What's the best cdn right now? Cloudfront is just expensive as hell.
* Cloudfront would be great for the North America and Europe they only charged for the bandwidth (those prices are reasonable), but charging for the HTTP request (and the huge premium on HTTPS). The bandwidth prices outside of those areas are absolutely awful though.
* Akamai makes Cloudfront look cheap.
* Cloudflare has ethical concerns that keep me away from them.
* Fastly is susceptible to DDoS's against the origin in some interesting ways.
* Limelight was great but then Goldman Sachs bought and destroyed them.
* EdgeCast was by far my favorite, but then they got bought by Verizon. Assuming Verizon hasn't fucked it up then they're definitely worth checking out, as their reporting tools were amazing and their performance was literally the best (my information is a few years out of date though on this one).
* If you want to serve people in China you will need to pay a China based (government owned) CDN or your traffic will get blocked for no reason once you get large enough. Conveniently enough one of their sales people will reach out to you about a day or two before the block goes into effect.
* MaxCDN isn't bad, but I haven't seen their higher tier prices (above 25TB) so I can't comment on that. Their South America and Asia coverage is pretty bad though- nothing in India, only one datacenter in Brazil for all of South America (with another being built, but also in Brazil), no Africa, no Middle East. If you're starting english only this isn't the worst, but eventually you'll need to go to a multiple CDN solution for broad coverage.
From there you can force requests to hit the origin server by first purging the data from the cache and then requesting it.
Unrelated to DDoS I've also seen issues with the Fastly routing- it doesn't always pick the greatest end node to have a client connect to.
[1] https://stackoverflow.com/questions/26898052/how-to-force-im...
Completely. I can't believe people actually pay Akamai.
> Fastly is susceptible to DDoS's against the origin in some interesting ways.
Citation requested.
> Cloudflare has ethical concerns that keep me away from them.
Not to mention their product itself isn't too good. I always get forced to Captcha on some ridiculous cloud flare "protected" site, despite not using a VPN or anything out of the ordinary.
* Cloudflare got some initial fame by keeping Lulzsec up during a massive DDoS. That by itself wasn't bad, but afterwards they embraced a "bulletproof hosting" mindset that involved acting as a shield for malicious activity (specifically, people were abusing their network to host malware and drive by exploits). If you reported an account for pushing malware they'd block the single instance of malware (ie, example.com/malware/djfksdjf.jar) even if the original server was configured to serve it under any random name (example.com/malware/.jar). For awhile they were a huge source of infection for users.
Their CEO directly lied and accused a security company I worked for at the time of blocking their traffic to "suppress free speech", when what we were really trying to block were active drive by exploits. We sent a ton of evidence for this to them in advance- including PCAP files showing the exact network connection required. Instead of dealing with the malware they were hosting they started a PR campaign.
* After I criticized them before on this site several of their security team followed me on twitter for some reason. That's how I learned that they have a lot of "alt-right" type people on their team (or at least did at that time).
Their list pricing does but they’ve matched or beat AWS in the past. This is by far my least favorite part of the enterprise sales model but if you can haggle it pays off.
Limelight was my favourite before I discovered Edgecast, the only problem is Limelight no longer does business with small companies and no more reseller / PAYG model. Which means basically most of us cant use them. But I didn't know Goldman Sachs bought them? And destroy them?
If you need more control, than Fastly is very technical, although the recently launched Cloudflare workers give you much more programmability by running javascript.
For more traditional options, look at the quiet upstart Stackpath which is built upon the old MaxCDN network, and also CDN77 which is great value.
https://techcrunch.com/2016/07/25/security-as-a-service-star...