 <p>I suggest you inverse the logic:</p> <pre><code>sub vcl_recv { if (req.url ~ "(?i)force=(true|yes)") { return(pass); } // other values will fall through to the safe default VCL that will do return(lookup). } </code></pre>