cdn.pizza features
A complete CDN in one console: caching, DNS, SSL, WAF, private networks, monitoring, CLI and API. All of it is included, with no subscription.
CDN and caching
Caching depends on the HTTP status, origin headers, TTL and path. Response headers tell a HIT from a MISS and identify the POP that served the request. Purge one path or the whole zone from the console, the CLI or the API.
- Purge by path or full purge
- POPs picked manually or in automatic mode
- Traffic, bandwidth and cache ratio statistics


Managed DNS and DNSSEC
Import an existing zone, prepare changes in a draft, review the diff, then publish. DNSSEC signs the zone, and compatible web records can be routed through the CDN.
- Zone scan and zone file import
- DNS drafts and deployments
- DNSSEC with a DS record to publish at your registrar


SSL certificates
Automatic mode requests and renews the Let’s Encrypt certificate as soon as the zone and routing are ready. Custom mode accepts your own certificate and key.
- Automatic issuance and renewal
- Custom certificate supported
- Pending, active, expiring and failed states
shop.example.com
WAF and challenge page
Country, IP and pattern rules allow, block or challenge a request. The challenge page can be customised and previewed before it goes live.
- Ordered rules, one action per rule
- Per-domain rate limiting, from 10 to 6000 requests per minute
- A challenge page that matches your site


WireGuard private networks
Connect servers, admin devices and origins over WireGuard. ACLs are ordered and versioned, and a private origin is never exposed to the Internet.
- Enrollment with a short-lived key and the CLI
- Versioned per-flow ACLs
- Private origins reachable from the POPs you pick


Monitoring and status pages
Checks watch your services from the platform or from a status agent installed on your side. Incidents, maintenance and email subscribers are handled on a public status page.
- Checks with interval and success criteria
- Status agents for internal services
- Alerts through verified channels


CLI, API and webhooks
The cdn-pizza CLI and the REST API cover zones, files, purge, statistics and private networks. GraphQL is available read-only and webhooks push events to your tools.
- JSON output for CI
- REST API documented in OpenAPI
- Webhooks and read-only GraphQL
$ curl -fsSL https://console.cdn.pizza/downloads/cdn-pizza-cli/install.sh | sh$ cdn-pizza login --token "$CDN_PIZZA_TOKEN"$ cdn-pizza zone:create -n assets -d assets.example.com$ cdn-pizza upload -z 42 -f ./app.css --cache-ttl 86400$ cdn-pizza purge -z 42 --path /assets/app.cssA network powered by sponsored POPs
Our goal: make every POP free thanks to sponsors. Today, traffic on standard and partner POPs already carries no fee, and partners host additional POPs that only serve CDN caching and routing, with no customer data and no mail.
Frequently asked questions
Do I pay for any feature?
No. Console features are included with no subscription. Only the options you choose are billed: premium Diavola POPs per GB, replicated file storage, domains and the advanced SEO audit.
Can I use only the DNS or only the WAF?
Yes. Each domain enables what it needs: a record can stay DNS-only, and the WAF applies to domains routed through the CDN.
Put your domain behind cdn.pizza
Create an account, add a domain and choose your POPs. No card is required and there is no subscription.
- No subscription, no card
- No fee on standard and partner POP traffic
- Documentation in French, English and German