Enable JA3 fingerprinting for DGU

This was removed in #58 and can now be added back.

https://trello.com/c/Oiai95mm/3458-enable-ja3-fingerprinting-for-dgu-3

modules/datagovuk/datagovuk.vcl.tftpl

@@ -39,6 +39,17 @@ backend F_cname_find_eks_${environment}_govuk_digital {
 sub vcl_recv {
   ${indent(2, file("${module_path}/../shared/_boundary_headers.vcl.tftpl"))}
 
+  if (fastly.ff.visits_this_service == 0 && req.restarts == 0) {
+    set req.http.Client-JA3 = tls.client.ja3_md5;
+  }
+
+  # Block requests that match a known bad signature
+  if (req.restarts == 0 && fastly.ff.visits_this_service == 0) {
+    if (table.lookup(ja3_signature_denylist, req.http.Client-JA3, "false") == "true") {
+      error 403 "Forbidden";
+    }
+  }
+
   # Serve 404 if source IP/netblock is denylisted.
   if (table.lookup(ip_address_denylist, client.ip)) {
     error 404 "Not Found";