Features

cdn.pizza features

A complete CDN in one console: caching, DNS, SSL, WAF, private networks, monitoring, CLI and API. All of it is included, with no subscription.

CDN and caching

Caching depends on the HTTP status, origin headers, TTL and path. Response headers tell a HIT from a MISS and identify the POP that served the request. Purge one path or the whole zone from the console, the CLI or the API.

  • Purge by path or full purge
  • POPs picked manually or in automatic mode
  • Traffic, bandwidth and cache ratio statistics
Domain overview: status, SSL, nameservers and traffic over the last 14 days.Domain overview: status, SSL, nameservers and traffic over the last 14 days.
cdn.pizza console · demo data

Managed DNS and DNSSEC

Import an existing zone, prepare changes in a draft, review the diff, then publish. DNSSEC signs the zone, and compatible web records can be routed through the CDN.

  • Zone scan and zone file import
  • DNS drafts and deployments
  • DNSSEC with a DS record to publish at your registrar
DNS management: zone records, proxy or DNS-only mode and TTL.DNS management: zone records, proxy or DNS-only mode and TTL.
cdn.pizza console · demo data

SSL certificates

Automatic mode requests and renews the Let’s Encrypt certificate as soon as the zone and routing are ready. Custom mode accepts your own certificate and key.

  • Automatic issuance and renewal
  • Custom certificate supported
  • Pending, active, expiring and failed states

shop.example.com

pendingactiveexpiringfailed

WAF and challenge page

Country, IP and pattern rules allow, block or challenge a request. The challenge page can be customised and previewed before it goes live.

  • Ordered rules, one action per rule
  • Per-domain rate limiting, from 10 to 6000 requests per minute
  • A challenge page that matches your site
Web application firewall (WAF) of a domain: Standard policy, CDN proxy, challenge page and protection levels.Web application firewall (WAF) of a domain: Standard policy, CDN proxy, challenge page and protection levels.
cdn.pizza console · demo data

WireGuard private networks

Connect servers, admin devices and origins over WireGuard. ACLs are ordered and versioned, and a private origin is never exposed to the Internet.

  • Enrollment with a short-lived key and the CLI
  • Versioned per-flow ACLs
  • Private origins reachable from the POPs you pick
Private network workspace: WireGuard setup, devices, VPN POP and CLI commands.Private network workspace: WireGuard setup, devices, VPN POP and CLI commands.
cdn.pizza console · demo data

Monitoring and status pages

Checks watch your services from the platform or from a status agent installed on your side. Incidents, maintenance and email subscribers are handled on a public status page.

  • Checks with interval and success criteria
  • Status agents for internal services
  • Alerts through verified channels
Domain monitoring: list of checks (agent and HTTP) with status, latency and latest result, feeding the public status page.Domain monitoring: list of checks (agent and HTTP) with status, latency and latest result, feeding the public status page.
cdn.pizza console · demo data

CLI, API and webhooks

The cdn-pizza CLI and the REST API cover zones, files, purge, statistics and private networks. GraphQL is available read-only and webhooks push events to your tools.

  • JSON output for CI
  • REST API documented in OpenAPI
  • Webhooks and read-only GraphQL
$ curl -fsSL https://console.cdn.pizza/downloads/cdn-pizza-cli/install.sh | sh$ cdn-pizza login --token "$CDN_PIZZA_TOKEN"$ cdn-pizza zone:create -n assets -d assets.example.com$ cdn-pizza upload -z 42 -f ./app.css --cache-ttl 86400$ cdn-pizza purge -z 42 --path /assets/app.css
Our model

A network powered by sponsored POPs

Our goal: make every POP free thanks to sponsors. Today, traffic on standard and partner POPs already carries no fee, and partners host additional POPs that only serve CDN caching and routing, with no customer data and no mail.

FAQ

Frequently asked questions

Do I pay for any feature?

No. Console features are included with no subscription. Only the options you choose are billed: premium Diavola POPs per GB, replicated file storage, domains and the advanced SEO audit.

Can I use only the DNS or only the WAF?

Yes. Each domain enables what it needs: a record can stay DNS-only, and the WAF applies to domains routed through the CDN.

Put your domain behind cdn.pizza

Create an account, add a domain and choose your POPs. No card is required and there is no subscription.

  • No subscription, no card
  • No fee on standard and partner POP traffic
  • Documentation in French, English and German