Skip to content
Getting Digital

CDN (Content Delivery Network)

Also: content delivery network, edge network, edge caching

A CDN is a worldwide network of servers that answers requests for your site from a location near the person asking, instead of sending every request back to the single machine your site runs on.

Our take. Parking a CDN ahead of a slow origin is the most repeated performance tip on the internet and one of the least useful, because the HTML that decides how fast a page feels is exactly the part most sites never make cacheable. Switch it on for the certificate handling and the attack absorption by all means, but expect the speed to arrive only once the document itself is being served from the edge.

The problem a CDN solves is distance, not computation. Light through fibre is quick but finite, and a request from Auckland to a server in Frankfurt crosses most of the planet before the connection is even agreed, then does it again while the encrypted session is negotiated. No amount of tuning on the origin machine changes that, because nothing is being computed slowly. So the content moves instead. Cloudflare, Fastly, Akamai, Bunny and Amazon CloudFront each run clusters of servers in data centres near population centres, and steer visitors to the nearest healthy one using anycast routing, where many machines announce the same address and the network hands each request to whichever is closest. The first person in a region to ask for a file triggers a fetch from your origin, which the edge then keeps; everybody after that is served locally. Nothing is uploaded anywhere, which regularly surprises people who expect a content delivery network to be a place they put things. It is better understood as a cache you rent in several hundred locations at once, obeying rules your own server sets.

What the edge can and cannot answer

Static files are easy cargo: images, stylesheets, scripts, fonts, video segments. HTML is where judgement is required. A page identical for every visitor can be held at the edge and usually should be, which is how a statically generated site ends up serving nearly every request without its origin waking at all. A page showing a signed-in customer their own name cannot be, and pushing it there anyway means one customer's session is handed to the next visitor in the same region. Two subtler faults appear constantly. A response carrying a Set-Cookie header is normally treated as private, so a single analytics cookie set on the server side can silently switch off edge caching across an entire site. And a Vary header listing too many dimensions splits one stored copy into many, each of which goes cold on its own, so the hit rate collapses without a single error appearing in any log. Purging deserves a thought before launch rather than after: every provider exposes a way to clear a single path, and some let you tag responses so that an entire group of pages can be dropped in one call, which is the difference between an editor seeing their change immediately and an editor refreshing hopefully until the timer expires. Speed is only half the product in any case. A traffic spike on launch day, or a volumetric attack, lands on a global network built to eat exactly that rather than on your web server, and for plenty of sites that absorption is worth more than the milliseconds.

In practice

Ask for any page on a site behind Cloudflare with a request that shows you the response headers, and read cf-cache-status. HIT means the edge answered by itself. MISS means it had to ask your origin and has now stored what came back. EXPIRED means it held a copy, judged it too old and revalidated. DYNAMIC is the interesting verdict: the request was never eligible for caching at all, which on a default zone is the answer for essentially every HTML document, because the out-of-the-box rules cover static file extensions and leave pages alone until somebody writes a cache rule. Plenty of owners believe their site is fast because it is on Cloudflare while every page view they have ever measured says DYNAMIC.

Often confused with

Caching
Caching is the behaviour; a content delivery network is one very large deployment of that behaviour, operated by somebody else.
DNS (Domain Name System)
Signing up usually involves a nameserver change, but the naming system only decides which server you reach, while the edge network decides how much it can answer without consulting yours.

Key takeaways

  • →Geography, not server speed, is what an edge network fixes: stored copies near the visitor remove a round trip nothing else can remove.
  • →Only cacheable responses benefit, so a site whose documents are all private gets security and encryption from the deal rather than speed.
  • →Stray cookies and over-specified Vary headers are the two quiet reasons a correctly installed edge network stops caching anything.

Related concepts

  • RelatedCaching

    A CDN is caching deployed geographically — edge copies governed by the same header rules.

Certifications that test this

Vendor exams whose syllabus covers this concept — facts, cost and a preparation path on each page.

More courses from these shelves

A rotating selection from the course directory, drawn from the subcategories where this concept is taught rather than picked for it. Details, price and the provider link are on the course page.

Introduction to Cloud Data Analytics with Google BigQuery

This course is designed for the students who are at their initial stage or at the beginner level in learning the data w…

Udemy

Begin with Microservices

In this course, you will learn how to build REST APIs or Microservices using the latest version of Spring Boot), and Mo…

Udemy

AWS EKS (Elastic Kubernetes Service)

The Course is divided into 3 parts -Part 1 - Kubernetes and its objects (Deep Dive). In this part I will talk about Kub…

Udemy

Increasing BDD Code Efficiency

Increasing BDD (Behavior Driven Development) Code Efficiency is all about minimizing your maintenance effort while maxi…

Udemy

Azure Kubernetes Service AGIC Ingress: 30 Real-World Demos

Course Overview Welcome to this Amazing course on Azure Kubernetes Service AGIC Ingress: 30 Real-World Demos. Below is…

Udemy

Monitoring and Maintaining Agent Performance

Are you building, deploying, or managing AI agents and want to ensure they operate at peak performance? Monitoring and…

Udemy

FAQ

Does a small local business site need one?
If the audience and the server are in the same country, the distance saving is small. The reason to bother anyway is that the free tiers bundled with hosting platforms now include certificate management, compression and denial-of-service filtering, which are worth having regardless of where your visitors live.
How do files get onto the network?
By being requested. The usual arrangement is pull: an edge location that lacks a file fetches it from your origin on first demand and keeps it for as long as your headers permit. Some providers also support push for large media libraries, but for a normal website, configuring the network means configuring headers and rules rather than uploading anything.
Will it make my dynamic application faster?
Partly. Connection setup and encryption happen at the edge, which saves real time on every request even when the answer comes from your origin. What it cannot do is make your application respond faster once the request arrives there, so a sluggish backend stays sluggish with a better handshake in front of it.
What breaks when I turn one on?
Usually one of three things: an admin area that was accidentally cached, a form that fails because the network stripped or added a header, or a deployment whose new files sit behind stale stored copies. All three are configuration rather than faults in the product, and all three are found by checking what the cache status header says on the URLs that misbehave.

Sources

The primary text this definition rests on. Read it before you trust ours.

Last reviewed 14 September 2026 · Getting Digital