It makes sense, considering that nginx is typically ahead of the pack on support for things like SPDY and H2. Plus if you use OpenResty with its Lua functionality, you can do a lot of fancy things in nginx and reduce your dependency on Varnish&#x27;s VCL. And you have to have something in front of Varnish to do SSL anyway.<p>VCL in particular is kind of a trap. Early on it can do what you need -- remove a header, set a header, basic branching. Then you want to do basic arithmetic, or validity checking, or anything that isn&#x27;t suitable for string assignment or regex and you straight up can&#x27;t do it. VCL makes me long for the power of bash scripts.<p>Ultimately though, it&#x27;s really not a great solution to separate these concerns between multiple applications. You&#x27;re going to get bitten somewhere, even if it&#x27;s just the old ephemeral port exhaustion problem.