Global CDN and WAF
Stop more threats at the edge, and protect production behind it
Combine DDoS protection and Advanced WAF with an architecture that limits what can change on the live site.
Brandfolder Image
What the edge does and what the platform does
At the edge
CDN and WAF controls help filter malicious traffic, absorb attacks, and protect availability
In production
Read-only containers and version-controlled releases help prevent unauthorized code from being written silently to the live environment.
Across the platform
Coordinated protective rules help reduce the time between identifying a threat and applying a response.
Speed, security, and reliability start with a powerful CDN
Pantheon’s Fastly-powered CDN comes built-in and pre-configured for every environment—boosting site performance, reducing latency, blocking DDoS attacks, and delivering fast, personalized experiences that drive conversions wherever your users are.
Brandfolder Image
Site speed is non-negotiable
Brandfolder Image
Stay ahead of traffic spikes
Brandfolder Image
Deliver dynamic content everywhere
Reach users instantly, anywhere
Brandfolder Image
ACCELERATED DELIVERY
Boost performance and efficiency
- Edge cache: Speed up content delivery with edge caching for faster load times.
- Load balancer: Distribute traffic efficiently for high availability and site reliability.
- Image optimization: Automatically compress and deliver optimized images for faster load times.
COMPLETE SECURITY
Layered protection, not just traffic filtering
- DDoS protection: Defend against DDoS attacks with real-time, adaptive site protection.
- Advanced WAF: Threat analysis for both WordPress and Drupal.
- HTTPS cert manager: Easily manage SSL/TLS for secure, encrypted, always-on connections.
Brandfolder Image
See which Advanced Global CDN offering suits your content delivery and website needs best
| Global CDN | Advanced Global CDN | Advanced Global CDN + WAF IO | |
|---|---|---|---|
Performance Features | |||
| Image Optimization (IO) at the Edge* | With IO Starter | With IO Starter | ✓ |
| Full-Page & Asset Caching | ✓ | ✓ | ✓ |
Security Features | |||
| IP Allow/Blocklisting | ❌ | ✓ | ✓ |
| IP Allow/Blocklisting at Edge | With Security Starter | ✓ | ✓ |
| Layer 3 & 4 DDoS Protection & Mitigation | ✓ | ✓ | ✓ |
| Layer 7/Enterprise WAF Rules* | With Security Starter | ❌ | ✓ |
| Managed HTTPS (SSL/TLS) | ✓ | ✓ | ✓ |
| Origin Shielding | ✓ | ✓ | ✓ |
| OWASP & WAF Rules for WordPress/Drupal | With Security Starter | ❌ | ✓ |
| Rate Limiting | ❌ | ❌ | ✓ |
| SOC 2 Type 2 Compliance | ✓ | ✓ | ✓ |
| Token Authentication / JWT (JSON Web Token) | ✓ | ✓ | ✓ |
| Token Authentication / JWT - Advanced | ❌ | ✓ | ✓ |
Management Features | |||
| Custom Error & Maintenance Page Rules | ❌ | ✓ | ✓ |
| Device Detection & Edge Control | ❌ | ✓ | ✓ |
| Domain Masking | ❌ | ✓ | ✓ |
| Edge Redirects | ❌ | ✓ | ✓ |
| Enterprise Blue/Green Support | ❌ | ✓ | ✓ |
| Full CDN Edge Logs | ❌ | ✓ | ✓ |
| Geolocation / Geofencing Edge Control | With Security Starter | ✓ | ✓ |
| Modify Headers at the Edge | ❌ | ✓ | ✓ |
Starter Packages | |||
| Security Starter* | Optional | Optional | ✓ |
| IO Starter* | Optional | Optional | ✓ |
*Contact Sales for standalone WAF and IO options
Is your web hosting holding you back?
Get insight into site performance & improve visitor happiness in seconds
Get insight into site performance & improve visitor happiness in seconds
Image
How organizations like yours do more with Pantheon
Brandfolder Image
Additional resources
Let's talk!
Connect with one of our solution experts today.
Connect with one of our solution experts today.