Outbound Routes

Create Outbound Routes to Each PSP

3rd-party PSP (Checkout.com)

  1. If not already logged in, log into your VGS Dashboard (https://dashboard.verygoodsecurity.com).
  2. On the top, left-hand side, just under the organization name, click on the “Vault” tab.
  3. On the left-hand side, under “Vault”, click on “Routes”.
  4. At the top, just under the “Vault ID”, select the “HTTP” tab.
  5. Just under the “HTTP” tab, click on “All”.
  6. On the right-hand side, click on “Add Route” and select “Outbound route”.
  7. The following picture highlights, with red boxes, the areas to select/modify in steps #2 through #6.

VGS Dashboard Routes

  1. Under Upstream Host, modify the Upstream Host to point to Checkout.com’s base API endpoint (https://api.sandbox.checkout.com).
  2. Scroll down to “Filters”.
  3. Under “Conditions” in the default filter, note the following settings:
    * PathInfo matches “/tokens”. This points to your server-side API endpoint destination.
    * ContentType equals “application/json”. This defines the content type of the request.
  4. Phase: “On request”. This defines the API phase. In this case, this filter will trigger on initial API call.
  5. Scroll down and select the “Basic” tab below “Tag”.
  6. Under “Operation”, select “REVEAL” to reveal the sensitive data alias.
  7. Under “Content Type, select “Json” to identify the content type of the request.
  8. Under “Fields in JSON path”, enter “$.number” into field 1.
  9. Scroll down to “Storage” below “Targets”.
  10. Click on “Storage” field and select “Persistent”.
  11. Under “Alias Format”, click the field and select “Payment Card - Format Preserving, Luhn Valid (6T4).
  12. The following pictures highlights, with red boxes, the areas to select/modify in steps #8 through #18.

VGS Dashboard Outbound Routes Upstream Host

VGS Dashboard Outbound Routes Reveal PAN Conditions

VGS Dashboard Outbound Routes Reveal PAN Variable

  1. Scroll down and hit “Add filter” to add the next filter.
  2. Under “Conditions” in the default filter, note the following settings:
    * PathInfo matches “/tokens”. This points to your server-side API endpoint destination.
    * ContentType equals “application/json”. This defines the content type of the request.
  3. Phase: “On request”. This defines the API phase. In this case, this filter will trigger on initial API call.
  4. Scroll down and select the “Basic” tab below “Tag”.
  5. Under “Operation”, select “REVEAL” to reveal the sensitive data alias.
  6. Under “Content Type, select “Json” to identify the content type of the request.
  7. Under “Fields in JSON path”, enter “$.cvc” into field 1.
  8. Scroll down to “Storage” below “Targets”.
  9. Click on “Storage” field and select “Volatile”.
  10. Under “Alias Format”, click the field and select “Generic VGS Alias (Default) - tok_sandbox_xxxxxxxxxxxxxxxxxxxxxx”.
  11. Scroll to the bottom and hit “Save” in the bottom, right-hand side.
  12. The following pictures highlights, with red boxes, the areas to select/modify in steps #20 through #30.

VGS Dashboard Outbound Routes Reveal Card Security Code Conditions

VGS Dashboard Outbound Routes Reveal Card Security Code Variable

3rd-party PSP (Stripe)

  1. If not already logged in, log into your VGS Dashboard (https://dashboard.verygoodsecurity.com).
  2. On the top, left-hand side, just under the organization name, click on the “Vault” tab.
  3. On the left-hand side, under “Vault”, click on “Routes”.
  4. At the top, just under the “Vault ID”, select the “HTTP” tab.
  5. Just under the “HTTP” tab, select “Outbound”.
  6. On the right-hand side, click on “Add Route”.
  7. The following picture highlights, with red boxes, the areas to select/modify in steps #2 through #6.

VGS Dashboard Routes

  1. Under Upstream Host, modify the Upstream Host to point to Stripe’s base API endpoint (https://api.stripe.com).
  2. Scroll down to “Filters”.
  3. Under “Conditions” in the default filter, note the following settings:
    * PathInfo matches “(.*)”. This points to your server-side API endpoint destination. In this case, we use a wildcard to identify any Stripe API endpoint.
  4. Phase: “On request”. This defines the API phase. In this case, this filter will trigger on initial API call.
  5. Scroll down and select the “Basic” tab below “Tag”.
  6. Under “Operation”, select “REVEAL” to reveal the sensitive data alias.
  7. Under “Content Type, select “Form” to identify the content type of the request.
  8. Under “Fields in FormData”, enter “card[number]” into field 1.
  9. Scroll down to “Storage” below “Targets”.
  10. Click on “Storage” field and select “Persistent”.
  11. Under “Alias Format”, click the field and select “Payment Card - Format Preserving, Luhn Valid (6T4).
  12. The following pictures highlights, with red boxes, the areas to select/modify in steps #8 through #18.

VGS Dashboard Outbound Routes Upstream Host

VGS Dashboard Outbound Routes Reveal PAN Conditions

VGS Dashboard Outbound Routes Reveal PAN Variable

  1. Scroll down and hit “Add filter” to add the next filter.
  2. Under “Conditions” in the default filter, note the following settings:
    * PathInfo matches “(.*)”. This points to your server-side API endpoint destination. In this case, we use a wildcard to identify any Stripe API endpoint.
  3. Phase: “On request”. This defines the API phase. In this case, this filter will trigger on initial API call.
  4. Scroll down and select the “Basic” tab below “Tag”.
  5. Under “Operation”, select “REVEAL” to reveal the sensitive data alias.
  6. Under “Content Type, select “Form” to identify the content type of the request.
  7. Under “Fields in FormData”, enter “card[cvc] into field 1.
  8. Scroll down to “Storage” below “Targets”.
  9. Click on “Storage” field and select “Volatile”.
  10. Under “Alias Format”, click the field and select “Generic VGS Alias (Default) - tok_sandbox_xxxxxxxxxxxxxxxxxxxxxx”.
  11. Scroll to the bottom and hit “Save” in the bottom, right-hand side.
  12. The following pictures highlights, with red boxes, the areas to select/modify in steps #20 through #30.

VGS Dashboard Outbound Routes Reveal Card Security Code Conditions

VGS Dashboard Outbound Routes Reveal Card Security Code Variable

Congratulations, you have finished this section.