CDN KeyCDN Setup

Going to be using KeyCDN when I upgrade my forum. Checking out the setup options and had a few questions. Though maybe this would be good for someone setting up a website using SSL and KeyCDN.

1. Do I have to purchase 2 separate SSL Certs for my site? 1 for my main site and 1 for cdn.domain.com? Assuming that I'm not purchasing a wildcard cert which are more expensive than 2 single certs.

ZONE SETUP


2. Zone name - I'm assuming this is the sub-domain - ie zonename.keycdn.com? So here I would enter zonename?

---

COMMON ZONE SETTINGS

3. Force Download? Advantages / disadvantages to enabling / disabling this?
4. CORS? Advantages / disadvantages to enabling / disabling this?
5. Any recommendations on Expire?
6. Allow Empty Referrer? Recommendations for this?
7. SSL - asks for a SSL cert. I should purchase a cert for whatever the Zonealias is? ie whatever.domain.com?
8. If I'm using a SSL, should I force SSL if my site is all SSL?

PULL ZONE SETTINGS #1


9. Should I use the Origin Shield?
10. Max Expire? Recommend settings?
11. Ignore Cache Control? Recommend settings?
12. Ignore Query String? Recommend settings?
13. Forward Host Header? Should I enable this?
14. Cache Cookies / Strip Cookies? What settings are the best here?
15. X-Pull Key - if using an SSL should this be changed?

PULL ZONE SETTINGS #2


16. Custom Robots.txt. Centmin Mod has bad bots, should I populate this with that list?

Thanks for any information.

 

I can figure out most of what to use for the settings. My goal was to create a guide for people who want to use KeyCDN with Centmin Mod. If you have any recommendations for the settings, let me know. There are a lot of settings which even after reading the docs still aren't simple to understand.

 

Thanks @eva2000

 

@eva2000 do you know if there are any disadvantages to using 2 SSL certs for a site using KeyCDN?

• 1 SSL Cert for the site.
• 1 SSL Cert for the CDN sub-domain.

It's a lot cheaper to purchase standard certs vs. paying ~$80+ for a wildcard. According to this doc CDN SSL - 4 Simple Steps to Integrate your SSL Certificate I can use a standard cert.

One of the advantages I see is that the CDN wouldn't have my private keys if I was using 2 separate SSL certs. They'd only have my CDN SSL private key and not my wildcard private key.

 

Wouldn't it be a security issue if you had to upload the wildcard private key to keycdn? I'm just thinking if they got hacked or something the hacker would get the private keys of the server. Using 2 SSL Certs would isolate the domain cert from the subdomain cert used for keycdn.

I really don't plan on setting up any subdomains for the site.

Obviously, there are a lot of advantages to buying a wildcard ssl. But I can get a PositiveSSL for $4.95 a year... $15 for 3 years x 2 = $30 for 3 years (site / cdn subdomain). That's super cheap.

 

I'm going to have more separate sites... 15 total. For each site I'm going to need a site SSL and an SSL for the CDN, no subdomains. So, I think it makes sense to purchase the separate SSL certs vs. the wildcard. Even if I just go per year @ $10 for the 2 standard certs, if I need a wildcard down the road, paying $10 isn't going to break the bank.

Thanks for the info!

 

That's a great option!

Reading more about CDNs, I think I might go with MaxCDN. Everywhere I read it says MaxCDN is much faster than KeyCDN. Any opinion on MaxCDN? I haven't searched the forum here for a MaxCDN thread yet.

 

Yea, it is a little pricey. Different payment model vs KeyCDN.

 

I thought you were using Cloudflare?

I still might go with KeyCDN. I really like to pay as you go.

 

Wow, Cloudfront is even more pricey than MaxCDN. Their prices are crazy expensive. South America is .25 per GB.

They charge for all of the below... holy cow!

• Regional Data Transfer Out to Internet (per GB)
• Regional Data Transfer Out to Origin (per GB)
• Request Pricing for All HTTP Methods (per 10,000)

MaxCDN for $40 a month I get 3 sites, 500GB of bandwidth, and .07 overage.

KeyCDN is the cheapest @ .04 just about everywhere.

 

Found this one: CDN | Защита от DDoS-атак | Storage | SkyparkCDN 120 PoPs in 49 countries.

Also found this nice little calculator. Nice if someone wants to get an estimate. http://www.cdncalc.com/

 

After reading more, I'm 99.9% sure I'm going to go with KeyCDN. Slant - MaxCDN vs KeyCDN detailed comparison as of 2017

We'll see how it goes.