{"id":1624,"date":"2026-02-16T08:50:46","date_gmt":"2026-02-16T08:50:46","guid":{"rendered":"https:\/\/www.woodcentral.com\/-\/peter\/?p=1624"},"modified":"2026-05-24T11:28:09","modified_gmt":"2026-05-24T11:28:09","slug":"how-cdns-lower-the-cost-of-being-online","status":"publish","type":"post","link":"https:\/\/www.woodcentral.com\/-\/peter\/how-cdns-lower-the-cost-of-being-online\/","title":{"rendered":"How CDNs lower the cost of being online"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A Content Delivery Network (CDN) is a globally distributed network of servers that sits between a website and its visitors, caching content and filtering malicious traffic so the site loads faster and stays online under heavy or hostile traffic.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">1. The internet\u2019s asymmetry problem<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The web is fundamentally asymmetric:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Attackers\/bots<\/strong> can generate massive distributed traffic at low cost.<\/li>\n\n\n\n<li><strong>Origin servers<\/strong> are comparatively resource-constrained (CPU, RAM, disk I\/O, DB connections, network uplink).<\/li>\n\n\n\n<li>TCP\/IP is globally addressable by design; your origin is reachable by anyone.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Without an intermediary layer, every HTTP request\u2014legitimate or malicious\u2014would terminate at the origin.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That does not scale in 2026.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">2. CDNs as distributed shock absorbers<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Modern CDNs such as Cloudflare, Akamai Technologies, and Fastly operate globally distributed edge networks. These networks perform three core functions that make today\u2019s web survivable:<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">A. Edge caching (load displacement)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">When static (and increasingly dynamic) content is cached at edge POPs:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Requests terminate at the nearest edge node.<\/li>\n\n\n\n<li>The origin is only hit on cache miss.<\/li>\n\n\n\n<li>Repeated traffic for the same asset never reaches the origin.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This changes load characteristics dramatically:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Without CDN:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>N users \u2192 N origin hits\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">With CDN:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>N users \u2192 1 origin hit (warm) + N edge hits\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">For high-traffic events (product launches, viral content, breaking news), this difference is existential.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">B. Bot and abuse filtration (traffic hygiene layer)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Today\u2019s web traffic mix is often:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>30\u201360% automated<\/li>\n\n\n\n<li>Scrapers<\/li>\n\n\n\n<li>Credential stuffing<\/li>\n\n\n\n<li>Enumeration attacks<\/li>\n\n\n\n<li>Layer 7 floods<\/li>\n\n\n\n<li>AI data harvesters<\/li>\n\n\n\n<li>SEO gaming bots<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">If all of that traffic hit origin:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>PHP workers exhaust<\/li>\n\n\n\n<li>Database connections saturate<\/li>\n\n\n\n<li>MySQL\/MariaDB locks increase<\/li>\n\n\n\n<li>File descriptors exhaust<\/li>\n\n\n\n<li>Kernel socket tables fill<\/li>\n\n\n\n<li>Uplinks saturate<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">CDNs provide:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Rate limiting<\/li>\n\n\n\n<li>Behavioral analysis<\/li>\n\n\n\n<li>IP reputation scoring<\/li>\n\n\n\n<li>Bot fingerprinting<\/li>\n\n\n\n<li>Challenge pages<\/li>\n\n\n\n<li>WAF rule engines<\/li>\n\n\n\n<li>TLS termination offload<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This removes &#8220;noise&#8221; before it becomes origin load.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In effect, the CDN becomes a distributed firewall + traffic governor.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">3. TLS and cryptographic offload<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">TLS handshakes are computationally expensive relative to serving cached content.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">At scale:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>RSA\/ECDSA handshakes<\/li>\n\n\n\n<li>OCSP stapling<\/li>\n\n\n\n<li>Certificate management<\/li>\n\n\n\n<li>Key rotation<\/li>\n\n\n\n<li>HTTP\/2 multiplexing<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">CDNs terminate TLS at edge and maintain optimized connections to origin (often persistent, keepalive, or private backbone).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Without that layer:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Small sites would burn CPU on handshakes.<\/li>\n\n\n\n<li>Large sites would need enormous crypto capacity.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">4. Network topology and latency physics<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The public internet has:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Variable routing<\/li>\n\n\n\n<li>Congested transit<\/li>\n\n\n\n<li>Cross-ocean latency<\/li>\n\n\n\n<li>BGP path volatility<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">CDNs solve this by:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Anycast IP routing<\/li>\n\n\n\n<li>Massive global POP footprint<\/li>\n\n\n\n<li>Private backbone interconnects<\/li>\n\n\n\n<li>Peering with ISPs<\/li>\n\n\n\n<li>Traffic engineering optimization<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">They effectively turn the public internet into a managed overlay network.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Without CDNs:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Latency variance increases.<\/li>\n\n\n\n<li>Origin geography becomes critical.<\/li>\n\n\n\n<li>Distant users experience poor performance.<\/li>\n\n\n\n<li>Cross-region spikes concentrate load at one physical location.