Varnish Administration Console


Version: 3.9.3

Released: 12 Jan 2022


  • Patch release with version 2.17.1 of Log4j2 library.
  • Fixes CVE-2021-44832

Version: 3.9.2

Released: 20 Dec 2021


  • Patch release with version 2.17.0 of Log4j2 library.
  • Fixes CVE-2021-45105

Version: 3.9.1

Released: 15 Dec 2021


Version: 3.9.0-2

Released: 13 Dec 2021


  • Package release with updated configuration file for mitigation of Log4j2 vulnerability.
  • See CVE-2021-44228

Version: 3.9.0

Released: 23 Aug 2020


  • Minor release which fixes various CVE’s due to usage of old libraries.

Version: 3.8.6

Released: 08 Jul 2020


  • Patch release which fixes an issue of not showing the VAC version.

Version: 3.8.5

Released: 27 Mar 2020


  • Mongo driver has been upgraded to 2.14.3.
  • SSL support for self signed certificates.
  • Various small fixes in regards to RRD issues.

Version: 3.8.4

Released: 13 Nov 2019


  • Fixes a bug where parameters in the database were multiplied. If parameters are handled in VAC through the Web based UI, please review parameters for all parameter sets in VAC (Configure -> Parameters(gray button) -> Edit -> [Review all values]), then press ‘Save Changes’ even if no changes were made. Repeat for each parameter set. This will update the database correctly.
  • Support for missing parameters in VCP4.1 clock_step mse_delay_writes mse_membuf_pool mse_membuf_size mse_nuke_limit mse_pad_writes mse_prune_factor mse_prune_loop pool_sslbuffer ssl_buffer startup_timeout thread_pool_reserve
  • Support for missing parameters in VCP6.0 allow_exec backend_local_error_holddown backend_remote_error_holddown crypto_buffer h2_header_table_size h2_initial_window_size h2_max_concurrent_streams h2_max_frame_size h2_max_header_list_size object_mutex_slots scoreboard_active scoreboard_enable thread_pool_watchdog vsm_publish_interval
  • Bad things graph no longer present 0.5 as 500m

Version: 3.8.3

Released: 28 Aug 2019


  • Upgraded the Mongo Java driver to 2.13.2
  • Added various log calls throughout the code to help with support
  • VCL editor improvements
  • Added the options to secure the unrestricted /stats endpoint if a rest_api_token is set in the defaults file

Version: 3.8.2

Released: 28 Mar 2019


  • Fix a Purger bug concerning client SocketTimeouts.

Version: 3.8.1

Released: 2 Oct 2018


  • Introduce MongoClient connection string.
  • Enable ReadOnly User to view VCL and Parameters set.
  • Bug fix for VAC not allow passwords containing special characters.
  • Other minor bug fixes.

Version: 3.8.0

Released: 13 August 2018


  • Proper logging for systemd.
  • Minor bug fixes and other various improvements.

Version: 3.7.0

Released: 28 June 2018


  • Full responsive, changes in layouts and modern look.
  • Minor bug fixes and other various improvements.
  • systemd compliant packages for CentOS / RHEL 7.

Version: 3.6.2

Released: 25 May 2018


  • Fix a purger bug where socket connections were not soaked across multiple requests.

Version: 3.6.1

Released: 23 May 2018


  • Fix a purger bug where multiple requests on the same connection were not handled.

Version: 3.6.0

Released: 14 March 2018


  • Compatibility with Varnish 6 through the Varnish agent 6.
  • Introduces ability to register a Varnish node directly into a existing group.
  • Fixes the broken scroll in the parameters list.
  • Ignoring casing when comparing parameters in VAC, avoiding unnecessary pushes to an instance.
  • Prevent close of parameters view without saving.
  • Show restart groups messages individually per node.
  • Correct notification on group restart.
  • Fixes broken API documentation link in support page.
  • Parameter editor uses new notification system.
  • User view uses new notification system.
  • Handles health icons more gracefully.
  • Better handling of the parameters deploy message.
  • Better interpolation for past data graphs when a node is dead in a group.
  • Better ban pagination.
  • Fix for user API parsing bug.
  • Display private badge when a VCL is private to the group private VCL.
  • Fixes issue where login was triggered multiple times.
  • Fixes issue where group was not uploaded.
  • Updated references to VCP 6 in the UI. Linking in Support page and bans page.
  • Better handling of summary errors in the configure page.
  • Fixes issue where Parameters didn’t show correct group.
  • Fixes group displays and response for params.
  • New Parameters schema response. (groups/groupNames attributes) API documentation
  • Displays information in how to register a Varnish instance.
  • Handles group deletion not leaving node with null references.

