CDN Fronting#

Overview#

CDN fronting uses a content delivery network to hide your proxy server’s true IP address. Traffic appears to go to a legitimate CDN-hosted site, but the CDN forwards it to your server.

How It Works#

• The client connects to a CDN edge server using a popular domain.
• The HTTP Host header or TLS SNI points to the CDN domain.
• The CDN routes the request to your origin server based on the configured backend.

Setup#

Depend on type of protocol.

Considerations#

• Not all CDNs allow arbitrary origin routing.
• Some CDNs require the origin to be explicitly configured.
• CDN termination means the CDN operator can see your traffic.