AEMaaCS OOTB Fastly CDN is Finally Good Enough

[#1]

AEMaaCS OOTB Fastly CDN is Finally Good Enough

by @daniel-strmecki

 

Overview

As I've been working with AEMaaCS since its early days, the OOTB Adobe-managed Fastly CDN option used to be very limited for customization. Therefore, we've seen many enterprise customers deciding on the bring-your-own CDN option to accommodate specific requirements. This option is still valid, but it means clients need to pay for two CDNs. Adobe-managed Fastly CDN comes OTTB with AEMaaCS and we cannot remove it from the architecture. We can only instruct it not to cache any content and pass it to the BYO CDN. However, Adobe has improved the OOTB CDN offering a lot since then. In this article, I will demonstrate what customization options are now available and where we still might find some gaps.

Key points:

• Adobe-managed certificates (DV) offer simple domain ownership validation without the need for extensive organizational verification
• Adobe-managed CDN can be configured using a cnd.yaml file that can be deployed using a config pipeline in Cloud Manager
  
• Request and response tranformation rules enable us to change paths, query parameters, headers, and cookies
• Rate limiting rules provide protection agains DDOS attacks
• Custom taffic rules can be applied to block specific IPs, countries, paths or query parameters
• If WAF is licensed, Adobe automatically applies blocking rules to protect against many known common vulnerabilities and exposures
• Edge redirects instruct CDN to respond with e.g., HTTP 301 and the appropriate location header
• Edge Side Includes (ESI) allow for dynamic content to be assembled at the edge
• Geo-targeting can be used to redirect users to their appropriate country and language
• To enable CDN cache purging all we need is to set purge keys in the cnd.yaml configuration
• Fastly supports ETag headers OOTB, there is no additional configuration required
• One big gap still remains, that is no support for edge workers or edge computing
  

Full Article

Read the full article on https://meticulous.digital/blog/f/adobe-managed-cdn-is-finally-good-enough to find our more.

Q&A

Please use this thread to ask questions relating to this article