The Varnish Blog

Insights, updates, stories and more from Varnish

Featured Post

VCL Security PHP

Protecting PHP sites from CVE-2026-109618 with Varnish

If you run PHP behind Varnish, you can block the reported attack path for CVE-2026-109618 and CVE-2026-109619 at the...

Two years of NIS2: sovereign infrastructure as an insurance policy

In brief: two years after its transposition deadline, NIS2 is finally being enforced, and recent events have shifted...

Protecting PHP sites from CVE-2026-109618 with Varnish

If you run PHP behind Varnish, you can block the reported attack path for CVE-2026-109618 and CVE-2026-109619 at the...

The Cyber Resilience Act as Insurance

I just got back from Open Source Summit, and one topic followed me from hallway to hallway: the EU Cyber Resilience Act.

MoQ Will Change the CDN and Live Streaming Game

For roughly 15 years, live video delivery has improved in increments rather than leaps. Codecs got better and HTTP...

Security and observability are core parts of Varnish Enterprise

Security and observability are core parts of Varnish Enterprise. Starting with release 6.0.18r5, vmod-ratelimit,...

varnish-rs: A Rust Framework for VMODs

I expect those who know me will have raised an eyebrow as they saw my previous blog post. “Guillaume wrote a blog post...