Content Delivery Network with Web Application Firewall

CDN for Latin America with Web Application Firewall

Accelerate and protect websites across the Americas using backbone edge infrastructure connected directly to major Internet exchanges in Miami.

Low latency connectivity across North and South America
Reverse proxy caching and Web Application Firewall protection
Deterministic routing with fixed edge IP addresses

Request Information
Learn more about our CDN optimized for Latin America

Planisys CDN-WAF is designed for organizations delivering content to users across the Americas including the United States, Latin America and the Caribbean.

The platform is particularly effective for media organizations, financial services, telecommunications providers and government infrastructures requiring secure and predictable web acceleration.

Modern Web Applications Face Three Major Challenges

Security Exposure

Web servers directly exposed to the Internet constantly receive automated attacks including vulnerability scans, bot activity, SQL injection attempts and application-layer denial-of-service traffic. Without a protective layer these requests reach the origin infrastructure and consume valuable resources.

Performance Bottlenecks

High traffic websites frequently overload backend servers with repeated requests for identical static content such as images, scripts and stylesheets. This creates unnecessary load on application servers and increases response latency for users.

Operational Complexity

Many CDN providers distribute traffic through hundreds of edge locations with constantly changing IP ranges. This makes firewall configuration, monitoring and troubleshooting significantly more complex for infrastructure teams.

CDN for Latin America and the Caribbean

Many global CDNs are optimized for traffic within North America or Europe, while connectivity to Latin America often introduces additional latency due to long routing paths.

Planisys CDN operates from edge infrastructure located in Miami, one of the most important interconnection hubs between North America, the Caribbean and South America.

This strategic location allows content to be delivered with low latency to networks throughout the Americas including Brazil, Argentina, Chile, Mexico and Colombia.

High Performance CDN with Integrated Web Application Firewall

Planisys CDN-WAF is a high-performance edge security and acceleration platform designed for demanding web applications. The platform combines reverse proxy caching, TLS termination and Web Application Firewall protection to shield origin servers from direct exposure to the Internet. Security policies are implemented using a flexible WAF rule engine.

Traffic is inspected and filtered at the edge before reaching backend infrastructure, mitigating common attack patterns such as SQL injection, file inclusion attacks, malicious bots, vulnerability scans and application-layer DDoS attacks.

Architecture

Planisys CDN-WAF is built on high-performance edge nodes connected directly to major Internet exchange points in Miami, providing extremely low latency to regional networks and international backbones.

Planisys CDN-WAF functions as a secure CDN provider for organizations that require predictable latency, strong application security and deterministic network routing. The platform is designed as an enterprise CDN architecture capable of handling high traffic workloads while protecting applications through integrated Web Application Firewall policies.

Edge infrastructure connected near NAP of the Americas and Equinix IX
High-performance reverse proxy caching layer
Automated TLS certificate deployment and management
Reusable upstream definitions for backend origin servers
Centralized cache invalidation system using asynchronous messaging
Fine-grained WAF policies including CMS-specific protections

Cache invalidation is performed through a distributed purge system. Administrative actions from the control panel trigger messages through an internal message queue, allowing edge workers to invalidate cached objects across the platform within milliseconds.

Why a Small Number of Backbone Edge Nodes is More Efficient

Unlike many global CDNs that operate hundreds of constantly changing edge nodes, Planisys CDN focuses on backbone proximity and deterministic routing, providing stable latency and predictable operational behavior.

If you need to purge content, having your content published in over 100 or 1000 POPs , turns the task into something impossible to perform in a reasonable period of time. Otherwise, it’s only a matter of milliseconds until Planisys CDN signals its CDN workers to destroy determined content.

With a fixed set of IP addresses you are able to setup a firewall or even a Load Balancer in order to protect your origin site from external access, allowing that the CDN be the only place where you can access your origin site from, except in the case of backoffice where a VPN is the most recommended way.

If you know your fixed set of IP addresses, it's much easier to find latency problems your customers might be experiencing. Otherwise, it turns out almost impossible for your users to file a claim with their connectivity provider if the IP addresses are constantly changing.

With a fixed set of addresses, you as CDN customer can focus on monitoring services on those fixed IP addresses, otherwise you would have a "propagation lag" or grayzone for monitoring when IP addresses are changing

Using CNAME and DNS names at the top of the DNS zone, also called Apex, might be difficult with ever changing IP addresses. With Planisys PDNS you can configure an ALIAS which is a type of DNS Register to avoid overlapping of CNAMEs and give instant name resolution

With a small, never changing set of high-traffic IP addresses, you can monitor them and have the certainty that they are not being shared with others that could potentially damage your network reputation or exhaust your resources.

Features

Page Rules

Fine grained page rules permit HTTP header manipulation to override or improve CMS backend shortcoming.

OWASP Security

Achieve PCI DSS Compliance, Owasp Web security and Anti-DDoS in a single dashboard

Mobile and tablet autodetection

Optional SmartPhone and Tablet Auto-detection lets the CDN serve mobile content for non-responsive websites.

Inspect and purge cache

Through Panel tools you can operate over the CDN cache, purging and doing inspections by partial or complete content.

Intuitive and powerful control panel

You can view and also manage your information in real time, unified Bandwidth and Transfer Reports. You can see a brief of all the site traffic or each IP Connections Online and Request per second.

Brotli support

Planisys CDN uses Google's brotli compression algorithm aside of gzip,that delivers a 20 to 25% better compression ratio compared to Gzip or Zopfli.

HTTP2 TLS 1.3 0-RTT Support

Planisys CDN already supports HTTP/2 and TLS v1.3 with zero roundtrip resumption to resume HTTPS sessions immediately and reduce latency drastically.

Image compression

Strips unnecessary image metadata, and does JPEG Chroma Subsampling in favor of hue, with the result of up to 53% lighter images

Benefits of the Planisys CDN Platform

Always Online

Improves user experience and decreases latency
NVMe disks, Platinum CPUs and multilayer indexes for fast serving of web cache
adapted to multiple network scenarios including varying MTU environments
Highly tuned TCP/IP stack for ultra-fast content-delivery

Tools

Tools for X509 certificate checking and generation
Tools to generate CSRs and store them
Tools for DNS and WHOIS checking of domains
Tools for URL retrieval hitting backend servers directly to test them

Increased Traffic

Lets you improve presence by driving more traffic to browsers
Doesn't require a proportional growth of backend servers
Multi upstream and multi peer 10G network at busiest IXPs

High Availability

Automatic detection of backend server outages and failures
The CDN switches automatically to Disaster Recovery mode
Your site keeps always online even during maintenance windows

Speed

Increases parallelism from users' browsers to the CDN with HTTP2
TCP/IP improvements like FastOpen and handshake reduction
TCP congestion control BBR

Security

Encryption preference through HTTP / 2
Always prefer encryption by means of HTTP/2 protocol
Tuning of encryption protocols for PCI/DSS compliance

OWASP Rules and dedicated IP addresses

Rules for OWASP top 10 vulnerabilities, and DDoS protection
anti-DDoS and access control options
Dedicated IP addresses and containers for every customers

Low cost

Reduce by 80% the costs of backend infrastructure
Intelligent traffic rules to reduce calls to backend servers
Our Multi tier 10G network allows you to handle huge spikes in traffic