The problem a CDN solves
Every request to your website normally travels to one origin server, wherever it happens to be hosted. A visitor on another continent pays for that distance on every image, script and page — often hundreds of milliseconds per round trip, multiplied across dozens of assets. Distance also concentrates all load on one machine: a traffic spike anywhere in the world lands entirely on your origin.
A CDN breaks both problems by placing edge servers (points of presence, PoPs) between visitors and your origin. The first request for an asset is fetched from your origin and cached at the edge; every subsequent visitor nearby gets the cached copy directly, in a fraction of the time, without touching your server at all.
How edge caching works
When a visitor requests your site through a CDN, DNS or network routing steers them to the nearest PoP. The edge checks its cache: a hit is served immediately from local disk or memory; a miss is fetched from your origin, served to the visitor, and stored for the next one. Cache behavior is controlled by standard HTTP headers (Cache-Control, ETag), so static assets — images, CSS, JavaScript, fonts — can be cached for a long time, while HTML can stay fresh or be cached briefly.
The practical effects compound:
- Lower latency — content travels tens of kilometers instead of thousands.
- Less origin load — cache hits never reach your server, so you handle traffic spikes with the same origin hardware.
- Lower bandwidth bills — your origin serves each asset once per cache lifetime, not once per visitor.
- Resilience — many CDNs can keep serving cached content even while your origin is briefly down.
| Metric | Without a CDN | With a CDN |
|---|---|---|
| Latency | Every request crosses the distance to your origin | Content served from the nearest edge PoP |
| Origin load | Every visitor hits your server | Only cache misses reach the origin |
| Traffic spikes | Land entirely on one machine | Absorbed across the edge network |
| Attack exposure | Origin faces the internet directly | Edge filters traffic before the origin |
CDN and DDoS protection belong together
A CDN's edge is also the natural place to filter attacks: it already terminates every connection before your origin sees it. Cached content is inherently DDoS-resistant — a flood of requests for cached pages is absorbed at the edge without your server noticing. Combining delivery and mitigation in one layer means no second vendor to wire in and no gap between the two. That is how Itnetic's CDN is built: caching and Layer 7 DDoS protection run on the same edge network, enabled together by the same two DNS records.
New to the attack side of the story? Start with What is a DDoS attack?