All blog posts
Page 41
-
Getting an A in security: SHA-2 migration and disabling RC4
Sean Leach
As many of you know, TLS best practices have changed a lot in the past two years. Recently, Fastly has changed how we configure TLS to make it even more secure. This includes migrating our TLS certificates from SHA-1 to SHA-2 and disabling RC4 for all our services.
Security -
Boost Cache Efficiency with Origin Log Analysis
Rogier Mulhuijzen
If you want to increase the efficiency of your Varnish (or Fastly) cache, you need to figure out what traffic is not cached. By definition, any traffic that reaches your origin is not cached, and thus worthy of investigation.
Performance+ 2 more -
How Fastly builds support, part 2: The customer experience
Austin Spires
What customers encounter when evaluating and onboarding with Fastly isn't arbitrary. It's an experience that we've intentionally crafted. This post will discuss what customers experience, and what we have in place to make sure it happens every time, for every customer.
-
Securing the news: TLS for media sites
Sean Leach
TLS is especially applicable to news sites. News organizations bear a public responsibility to accurately report the news, and need to take the steps necessary to ensure credibility. The security of online news content is one of the first steps in verifying its veracity while protecting readers.
Security -
How Fastly Builds Support, Part 1: Our Standards
Austin Spires
In the time I've been at Fastly, we've had enough customers and friends ask us about how we do support and what's going on under the hood that it seems appropriate to give a high level overview of how we build, what we've learned, and how other teams can borrow from our setup.
-
Deep Log Visibility Offered by Logentries | Fastly
Simon Wistow
Today Logentries released a Fastly Community Pack, which automatically sets up tags, saved queries, and visualizations in the Logentries dashboard to help Fastly customers get the most out of their real-time logs.
-
Accelerating Rails, Part 2: Dynamic HTTP Caching
Michael May
In the second part of our series on accelerating Rails, I'll cover configuration of a few Fastly features, Varnish and Varnish Configuration Language (VCL), and strategies for caching dynamic content that are targeted towards the Rails developer.
Performance -
Normalizing the Host Header
Rogier Mulhuijzen
In the continued quest to increase cache hit ratios, the chant is: "Normalize, normalize, normalize." Less variation in your requests means you have a higher chance of getting hits. This month's highlight is the Host header.
PerformanceEngineering -
Fastly updates terms, privacy, and use policies | Fastly
Paul Luongo
Security, compliance and transparency are very important to us at Fastly, and these updates will help protect our customers as well as our company.
-
Caching the Uncacheable: CSRF Security
James A Rosen
In this post, I investigate several strategies for maintaining security while improving cacheability. I use Ruby on Rails for the examples, but the techniques apply to nearly any web application framework.
Security -
Join Fastly’s New Community Forum
Elaine Greenberg, Austin Spires
We’re beyond excited to introduce you to Fastly’s Community Forum. We’ve been working closely with our community to build an interactive, inclusive hub for our customers and fellow web performance nerds. The Forum is a place to share knowledge, give and receive help, and learn more about Fastly.
-
Don’t Let Your Site Crash and Burn This Holiday Season
Paddy Bear
Americans are expected to spend $89 billion shopping online this holiday season, according to Forrester Research. Is your ecommerce site ready for the massive spike in traffic?
-
Accelerating Rails, Part 1: Built-in Caching
Michael May
Caching is one strategy that helps ease scaling pains that I often see Rails developers overlooking. Starting out with caching can be confusing, because terms and documentation can be convoluted, especially if you’re not an expert.
Performance -
Using ESI, Part 2: Leveraging VCL and ESI to Use JSONP
Simon Wistow
In this post, I’m going to discuss how you can leverage ESI and VCL (Varnish Configuration Language, the domain-specific language that powers Fastly’s edge scripting capabilities) to use JSON responses, even when they’re loaded from another site. This is useful in many cases, including various analytics and social sharing instances.
Performance -
Overriding Origin TTL in Varnish, or My Beginner's Mistake
Rogier Mulhuijzen
A long time ago, I was helping out at a gaming conference where there was an intranet CMS using a Twitter search plugin. Unfortunately, the rather saturated Internet connection was slowing down all of the Twitter search requests. Each page needed 4 searches, at 500ms each, for a total of 2-3 seconds per page.
Engineering -
Understanding Fastly’s Cloud Accelerator
Artur Bergman
Today, we’re happy to announce a collaboration with Google Cloud Platform that will combine the power of Google’s infrastructure with the speed of our real-time content delivery network.
-
Large File Delivery Improved with Streaming Miss Support | Fastly
Simon Wistow
Today, we’re excited to announce two related features that lower bandwidth costs and reduce origin load for Fastly customers, resulting in faster downloads for their users: Streaming Miss and Large File Support.
Streaming+ 2 more -
New Gzip Settings and Deciding What to Compress
Steve Souders
Fastly recently conducted an extensive analysis of which resources should be compressed. Today, the results of that analysis are reflected in the Fastly app, which allows our customers to adopt better gzip settings. This not only makes our customers' websites faster, but it will also reduce monthly bandwidth charges.
Performance -
Catch Digital to Write VCL for Fastly and Drupal
Jonathan Dade
We recently decided to work with Leon Kessler at Catch Digital to introduce VCL that would make it easier for new Drupal customers to get up and running with Fastly. Here’s how we did it, and how you can use it to improve the performance of your websites, mobile applications, and APIs.
Customers -
Disabling SSLv3 Due to POODLE Vulnerability
Sean Leach
Based on our understanding of the POODLE vulnerability (mainly the fact that there is currently no workaround), and the fact that we have very little traffic running over SSLv3 (around .5% globally), we are disabling SSLv3 for all Fastly SSL customers, effective immediately. This will mainly affect users of Windows XP Pre-service pack 3 combined with IE version 6. If you are in this group, please upgrade to a more recent browser.
Security
