Enforcer frameworksFastly VCL

Fastly VCL changelog

December 10, 2025

Version 12.4.0

  • Added Header Based Logger support
  • Added Telemetry by Risk support
  • Correct enforcer_start_time and risk_start_time on all enforcer activities
August 19, 2025

Version 12.2.0

  • Updated MAIN.vcl boilerplate

  • Support for adding a data enrichment header (new px_data_enrichment_header_name configuration)

  • Added Documentation enforcement workflow - verify that the documentation is up to date with the latest changes in the codebase

  • Added mobile headers to async activities

    • X-PX-VID-MOBILE
    • X-PX-UUID-MOBILE
    • X-PX-HID
    • X-PX-MOBILE-SDK-VERSION
    • X-PX-OS
    • X-PX-OS-VERSION
    • X-PX-DEVICE-FP
    • X-PX-DEVICE-MODEL
    • X-PX-HELLO

  • Adding redacted px_auth_token, px_cookie_secret, and px_remote_config_auth_token to telemetry activities

  • Fixed PXDE bugs

June 15, 2025

Version 12.1.5

  • Send default config values on Telemetry activity even if not set in enforcer config config explicitly
June 5, 2025

Version 12.1.4

  • Added Cross Tab Session cookie support on activities
  • Fixed the commented out example for the px_custom_block_page_content subroutine in the VCL template
April 7, 2025

Version 12.1.2

  • Fixed an issue where remote configuration list comparisons returned true for all requests when configured via remote config:
    • sensitive, monitored, and enforced routes
    • filtered routes, methods, ips, extensions, and user agents
    • graphql routes, sensitive operation names and types
March 4, 2025

Version 12.1.1

  • Aligned remote config ID field on all activities (px_remote_config_id -> remote_config_id)
  • Added remote config version field on all activities
February 18, 2025

Version 12.1.0

  • Added npm tool for building the VCLs and manifests
  • Added the px_remote_config_id field for all activities
  • Fixed an issue in the px_private dictionary output manifest file where the write_only property was incorrectly included as writeOnly