Add VCL snippet for force TLS that executes before all the other snippets
# Force SSL immediately to avoid magento module VCL stripping off
# google campaign ids like gclid
  if (!req.http.Fastly-SSL) {     
    error 972 "Force SSL";  
  }