Skip to main content

One post tagged with "cors"

View All Tags

Production-Grade Edge Config, Per App: Redirects, Headers, CORS, WAF, and More

· 5 min read
FoundryDB Team
Engineering @ FoundryDB

When the edge gateway launched, you could put a custom domain in front of your app, get an automatic certificate, cache responses, rate limit per IP, and run a detect-only WAF. That covered the headline cases. But production has a longer list: a permanent redirect for a moved path, an HSTS header you can finally turn on, a CORS policy for the front end on another domain, an IP allow list for a staging environment, a maintenance page during a deploy. Each of those used to mean code in your origin or config you maintained yourself.

Now the full edge configuration surface is exposed per app, in the Domains & Edge tab and across the API. Redirects, headers, CORS, access control, compression, limits, and a WAF that can now block, all configured per app and applied across every EU point of presence without touching your container or redeploying anything.

PoP failover & autoscaling
Nearest PoP serves each client · HA pair + autoscaling
Clientnearest PoPserving address →PoP pairactive + standby⇢ forwardApp originyour app
Active · serving addressHot standbyFailed nodeAdded capacityClient requestForward to origin (dashed)