In your VCL file you will need to explicitly exclude the nosto and refSrc query parameters from the URL. You can do so by adding the following line into the vcl_recv block:
set req.url = regsuball(req.url, "nosto=[-_A-z0-9+()%.]+&?", "");
set req.url = regsuball(req.url, "refSrc=[-_A-z0-9+()%.]+&?", "");