You appear to be offline. Some site functionality may not work.
Sign Up

Fastly Blog

Engineering

Fastly's Response to SegmentSmack

A remotely exploitable denial-of-service (DoS) attack against the Linux kernel, called SegmentSmack, was made public on August 6th, 2018 as CVE-2018-5390. Fastly was made aware of this vulnerability prior to that date through a responsible…

Building the WAF test harness

To help our customers secure their sites and applications — while continuing to give their users reliable online experiences — we’ve built a performant, highly configurable, and comprehensive Web Application Firewall (WAF). In order to…

The evolution of Fastly’s Open Source and Nonprofit Program: supporting an ethical and open internet

Open source projects are the foundation of the internet; by sponsoring their important work, we support our vision for unfettered, scalable technical innovation. We’ve supported numerous open source projects since the inception of Fastly, and…

The QA mindset: designing for reliability

Fastly’s engineering teams are smart and capable — they architect thoughtfully, write elegant code, and work carefully with incredible complexity and scale. So why would they (or anyone) need quality assurance (QA)? In this post,…

Building the Fastly WAF

In keeping with our security team’s vision for defending the modern web, we launched our Web Application Firewall (WAF) to help our customers secure their sites and applications while providing reliable online experiences for their…

Deliberate practice in information security

Deliberate practice is the act of performing a set of tasks that are just slightly more difficult than what you’re used to, so you can get better at a specific activity and move from a…

How we moved our Historical Stats from MySQL to Bigtable with zero downtime

In an effort to move forward from early architecture that we were quickly outgrowing, we recently migrated our Historical Stats database from self-managed MySQL to Google Cloud Bigtable. Read on to learn how we did…

New York Media on surviving DDoS and building a better web

At Altitude 2016, New York Media’s CTO discussed surviving a massive DDoS and the steps they took to mitigate, gave us a peek inside their stack, and described how New York Media is building a…

The New York Times on failure, risk, and prepping for the 2016 US presidential election

At Altitude NYC, The New York Times CTO Nick Rockwell gave us a peek inside The New York Times’ stack and culture (and how he’s redefined risk from both a corporate and engineering standpoint), and…

Creating originless & cloud-based services with Fastly + Terraform

In a previous post, HashiCorp’s Seth Vargo introduced the Terraform infrastructure-as-code tool for building, changing, and versioning infrastructure. In this post, we’ll cover two cases using Terraform with Fastly: first we’ll create and manage an…

Google Chrome’s Alex Russell on service workers, PWAs, and what’s next for mobile

At Altitude 2016, Software Engineer Alex Russell discussed the latest projects the “performance obsessed” Google Chrome team had underway. In this recap, we’ll take a look at how you can provide reliable offline experiences, how…

Building and scaling the Fastly network, part 2: balancing requests

In part 1, we discussed how Fastly started down the slippery slope of network software. Our previous experience with routing suggested that avoiding traditional network devices would not only dramatically cut capital expenditure, but…

The 5 emotional stages of a DDoS attack

It’s emotionally damaging to be the victim of a DDoS, to say the least. The technological consequences of an unmitigated DDoS attack can cripple businesses, but the emotional impacts are often ignored. CEO Artur Bergman…

How to solve anything in VCL, part 3: authentication and feature flags at the edge

In “How to solve anything” parts 1 and 2, we outlined how to use Varnish Configuration Language (VCL) to address some of your more challenging problems. In this post, we’ll discuss how Andrew...

A step towards better Web API authentication

The Fastly API is an integral part of our CDN — using our APIs, customers are able to instantly reflect configuration changes, purge content, and perform anything that is available on the Fastly control panel…

The elements of scaling

Camille Fournier, former CTO of Rent the Runway and self-described senior thinker and raconteur, spoke at Altitude 2016 on her experience in leadership, sharing how she overcame the communication barrier that comes with growth to…

Automating Fastly with Terraform

HashiCorp’s Director of Technical Advocacy discusses Terraform, their tool for building, changing, and versioning infrastructure safely and efficiently, and how they use it to codify Fastly configurations.

The future of the edge

In this post, Tyler McMullen will explore “the future of the edge,” or the next logical step in how we streamline online experiences. In order to keep up with the direction things are headed, we…

The fallacy of fast: Ines Sombra at Altitude 2015

We hosted our first-ever customer summit in June of last year, with the goal of bringing together our customers and the people who build our products to discuss web performance, Varnish, and the future of…

Microservices war stories

The popularity of implementing microservices in today’s application landscape continues to rise. There have been countless success stories focused on migrating from a monolithic architecture (a single large application stored in one code repository) to…

  • 1