Version: 3.5.0

Released: 5 October 2017


  • New VCL schema response. API documentation
  • Updated Cache API response. API documentation
  • Fixes upgrade fails from 3.3.0 to 3.4.0 or 3.4.1 when a group has no caches
  • Adds a VclCommitHistory and using it to provide compilationData and deployedData.
  • Improves UI usability and feedback by using Backend fetches using promises.
  • Splits some of the html elements into smaller templates to reduce footprint.
  • Fixes Snippets not rendering when being clicked.
  • Fixes “Save changes” doesn’t reset to correct state.
  • Fixes “Save changes” does not save all changes
  • Error checking on VCL’s is improved at the API level.
  • Removes groupName and group from the vcl entity.
  • Improves the rendering and location of the “diff box” for each commit.
  • Creates a separate view for the vcl editor node compile and deploy table.
  • Shows an individual message per node in the bans.
  • Makes panic messages readable and able to copy to the clipboard
  • Introduces a new VCL name format: vclName_yyyyMMdd_HHmmss_commitIdHash
  • Fixes issues with the list of resources while authenticated, via the API.
  • Have the compilation error and highlight properly
  • Fixes issue while on a new VCL, and when back to the active tab.
  • Fixes issue with the VCL name validation not showing when a wrong name is used.

Version: 3.4.1

Released: 6 July 2017


  • Prevents debian installations to override the existing defaults file
  • SuperFastPurger curl request hangs in 3.4.0

Version: 3.4.0

Released: 27 June 2017


  • SuperFastPurger Handles case-sensitive custom headers in the SFP purger
  • SuperFastPurger Fixes Responses that where invalid for nodejs clients purger.
  • SuperFastPurger Fixes the content-length that caused problems in nodejs
  • SuperFastPurger Adds the reqnum to the response in the purger.
  • When proxied, accept X-Forwarded-For to set the ip address of the node
  • Graphs on “live” now use total instead of average in a group.
  • VCL Diff functionality is working properly. (not working in 3.3.0)
  • Removes /versionjson endpoint /version now accepts Content-Type: application/json and text/plain
  • HTTP 500 errors are now properly shown in the UI, to be able to dismiss and proceed.
  • Fixes conflicting data when querying cache endpoints and caches in a group.
  • Distinguishes between varnish and varnish-plus in the UI
  • When both hits and misses and hits for pass are zero, NaN was returned rather than 0.
  • Copy and paste in the terminal now works.
  • Fixes issue with text encoding in VCL.
  • Fix for rendering graphs when no active nodes.
  • Improves graphs, when one node is not coherent in a group.

Version: 3.3.0

Released: 17 November 2016


  • Fixes invalid XSS filter for VCL using VCL_synth with javascript tags
  • Fixes terminal for Safari browsers
  • VCL deploy will also add the commit hash to the VCL name, when hashed for the Varnish instance. Re-deploy in VCL might be needed to fix inconsistency warning
  • Past data UI reads RRD_conf.xml for updated configuration.
  • New message page UI.
  • Parameters for Varnish 4.1.
  • Ban end point, now returns Content-Type json.
  • Improve the security of password reset.
  • Super fast purger + custom varnishd listening port. Dealing with the removal of listen_address in Varnish >= 4.1. Check API reference for more information.
  • Better JSON of the VCL deploy message.
  • API endpoint status/all now shows the license.
  • VAC Guide and changelog available in support page.

