FAQ
Common Questions
Everything you need to know about the first self-hosted CDN platform.
What is a "Self-Hosted CDN"?
Unlike traditional CDNs (Cloudflare, Akamai) where you rent
traffic and share infrastructure with millions of other sites,
CDNN provides you with a platform to launch your
own CDN.
You deploy Edge nodes on your servers (AWS, Yandex Cloud, Bare Metal),
and we provide the Control Plane to manage the network, DNS, and security.
This gives you full control, dedicated resources, and independence
from global provider policies.
How is this better than Cloudflare or CloudFront?
1. Independence: You cannot be "disconnected" or
blocked from the outside. You own the encryption keys and IP addresses.
2. Anti-Ban: The architecture is specifically designed
to work in complex regions (RU, Iran, China) using GeoDNS and local
DNS providers.
3. Privacy: Logs and SSL keys are stored only with
you. We do not see your traffic.
Where can I deploy POP nodes?
Anywhere. CDNN works on top of Kubernetes and Docker. You can use virtual machines in AWS, Google Cloud, DigitalOcean, Yandex Cloud, or bare metal servers in any data center in the world. We will help select optimal providers for your target regions.
How does Anti-Ban protection work?
We use a hybrid DNS scheme. Global GeoDNS (e.g., Route53) works for the entire world. For users from censored regions, DNS requests are redirected to local providers (e.g., Yandex DNS) that are not subject to external blocks. This guarantees the availability of your service even if global subnets are blocked.
What does "Zero Trust" mean?
The connection between Edge nodes (proxies) and your Origin server (backend) is protected by mutual TLS (mTLS) and tunnels. Your Origin must not have open ports to the internet except for the tunnel. This eliminates direct DDoS attacks on the backend and traffic interception.
How is pricing structured?
You pay us a fixed license fee for using the Control Plane (from $299/mo). Infrastructure costs (servers, traffic) are paid directly to your cloud providers. This often comes out cheaper than Enterprise plans of classic CDNs as there is no markup on traffic resale.
Is there DDoS protection?
In the base version, protection is achieved by masking the Origin and load balancing across Edge nodes with Envoy Proxy, which can filter L7 attacks. For protection against powerful L3/L4 attacks, we recommend using providers with Anti-DDoS protection (e.g., DDoS-Guard or StormWall) to host Edge nodes.