That's really neat that you can do the authentication/authorization headers within Varnish. I'd still use CloudFront instead, which gives you these features pl

That's really neat that you can do the authentication/authorization headers within Varnish. I'd still use CloudFront instead, which gives you these features plus the advantage of having global edge servers, and support for TLS/SSL (not sure about the http/2 part). Although the one advantage this has is the cache can stop you from having to leave your external network to return a file (vs going to CloudFront or S3). That can be useful. Another commenter pointed out that Varnish won't support TLS either, which is correct. The funny part about that is while they have long had the "why not SSL?" FAQ page espousing the terribleness of OpenSSL, they DO offer that feature on their paid product Varnish Plus. That not being a basic feature is a tad crazy. [1] Why no ssl? https://www.varnish-cache.org/docs/4.1/phk/ssl.html https://www.varnish-cache.org/docs/4.1/phk/ssl.html [2] http://info.varnish-software.com/blog/how-implement-ssltls-varnish-plus http://info.varnish-software.com/blog/how-implement-ssltls-v...