Version: 3.2.1

Released: 30 June 2016


  • RRD_conf.xml is re-read after a VAC service restart
  • Addresses XSS concerns in both API and UI
  • User that issued ban is listed on the UI and API
  • VCL in a group show deployed label and the content that is deployed.
  • Better distinction between VCL and VCL in a group
  • Multiple Health endpoint to minimize calls
  • Speedometer fix to show proper percentage within group
  • When issuing an empty ban, the empty ban show in the list

Version: 3.2.0

Released: 31 March 2016


  • New role User.
  • Users can now be specific to a group or groups.
  • New permissions schema.
  • Groups scopes, so users can only see what belongs to them.
  • Varnish 4 parameter set by default.
  • Reference to mongodb-org and updated documentation.
  • Minor improvements in the UI
  • Several bug fixes

Version: 3.1.0

Released: 2 September 2015


  • Past data in the UI
  • VCL commit history in the UI
  • New graphs in the configure page in the UI
  • New percentage graph for cache hit, miss, hitpass in UI and API
  • Select primary group feature in the UI
  • Duplicate parameter
  • Filter by message in the UI
  • Minor improvements in the UI
  • Several bug fixes

Version: 3.0.4

Released: 24 July 2015


  • API support of Roles
  • New User interface: Roles and new dialog
  • Support for varnish-agent use of hostnames for AWS purposes
  • Several bug fixes
  • Minor UI improvements

Version: 3.0.3

Released: 3 December 2014


  • UI redesign
  • Varnish 4 compatible
  • Several other bugs

Version: 3.0.2

Released: 6 April 2014


  • Ubuntu init script: Invalid content.
  • Overview: Change bandwidth label
  • Upgrade: upgrading from 3.0.0 to 3.0.1 made the init script disappear
  • Changed default TTL for object cache in purger

Version: 3.0.1

Released: 28 March 2014

Changes and bug fixes:

  • Overview: Bandwidth axis doesn’t handle large values
  • RRD: out of memory with backing up to mongo
  • Bans: fix escape characters
  • Historical Data Counters time inconsistency
  • Overview: Limit the averages to two decimals
  • Configure: Edit and save active VCL, possible to deploy unsaved VCL
  • Firefox doesn’t render correctly user page, message page and bans.
  • Missing VCL and parameter status
  • Parameter: we need to keep active tab highlighted on menu in parameter view
  • Adding a second varnish cache to a group will not inherit the active VCL immediately
  • UI: Collapse messages to make it easier to read through them
  • Versioning: bottom version numbers.
  • Configure: VCL editor doesn’t correctly parse backend response when save is used more than once.
  • overview: real time counters labels
  • Configure: unclear message when failed to deploy VCL

Version: 3.0.0

Released: 15 September 2013


  • VAC API implementation
  • backend re-architecture
  • frontend re-architecture
  • integration with varnish-agent 2.2

Version: 2.0.1

Released: 22 February 2013


  • ping included in vagent2
  • integration with vagent2
  • in memory rrd to improve performance and scalability
  • websocket refactor to improve performance and stability
  • scheduler refactor to improve performance
  • user password updates bug fixes
  • password reset api included

Version: 2.0.3-11

Released: 6 December 2012


  • removed redundant default VCL deployment

Version: 2.0.3-10

Released: 5 December 2012


  • re-try when response fails too

Version: 2.0.3-9

Released: 4 December 2012


  • cache timeout now resets on retries

Version: 2.0.3-8

Released: 3 December 2012


  • instrumentation in header and warning logs

Version: 2.0.3-7

Released: 27 November 2012


  • super high performance purger
  • less verbose cli warning
  • configurable host
  • init script fix for non rpm and deb builds
  • un-configured caches fixed

Version: 2.0.3-6

Released: 27 November 2012


  • improved warning logs

Version: 2.0.3-5

Released: 5 November 2012


  • changed default client thread setting to support high concurrency out of the box
  • added db cache TTL as a configurable item in default file

Version: 2.0.3-4

Released: 26 October 2012


  • ulimit set in init script
  • accepting threads don’t close when out of file descriptors

Version: 2.0.3-3

Released: 26 October 2012


  • db cache added

Version: 2.0.3-2

Released: 19 October 2012


  • fix bug with empty request on connection close

Version: 2.0.3

Released: 2 October 2012


  • Super Fast Purger

Version: 2.0.2

Released: 30 August 2012


  • Rounding errors
  • Telnet/CLI stability issues
  • VCL editor error reporting

Version: 2.0.0

Released: 2 May 2012

Version: 1.0.0

Released: 14 December 2011

  • Initial version