Doorman
DocsRule BuilderGet StartedGitHub
Doorman

Multi-provider WAF automation as code. Define a rule once, enforce it everywhere, review it in a pull request.

Product

  • Docs
  • Rule Builder
  • Getting Started

Providers

  • Vercel
  • Cloudflare
  • Fastly
  • Google Cloud Armor

Resources

  • GitHub
  • npm package
  • Example configs
  • Report an issue

© 2026 griffen.codes

System status: ● Operational· Doorman v3.15.4

    For Fastly

    Doorman for Fastly Next‑Gen WAF

    The same status, diff, and sync workflow, pointed at Fastly's Next-Gen WAF workspace rules.

    npm install -g @gfargo/doorman

    Pass --provider fastly, or set "provider": "fastly" in your config.

    Workspace-scoped rules

    Rules and IP lists live inside one Fastly Next-Gen WAF workspace, the same one you'd manage by hand in the dashboard.

    Managed IP lists

    IP blocking uses doorman-managed allow and deny lists in your workspace instead of one rule per address.

    Rate limiting included

    Fastly's rate_limit action is fully supported, translated automatically from the same unified rule.

    Environment variables

    export FASTLY_API_TOKEN="..."
    export FASTLY_WORKSPACE_ID="..."

    Nothing set yet? Doorman prompts you for credentials the first time it needs them.

    Then ship
    doorman sync --provider fastly
    Full Fastly setup guideSee all providers