What is Varnish?

The HTTP acceleration engine at the center of your delivery stack.

The engine that keeps your origin out of the equation.

Varnish is an HTTP accelerator and reverse proxy that serves data at near-memory speed, shielding your infrastructure from cacheable traffic before it hits your origin.

When a request arrives for a cached object, Varnish responds in under half a millisecond. The origin only gets involved when it has to: when the cached object has expired, or when the content is not cacheable. At scale, that distinction is the difference between stable infrastructure and infrastructure that buckles.

For two decades, the world's most demanding web properties, streaming platforms, and enterprise pipelines have relied on Varnish to sit between their users and their backends. The same engine that handles a global broadcaster's live stream also accelerates AI data pipelines, Kubernetes routing, and software supply chains.

Explore Varnish Enterprise

What can Varnish accelerate?


A lot of things. The same engine handles:

Web & API delivery

Dynamic applications, CMS platforms, and high-concurrency API traffic.

Video & media streaming

Linear live streams, VoD titles, and high-volume asset delivery.

AI & data infrastructure

Object storage and GPU training pipelines at exabyte scale.

Software supply chain acceleration

Public and private registries including Docker Hub, npm, PyPI, JFrog Artifactory, and more.

Open source or Enterprise?

Varnish Software continues to actively develop, maintain, and evolve Varnish Cache as an open-source distribution built to accelerate any type of HTTP workload and offload infrastructure.

Open Source

Varnish Cache

A caching foundation providing HTTP acceleration and reverse-proxy functionality. It includes major core engine features and packages a comprehensive set of extra modules that aren’t available out of the box in a Vinyl Cache setup, including:

  • In-process TLS termination
  • Official container images & Helm chart
  • Dynamic backends with TLS to origin
Commercial Engine

Varnish Enterprise

Engineered for high-concurrency workloads and massive data footprints, extending the core engine with specialized storage, security, and edge compute capabilities.


Enterprise Capabilities

Storage & Routing

  • MSE 4 persistent cache
  • High availability, replication & clustering
  • Traffic routing
  • Tag-based invalidation

Security & Compliance

  • Perimeter WAF & JWT auth
  • Software supply chain security
  • Distributed rate limiting

Programmability & Ops

  • 50+ native enterprise modules
  • WASM edge compute
  • Varnish Controller UI

Whether deploying community open-source instances or powering critical infrastructure, Varnish remains the definitive engine for serving data fast while shielding origins.

How Varnish fits into your stack

Varnish Enterprise sits as a unified delivery layer between your data sources and your end consumers. The architecture adapts to your environment rather than requiring you to adapt to it.

 

Data sources & origins

Web app backends

Application APIs, legacy CMS platforms, and dynamic applications.

Video & media origins

Linear streams, VoD titles, and high-volume assets.

Object storage / S3

Exabyte-scale cloud storage, data lakes, and AI datasets.

Software repositories

Public and private registries: Docker Hub, npm, PyPI, JFrog, and more.

Unified delivery layer

Varnish Enterprise

One extensible platform

Multi-tier architecture moving data at near-memory speeds.

Caching & acceleration

Sub-millisecond cache lookups, request coalescing, resilient hybrid object storage (memory + disk).

Clustering, HA & load balancing

Shared cache clustering, active-active replication, origin shielding, L7 backend directors

Perimeter security

In-process TLS, JWT authentication, edge WAF, supply chain filters.

Programmable edge compute

Atomic VCL routing, per-request header control, cache policy definition.

Observability & telemetry

Logging and metrics engine with real-time filtering. Multiple log formats (JSON, NCSA). Metrics and traces via Prometheus and OTel.

Deployment TYPes
Bare-metal and VM (Linux packages) Cloud instance Docker image Kubernetes (Helm chart)
Topologies
Origin shield Private CDN edge Router & load balancer Artifact cache Security gateway API gateway
Consumers & clients

Global portals & APIs

Web users, banking API clients, and retail consumers.

OTT streaming devices

Smart TV platforms, connected devices, and live media audiences.

AI & compute clusters

GPU training arrays, HPC simulation nodes, and analytical systems.

Varnish use cases for critical infrastructure

Varnish Enterprise powers a purpose-built product family for the highest-demand use cases:
Use case Product What it does
Software supply chain security Varnish Artifact Firewall

Secures your software supply chain at the perimeter

Artifact registry acceleration Varnish Virtual Registry

Accelerates and consolidates artifact registries

Private video delivery Ora Streaming

Dedicated private CDN infrastructure for broadcasters and OTT platforms

Data-sovereign CDN Varnish CDN

European-hosted CDN for NIS2 and GDPR compliance 

White-label CDN Varnish CDN in a Box

Turnkey CDN service for telcos and network operators

AI and HPC data delivery Varnish AI Accelerator

Keeps GPUs fed and eliminates storage bottlenecks

Open source heritage and enterprise support


Open source heritage


Varnish has its roots in open source, and that heritage shapes how the commercial product is built and maintained. Varnish Enterprise runs on the same open-source core, with our own patches layered on top, so VCL code written for Varnish Cache runs on Enterprise too. Verified binaries, signed packages, visible release pipelines, and predictable upgrade paths are core parts of the engineering process.


