All blog posts
Page 28
-
Better diff view from feedback & research | Fastly
Joe Hoffend, Sayali Deshmukh
We’ve made improvements to our diff view by combining customer testing, feedback, and requests with our own inspiration with diff experiences we enjoy using. The result is an enhanced diff view experience that we think you’ll enjoy as much as we do.
Product -
Terraform now supports all Fastly logging endpoints
Dom Fee, Joe Hoffend
We’ve been hard at work at Fastly this year working on updates to our Terraform provider and have some exciting ones to announce: Terraform now supports all our logging endpoints, plus Fastly web application firewall customers can now manage their WAF within Terraform.
Product -
Fastly and Signal Sciences join forces
Joshua Bixby, Andrew Peterson
Today, Fastly completed the acquisition of Signal Sciences and took a giant step forward toward our vision of modern, unified web application and API security. We will call on our shared view of empowering developers as we chart a path toward building an incredibly secure, performant platform and unlock all-new possibilities, together.
Company newsSecurity -
BuzzFeed Optimize Gif-heavy Content with new Fastly Feature
Dom Fee
Fastly’s new Image Optimizer feature converts animated gifs to MP4 videos for a faster load time, smoother experience, and significant savings on end-users’ bandwidth. In fact, the new feature was able to condense BuzzFeed’s 250 MB, browser-freezing “100 Greatest Gifs of all Time” article to a much more manageable 6 MB.
Company newsProduct -
Web Application Firewall (WAF) Best Practices
Liam Mayron
Following WAF best practices is imperative to keep your business and customers secure. Learn about new regulations and security tips.
Security -
The state of QUIC and HTTP/3 2020
Jana Iyengar
QUIC and HTTP/3 have entered the final stages of development at the IETF. Distinguished Engineer, Jana Iyengar, elaborates on the current state of the protocols, their deployment across the internet, and his expectations for QUIC and HTTP/3 in the near future.
Industry insightsEngineering -
Incorrect Delivery of Partial Log
Fastly Security Research Team, The Fastly Security Technical Account Management Team
On July 29th at 00:00 UTC, Fastly was notified by a customer (customer X) that a single log line intended for a different customer (customer Y) was received by customer X’s log system. Fastly promptly began to investigate and determined that when a complex series of conditions occur, a log line may be misrouted to an incorrect logging service. We were able to trace the root cause to an error in logic introduced by Fastly to improve performance in April 2012. This single report from one customer is the only instance that Fastly is aware of, where all necessary conditions aligned simultaneously in eight years.
Security -
Deploying network error logging with Compute
Patrick Hamann
We’ve been experimenting with Network Error Logging with Fastly Insights and discovered that processing the NEL reports is a great use case for Compute. In this post, we’ll look at our first attempt to build a NEL reporting pipeline, discuss where there was potential for optimization, and how Compute solves these problems while introducing performance and security improvements along the way.
Product+ 3 more -
Fastly to Acquire Signal Science for Security at Scale | Fastly
Joshua Bixby
Security has always been a part of Fastly’s DNA, not just within products, but in our vision of trust and safety as a modern platform. Today, we are pleased to announce that we have announced our intent to acquire Signal Sciences.
Company newsSecurity -
Hard-earned insights from a pair of secure DevOps pros
Liam Mayron
Fastly CISO Mike Johnson and Brave Software Senior DevOps Engineer Ben Kero share their practical advice for cementing more holistic security practices within your CI/CD pipeline.
DevOps+ 2 more -
Why “by developers, for developers” matters
Joshua Bixby
Developer-centricity is now a mission-critical philosophy for companies to embrace. And during COVID-19, we all know that the stakes have never been higher. We’ve seen that businesses that operate with a dev-first mindset at their core will have the strategic advantage and will only increase it, today and into the future.
CultureWebAssembly -
Fastly Security Advisory: Cache Poisoning Vulnerability Leveraging X-Forwarded-Host Header
Fastly Security Research Team, The Fastly Security Technical Account Management Team
Fastly was notified of the issue on May 21, 2020 13:30 UTC. Fastly immediately launched an investigation, identifying which origin servers responded with a test port number in the redirect response, in order to understand the vulnerability and possible solutions. After the investigation, Fastly first notified potentially affected customers on July 15, 2020 at 04:30 UTC. The vulnerability is a variant of a [previously reported vulnerability](https://www.fastly.com/security-advisories/cache-poisoning-leveraging-various-x-headers), and ultimately the result of constructing cacheable origin responses based on user-defined data. The issue occurs when an attacker issues an HTTPS request and specifies within the Host header a port number that is not actually being used for any services. It is possible to cache a resource in such a way as to deny future requests from being serviced properly.
Security -
Cloud Security for Developers
Stephen Kiel
If you’re evaluating web application security tools exclusively for their security requirements, you may be missing one of the most essential opportunities to successfully grow your secure DevOps culture: developer-centricity.
SecurityDevOps -
Fastly’s security DNA: a look at our culture of safety, privacy, and trust
Dana Wolf
Fastly's heritage of security runs deep — far beyond our portfolio of web application and API security products. Our philosophy of developer empowerment, focus on community, and values-driven culture each contribute to our security DNA in an important way. And we'd like to tell you how.
Security+ 2 more -
Apps That Shouldn’t Be Built at the Edge | Fastly
Sean Leach
Progressive developers are increasingly using the edge of the network to power more performant and customized apps. With the use cases mounting, it seems there's very little that can't be built at the edge. And aside from a few exceptions, that just might be true.
ComputeEngineering -
First things first: six resources for building on Fastly
Jacob Rosenbacher
If you’re among our newest community members, we’d love to show you more of what Fastly has to offer. Once you’ve covered the basics of our getting started guide, check out the resources in this article to take our programmable edge cloud platform further.
Product -
State at the edge
Peter Bourgon
With the introduction of Compute, Fastly provides a richer model for the CPU. WebAssembly, powered and secured by the Lucet compiler and runtime, unlocks essentially arbitrary code execution within each request lifecycle. This raises the immediate question: what would a richer model for memory, or state, look like?
Engineering+ 2 more -
The Future of Zero Trust: Continuous Authentication
The Fastly Collective
Being able to continuously authenticate users’ access to critical web and API services without causing them to pay the price of increased friction may sound like a lofty goal. Still, it can be achieved by integrating technologies you likely already have. Combining technologies built to continuously monitor applications and APIs for attacks and anomalous behavior with identity technologies already deployed to authenticate users allows administrators to protect their critical applications without inconveniencing the user.
-
What is Cache Control?
Mark Nottingham
The Cache-Control response header is one of HTTP’s more widely known header fields; it allows a site to control how caches handle their data in CDNs, browsers, and elsewhere
EngineeringIndustry insights -
Leveling up observability with Compute
MJ Jones
Observability is hard. Distributed systems, dev and testing environments, and outside vendors all complicate the problem. With Compute, Fastly wants to make observability easier. Here’s what we’re doing.
Performance+ 4 more
