The Vinyl Cache Project

What is Vinyl Cache?

Vinyl Cache (formerly known as “Varnish Cache”) is a web application accelerator also known as a caching HTTP reverse proxy. You install it in front of any server that speaks HTTP and configure it to cache the contents. Vinyl Cache is really, really fast. It typically speeds up delivery with a factor of 300-1000×, depending on your architecture.

Learn more Downloads

What is happening

Vinyl Cache has a new identity

2026-03-04

Read more about our new logo and wordmark: The Vinyl Cache Project has a New Identity

Vinyl Cache has left github: your action is required

2026-02-16

If you want to continue to interact with us, you need to take action.

Please read Vinyl Cache has left github for more.

Name-change in progress

2025-12-08

We are still the process changing the project name to Vinyl Cache, so dont be confused if you see Vinyl/Varnish being mixed up for a while. Varnish Software is going to continue to maintain a project called Varnish Cache.

Announcing VCOT: OpenTelemetry Instrumentation for Vinyl-Cache

2025-11-20

We’re happy to announce to have opened the repository of VCOT (VinylCacheOpenTelemetry), a brand new open-source (GPL) Go utility designed to enhance observability in Vinyl-Cache (and, for the time being, Varnish-Cache) environments through an integration with OpenTelemetry.

Up until now Vinyl-Cache was able to produce highly-detailed logs and provide precise insight into the cache behavior, but it was not able to integrate with modern observability standards.

VCOT addresses the need for modern monitoring in high-performance systems by parsing Varnish Shared Logs (VSL) in real-time and exporting telemetry data - traces, metrics, and logs - to OpenTelemetry-compatible backends.

This is just the beginning, VCOT is destined to evolve based on users’ feedback. Please open issue and/or PRs if you wish to see this tool improve.

New release: 8.0.0 with bonus project news

2025-09-15

We have a new major release today: 8.0.0, and some major project news for you.

20 years old and it is time to get serious(er)

2025-09-15

This coming february 22nd, The Varnish Cache Project will officially be 20 years old. And we will change the name of the project.

Read the full post: 20 years old and it is time to get serious(er)

New releases: 7.7.3, 7.6.5 and 6.0.16

2025-08-20

There are new releases available, 7.7.3, 7.6.5 and 6.0.16. These address a regression from the handling of VSV00017.

Varnish HTTP/2 Made You Reset Attack

2025-08-13

Please see VSV00017 Varnish HTTP/2 Made You Reset Attack

Security release 7.7.2

2025-08-13

Varnish version 7.7.2 is now available. This release addresses the vulnerability described in VSV00017.

Security release 7.6.4

2025-08-13

Varnish version 7.6.4 is now available. This release addresses the vulnerability described in VSV00017.

Security release 6.0.15

2025-08-13

Varnish version 6.0.15 is now available. This release addresses the vulnerability described in VSV00017.

Request Smuggling Attack

2025-05-12

Please see VSV00016 Request Smuggling Attack.

Security release 7.7.1

2025-05-12

Varnish versions 7.7.1 is now available. This release addresses the vulnerability described in VSV00016.

Security release 7.6.3

2025-05-12

Varnish versions 7.6.3 is now available. This release addresses the vulnerability described in VSV00016.

Security release 6.0.14

2025-05-12

Varnish versions 6.0.14 is now available. This release addresses the vulnerability described in VSV00016.

Varnish HTTP/1 client-side desync vulnerability

2025-03-17

Please see VSV00015 Varnish HTTP/1 client-side desync vulnerability.

Varnish 7.7.0 is released

2025-03-17

Our bi-annual “fresh” release is here: Varnish Cache 7.7.0

The 7.5 series is no longer supported in any capacity.

Security release 7.6.2

2025-03-17

Varnish versions 7.6.2 is now available. This release addresses the vulnerability described in VSV00015.

Older news

Privacy

You can access the varnish-cache homepages with HTTP or HTTPS as you like.

We save the logfiles from our Varnish instance for a limited period, in order to be able to debug problems.

We do not use any external trackers and do not analyze traffic.