News for hackers. Stuff that matters.
Re:Varnish Explained by fraggle222 on Monday October 24, 2016 @07:48AM (#12778022)
No security layer though right? Meaning if we want to restrict access to certain content based on user token or something, how to do that with Varnish? How to prevent John from reading Mary's tweets?
Re:Varnish Explained by lmz on Monday October 24, 2016 @09:18AM (#12778458)
It's fully programmable. You can probably make it verify the user token and URL against a database.
Re:Varnish Explained by fraggle222 on Monday October 24, 2016 @09:45AM (#12778680)
Really? I don't see much in the docs about this except https://www.varnish-cache.org/docs/4.1/users-guide/vcl-inlin...

They seem (at first glance) to have no concept of security in the sense of restricting people's access to certain content like in the case of all social networks.

Re:Varnish Explained by lmz on Monday October 24, 2016 @11:29AM (#12779662)
It's extensible in C, and modules (http://www.varnish-cache.org/vmods/) are available to talk to e.g. Redis.