IBX-10705: Updated vcl to fix caching in dev env and re-enable symfony profiler

[Sztig]

🎫 Issue	IBX-10705

Related PRs:

• IBX-10705: Updated vcl to fix caching in dev env and re-enable symfony profiler http-cache#74
• https://github.com/ibexa/fastly/pull/49

Description:

As mentioned in the public ticket itself, Varnish fails to cache any content in dev env because the application sends profiler-related Set-Cookie headers, this change was introduced in 7.3 in security-bundle package.
I've updated VCL files to bring varnish and symfonys profiler back to working order.
The fix is up to debate, during the tests with @reithor and @vidarl we didn't discover any breaking issue.

[vidarl]

I think it should also be fixed for Fastly : https://github.com/ibexa/fastly/blob/main/fastly/ibexa_main.vcl#L83

[Sztig]

I think it should also be fixed for Fastly : https://github.com/ibexa/fastly/blob/main/fastly/ibexa_main.vcl#L83

I will create another PR, thanks for letting me know

[Steveb-p]

May I ask how exactly this fix helps with profiler related cookies?

I assume it works because cookie created for profiler is {$firewallName}_auth_profile_token and {$firewallName}_deauth_profile_token, and this would match ibexa_auth_profile_token?

Isn't the rule too broad? In the current setup it will match anything that looks like ibexa_* or ibexa-*.

[Sztig]

@Steveb-p you are correct about matching, you can see the actual implementation here symfony/security-bundle@f0b504e
About the broadness of the rule, I'm not sure, during the tests this didn't rise any issues.

[tomaszszopinski]

QA approved on DXP 5.0 ddev/varnish.