Support & stability


Commercial deployments come with SLA-backed vendor support, validated software streams, and upgrade pathways that don't require a rearchitect. Storage failures isolate without restart penalties. Clustered deployments absorb node changes without traffic disruption.


Battle tested


When infrastructure teams ask whether they can depend on Varnish for critical production workloads, 20 years of deployments at global scale is the answer.

Support

Engineering principles

What makes Varnish fast?

Infrastructure depends on more than a standard proxy layer. These are the engineering decisions that make Varnish behave differently under load.

 

CORE ARCHITECTURE
Cache-first design & clustering

Varnish is built around storage performance and handling massive amounts of concurrent requests. Every request follows a rapid hash lookup straight into system memory, shielding origin infrastructure from traffic. Concurrent requests for the same uncached or expired content are coalesced into a single upstream fetch. Cache-to-cache clustering means a peer absorbs the fetch if a node misses, so the backend never takes unnecessary load.

< 0.5ms edge cache hit response latency
High-throughput in-memory hash lookup path
High-concurrency request handling
Request coalescing
Cache-to-cache clustering prevents backend drop
STORAGE ENGINE
Massive Storage Engine

MSE manages terabyte-class caching without exhausting system resources. Objects are stored in large, pre-allocated files with their own internal filesystem-like behavior, removing overhead from the OS filesystem. Cache persists across restarts, so a reboot or upgrade doesn't mean starting cold.

Hybrid memory and disk architecture

Pins high-demand hot objects inside RAM while cold data automatically falls back to low-cost disk arrays under a self-regulating Memory Governor.

Persistent and resilient by design

Cache persists to disk, so a restart rebuilds from persistent storage instead of starting cold. If a disk fails, you lose only the portion of the cache stored on it, not the entire cache.

PROGRAMMABILITY
VCL programmable per-request control

Varnish Configuration Language (VCL) is a domain-specific programming language designed to manage per-request behavior programmatically.

VCL compiles to native code via C and swaps atomically at runtime without dropping a single active connection.
SECURE PIPELINES
In-process TLS execution

TLS termination runs directly inside the multi-threaded cache runtime rather than through an external proxy hop.

Eliminates internal proxy-hop latency to hit benchmarks clear of 150+ Gbps.
MODULARITY
50+ native VMOD extension layers

Supports over 50 built-in Varnish Modules (VMODs) to control complex request logic and enterprise security controls right at the perimeter.

Varnish Enterprise core capabilities

An extended capability breakdown:

01
Storage architecture and delivery performance
02
Edge security engineering and secure transport
03
High availability, invalidation, and edge compute
  • Clustering with peer-to-peer cache sharing and stale-if-error protection.
  • Backend load balancing featuring active health probing.
  • Purge performs targeted cache invalidation programmatically, with hard and soft purges available.
  • Tag-based cache invalidation for granular cache purging, supporting millions of tracked assets with full persistence.
04
Enterprise observability and integrations
  • Advanced logging and metrics engine with real-time filtering, supporting multiple log formats (JSON, NCSA).
  • Full OpenTelemetry output across logs, metrics, and traces.
  • Native Prometheus metrics data via integrated stat exporters.
  • Native AWS signature signing, object storage caching directors, and bot network defenses.

 

Varnish documentation

Open source tooling for Kubernetes and sandboxing

Alongside Varnish Cache and Varnish Enterprise, two open-source projects extend the engine for modern infrastructure challenges.
Networking

Gateway API

A full Kubernetes Gateway API implementation. Delivers standards-compliant routing with Varnish's performance.

Kubernetes-native HTTP routing & control
Explore Gateway API
Sandboxing

tinyKVM

Designed for high-performance computing, tinyKVM allows standard Linux binaries to run securely in micro-VMs with near-native execution speeds.

Ultra-fast hardware-virtualized edge sandboxing
View tinyKVM on GitHub

Get started

Where to go next

Running serious traffic?

Talk to the team about Varnish Enterprise.

Contact Sales →

Deploying on Kubernetes?

Install the Gateway API implementation directly into your cluster.

helm install →

Building a CDN or streaming platform?

Explore Ora Streaming and Varnish CDN.

Explore products →

Try open source

Spin up Varnish Cache using official project container configurations.

docker run varnish →

Request a free trial