Varnish Controller also comes with a User Interface as an optional feature. The goal of the user interface is to make the workflow as simple as possible and provide a better user experience.
UI communicates with Varnish Controller via the REST API. This user interface can be installed in multiple servers as required for load balancing.
The UI is served by its own UI server, a Varnish Controller component that handles the
protection against various security threats. The UI sends its API requests to the UI server, which
checks the request’s origin and authentication before proxying it to the Varnish Controller API. The
UI server is in charge of the authentication of users and refreshing authentication tokens, and
keeps the tokens in HttpOnly cookies so the browser never hands them to page scripts.
It can also serve TLS certificates managed by the Controller, be reconfigured at runtime, and log users in through their organization’s identity provider. See the UI installation page for all configuration options.
There are various security threats that need to be addressed to keep the application secure. The following protection mechanism are in place to ensure a high level of security:
Sec-Fetch-Site and Origin request headers rather than a tokenThe security settings for the Controller-UI examples cover how to configure these.
First time users will be assisted with a short and simple onboarding process to be familiar with the system.
Access to the different parts of the UI depends on the permissions individual users have.
The UI consist of following page types:
You can access the theme setting from the user dropdown at the top right corner of the screen.
