For AI agents: visit https://docs.datadome.co/llms.txt for an index of all pages formatted in Markdown and endpoints in OpenAPI.
- Platform Integrations: Server-side
- Varnish
Varnish Changelog
- Fix truncation size of Content-Type header
- Fix truncation size of Sec-* headers
- Add Sec-CH- and Sec-Fetch- headers
- Fix a typo in the XForwardedForIp payload field name
- Add semver versioning
- Fixed a segfault when the backend is set to none
- Added support Varnish up to 7.0 included
- Added support Varnish up to 6.6
- Added support Varnish 6.4
- Introduced the universal module that works at all supported varnish version
- Fixed support of varnish4 before 4.0.3
- Sync exclusion regex with another modules
- Added support Varnish 6.1, 6.2 and 6.3.
- Doesn't cleanup backend request if it was cleaned up at the first try
- Included headers to ApiServer's call: Content-Type, From, X-Real-IP, Via and True-Client-IP
- Improved X-Forwarded-For handling
- Don't use static memory to keep headers name to prevent crash at
vcl.load & vcl.discard
vmod_validate_url should change url and not method, fixed it
- Don't use static memory from module inside Varnish request to prevent crash at
vcl.load & vcl.discard
- Prevented double free of memory when varnish run free at module config.
- Added support Varnish 5.2 and 6.0.
- Force close connection with request body when API server's baned request
- Introduced support 401 response code from the API Server
- Cleanup unused tests from sources
- Introduced data_dome_shield.is_datadome_call()
- Tested with directors-based upstream
- Added support VCL_Log:DataDome_status and VCL_Log:DataDome_spent_time
- Restoring request inside is_valid() and made restore_request() deprecated
- added datadome.vcl
- Added support of Varnish-5.1.2+
- Force use HTTP/1.1 protocol to ApiServer's call
- Added support of Varnish5.1
- Allocating more memory to overstep a bug inside http_Teardown
- Implemented support X-DataDome-request-Headers
- Reset memory that is used as new headers for the API server call
- Reset memory that is used as new headers for the API server call
- Removed X-DataDome headers at real backend request and introduced
data_dome_shield.cleanup_backends_request
- Don't copy URI for regex matching
- Moved from syslog to standard varnish logging way
- Added verification by X-DatadomeResponse header
- Sent request's headers to the API server
- Sent request's Connection, Pragma and Cache-Control header's value
- Add support of Varnish5
- Sync exclusion regex with another modules
- Fixed crash when use
data_dome_shield.uri_regex_exclusion without data_dome_shield.uri_regex
- Switched to use prereserved memory to create API call body
- Fixed memory overflow when value has a lot of symbols that will be url encoded
- Don't duplicate Host header in request to real backend
- Don't send request headers to API server
- correct truncate url encoded value
- Decreased the maximum API call to 10kb
- Add .mp4 and .otf to default exclusion regex
- release workspace memory when it has any errors
- Don't allocate more memory that real use
- Remove all code that can read request body
- Add regex exclusion
- Send Content-Length header as PostParamLen
- Correctly handle extra-headers in blocking mode
- Disable send Cookies and Body to API server by default
- Add debug_params option
- Send Cookies length and Body length to API server
- Send Authorization length
- Send Method
- Send X-Requested-With
- Send Origin
- Add url encoding to API call parametrs
- Don't overwrite Set-Cookie header.
- Module don't generate CleintID
- Remove X-DataDome header with module version
- Support X-DataDome-headers from API response
- Implemented setup DATA_DOME_IS_URI_REGEX_MATCHED env
- Add X-DataDome header with module version
- fixed truncated client ID generation
- re-generate client ID if it shortest or longest what expected
- disable send post param in default settings
- fix crashing on POST request with zero body
- moved logic to add Set-Cookie to is_valid function
- fixed isSentByClient and generatedNewClientID
- switched off default url encoding for API Call
- replace old cookies
- fixed accept encoding
- forced re-read body (removes 5 seconds timeout)
- accept body that sends in different packets
- fixed crash X-Forwarder-For without port
- don't send empty parameter anymore
- Regex only apply to URL, not to MIME anymore
- Cookie and session ID implementation
- Extract more from Header : Accept, AcceptCharset, AcceptEncoding and AcceptLanguage
