sub vcl_recv
set req.http.X-Country-Code = geoip.country_code(regsub(req.http.X-Forwarded-For, ",.*",""));

section-io-gists

sub vcl_recv {
    //Use req.proto instead of req.http.X-Forwarded-Proto if your varnish server isn't behind a load balancer
    if ( req.http.X-Forwarded-Proto !~ "(?i)https") {
        //The 750 number is arbitrary, you just need a unique number to check for in the vcl_synth sub
        return (synth(750, ""));
    }    
}

sub vcl_synth {
    if (resp.status == 750) {

section-io-gists

sub vcl_recv {
  if (req.http.User-Agent ~ "(?i)ima-naughty-bot") {
    return (synth(403, "Forbidden"));
  }
}

section-io-gists

#section.io VCL sample. Copy paste into your section.io account to implement instantly
 
#vcl_recv - copy this code into the section called sub vcl_recv

#Normalise Accept-Encoding
if (req.http.Accept-Encoding) {
  if (req.http.Accept-Encoding ~ "gzip") {
  	set req.http.Accept-Encoding = "gzip";
  } else if (req.http.Accept-Encoding ~ "deflate") {
  	set req.http.Accept-Encoding = "deflate";

section-io-gists

# This is a basic VCL configuration file for varnish.  See the vcl(7)
# man page for details on VCL syntax and semantics.
#
# Default backend definition.  Set this to point to your content
# server.
#
backend default {
	.host = "next-hop";
	.port = "80";
	.first_byte_timeout = 300s;

section-io-gists

#section.io VCL sample. Copy paste into your section.io account to implement instantly
 
#vcl_recv - copy this code into the section called sub vcl_recv
if (req.url ~ ".*\.(?:css|js|jpe?g|png|gif|ico|swf)(?=\?|&|$)") {
	unset req.http.Cookie;
	#Varnish <= 3.x calls this "return (lookup);"
	return (hash);
}
 
#vcl_backend_response - copy this code into the section called sub vcl_backend_response

section-io-gists

#section.io VCL sample. Copy paste into your section.io account to implement instantly
 
#vcl_recv - copy this code into the section called sub vcl_recv
if (req.http.Accept-Encoding) {
	if (req.http.Accept-Encoding ~ "gzip") {
		set req.http.Accept-Encoding = "gzip";
	} else if (req.http.Accept-Encoding ~ "deflate") {
		set req.http.Accept-Encoding = "deflate";
	} else {
		unset req.http.Accept-Encoding;

section-io-gists

{
    "proxychain": [
        {
            "name": "varnish",
            "image": "varnish:4.0.3"
        }
    ],
    "environments": {
        "Production": {
            "origin": {

section-io-gists

# -- Rule engine initialization ----------------------------------------------

# Enable ModSecurity, attaching it to every transaction. Use detection
# only to start with, because that minimises the chances of post-installation
# disruption.
#
#SecRuleEngine DetectionOnly
SecRuleEngine On