The Aptranet blog
Security.
Guides and explainers on security for teams running Cloud CDN and Cloud DNS.
Editor's pick Security
DNS DDoS: why authority is the first target
A DNS flood takes the name off the internet before the CDN sees a request. Cloud DNS Anycast is built to stay reachable under volumetric attack.
Read the storyExplore the library
Follow via RSS6 articles
DNS DDoS: why authority is the first target
A DNS flood takes the name off the internet before the CDN sees a request. Cloud DNS Anycast is built to stay reachable under volumetric attack.
How to hide your origin IP behind a CDN
A CDN only hides origin if DNS points at the edge and the origin IP is firewalled to Cloud CDN pull.
Token authentication for CDN downloads and video
Gate cached Cloud CDN objects with secure tokens so paid downloads, pre-load depots and premium video are not freely shareable.
TLS 1.3 at the edge: certificates, 0-RTT and forced HTTPS
Terminate TLS 1.3 on Cloud CDN with managed Let's Encrypt or a custom certificate, force HTTPS at the edge, and validate origin TLS.
DDoS and CDNs: understand the protection boundary
DDoS resilience depends on the protected traffic path, the attack type, and the capacity of every exposed dependency.
How a CDN protects origin infrastructure
Cloud CDN hides origin behind TLS, Origin Shield, access policies and L3-L7 DDoS mitigation so the public hostname is the edge.