blog.cloudflare.com· Sep 22, 2026· by Alex Krivit

We just shipped support for the ugliest part of HTTP: Vary

Open Original Article ↗
Vary support is now available in Cache Rules on every plan. You can normalize known negotiation headers, pass exact values through to the origin when those small differences matter, or bypass cache when the variation is too unpredictable.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Cache#CDN#Performance#Pingora