The control plane is free.

Features

One control plane schedules your nodes, subscribed nodes and cloud CDNs — with protection, billing and plugins built in.

Architecture

cdnca architectureVisitors reach three kinds of edges: your own nodes, subscribed nodes and cloud CDNs, which fetch from the origin. The control plane manages nodes over mTLS through the gateway and talks to the licensing service and plugin market.Control planeRouting · Protection · BillingLicensingPlugin marketGateway (mTLS)Your nodesOpenRestySubscribed nodesNode marketCloud CDNsCF · CloudFront · EO · ESAAPIVisitorsOriginnearest edge → cache → originDashed: management & delivery · Solid: visitor traffic

Six core capabilities

Node subscriptions

One control plane makes you the operator

List nodes on the market by day, traffic or 95th percentile; combine subscribed nodes with your own and resell them.

Learn more →

Dynamic routing

Sites are data, not config files

Sites are data, not config files: add, change or remove without reloads. Designed for a million sites.

Learn more →

Adaptive WAF

A WAF that gets sharper with use

Tunes exclusions to each site’s real traffic; the official rule library updates for free.

Learn more →

Automatic defense

Stop new attack variants without watching logs

Nodes learn a local baseline, mitigate within seconds when an attack starts and revoke when it ends.

Learn more →

Aggregated edge

Your nodes and cloud CDNs, scheduled together

Bring your own Cloudflare, CloudFront, EdgeOne or ESA account and schedule it alongside your nodes.

Learn more →

Plugin market

Buy plugins right inside your control plane

Buy, download and enable plugins inside the control plane; developers publish and earn.

Learn more →

Everything included

Onboarding

  • HTTP/HTTPS sites, wildcard and alias domains
  • L4 TCP/UDP forwarding, port ranges, follow-port origin
  • DNS provider integration with per-line records
  • Automatic ACME certificates (HTTP-01 / DNS-01)

Performance

  • Cache rules, prefetch and purge
  • HTTP/2 and HTTP/3
  • Dynamic routing: no reloads on site changes
  • Aggregated edge with cloud CDNs

Security

  • WAF (ModSecurity + CRS levels) with adaptive exclusions
  • CC protection: multi-dimension counting, JS challenge, auto switch
  • L4 protection: connection rate, malformed packet filter, kernel blocklists
  • IP intelligence: country / carrier / IDC rules
  • Automatic defense

Business

  • Multi-tenant plans, traffic packs and usage billing
  • Node subscriptions and resale
  • Tickets, notification centre, SMS and email
  • White-label themes, per-tenant themes
  • Plugin market

Operations

  • One-line install for control plane and nodes
  • Control-plane backup, restore and one-click migration
  • Signed artifacts and signer revocation
  • In-console upgrade runner with version pinning