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">5. Volumetric DDoS reality<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Modern DDoS attacks regularly exceed terabit-per-second scale.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A typical shared hosting server or small VPS cannot absorb:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>SYN floods<\/li>\n\n\n\n<li>HTTP floods<\/li>\n\n\n\n<li>Amplification attacks<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">CDNs distribute attack surface across:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Hundreds of data centers<\/li>\n\n\n\n<li>Massive aggregate bandwidth capacity<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">A single origin server simply cannot do that.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Without CDNs, most small-to-medium websites would need:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Dedicated scrubbing providers<\/li>\n\n\n\n<li>Hardware firewalls<\/li>\n\n\n\n<li>Multi-homed BGP networks<\/li>\n\n\n\n<li>Colocation contracts<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">That would dramatically increase cost of participation.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">6. Application-layer gaming and SEO abuse<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">This is critical.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Modern bot mitigation handles:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Scraper farms<\/li>\n\n\n\n<li>Automated ranking manipulation<\/li>\n\n\n\n<li>Credential stuffing against forums<\/li>\n\n\n\n<li>Content theft<\/li>\n\n\n\n<li>AI dataset harvesting<\/li>\n\n\n\n<li>API abuse<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Without edge filtration:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Dynamic pages become expensive.<\/li>\n\n\n\n<li>Database read\/write amplification increases.<\/li>\n\n\n\n<li>Spam and brute-force attempts rise dramatically.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The origin layer was never designed to police the entire planet directly.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">7. Economic impact: barrier to entry<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">CDNs democratized infrastructure.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Before CDNs:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Only large enterprises could absorb traffic spikes.<\/li>\n\n\n\n<li>News sites crashed regularly.<\/li>\n\n\n\n<li>Viral traffic was lethal.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">After CDNs:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>A reseller-hosted site can handle global traffic.<\/li>\n\n\n\n<li>Static content can scale nearly infinitely.<\/li>\n\n\n\n<li>Security features are available at commodity pricing.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">This keeps the open web economically viable.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">8. Counterpoint: would the internet \u201cnot work\u201d?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Strictly speaking, the internet would still function at the protocol level.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Many sites would be chronically offline.<\/li>\n\n\n\n<li>Smaller operators would be disproportionately vulnerable.<\/li>\n\n\n\n<li>Attack surface would overwhelm typical hosting environments.<\/li>\n\n\n\n<li>Costs would rise significantly.<\/li>\n\n\n\n<li>Geographic performance would degrade.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">In practice, the web ecosystem as we experience it\u2014fast, globally accessible, and relatively resilient\u2014depends heavily on CDN abstraction layers.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">9. Architectural conclusion<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">CDNs now function as:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Distributed reverse proxies<\/li>\n\n\n\n<li>Global cache hierarchies<\/li>\n\n\n\n<li>DDoS shock absorbers<\/li>\n\n\n\n<li>TLS termination farms<\/li>\n\n\n\n<li>Bot filtration systems<\/li>\n\n\n\n<li>Application firewalls<\/li>\n\n\n\n<li>Traffic engineering overlays<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">They are no longer just \u201ccontent delivery\u201d networks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">They are effectively a mandatory control plane between the open internet and origin infrastructure.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>A Content Delivery Network (CDN) is a globally distributed network of servers that sits between a website and its visitors, caching content and filtering malicious traffic so the site loads faster and stays online under heavy or hostile traffic. 1. The internet\u2019s asymmetry problem The web is fundamentally asymmetric: Without an intermediary layer, every HTTP &#8230; <a title=\"How CDNs lower the cost of being online\" class=\"read-more\" href=\"https:\/\/www.woodcentral.com\/-\/peter\/how-cdns-lower-the-cost-of-being-online\/\" aria-label=\"Read more about How CDNs lower the cost of being online\">Read more<\/a><\/p>\n","protected":false},"author":7,"featured_media":1625,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-1624","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/www.woodcentral.com\/-\/peter\/wp-json\/wp\/v2\/posts\/1624","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.woodcentral.com\/-\/peter\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.woodcentral.com\/-\/peter\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.woodcentral.com\/-\/peter\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/www.woodcentral.com\/-\/peter\/wp-json\/wp\/v2\/comments?post=1624"}],"version-history":[{"count":0,"href":"https:\/\/www.woodcentral.com\/-\/peter\/wp-json\/wp\/v2\/posts\/1624\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.woodcentral.com\/-\/peter\/wp-json\/wp\/v2\/media\/1625"}],"wp:attachment":[{"href":"https:\/\/www.woodcentral.com\/-\/peter\/wp-json\/wp\/v2\/media?parent=1624"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.woodcentral.com\/-\/peter\/wp-json\/wp\/v2\/categories?post=1624"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.woodcentral.com\/-\/peter\/wp-json\/wp\/v2\/tags?post=1624"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}