Origin Shield

Once Origin is created, you can set origin-shield for it. Origin-shield provides another caching layer before content is retrieved from the origin. It is another CDN POP (Point of Presence), usually with high cache capacity, which requests pass through prior being forwarded to the origin. Origin-shield can significantly improve the CDN cache offload, resulting in better performance and lower DTO.

Origin-shield is part of origin configuration and can be enabled separately on each CDN provider. Note that not all CDN providers support origin-shield.

Origin-Shield Location

The location of the origin-shield can have a significant impact on performance. As a general guideline, you would want to have the origin-shield CDN POP as close as possible to the location of your origin. This way, a cache-miss at the origin-shield layer will introduce a minimal overhead on performance. Therefore, when configuring an origin-shield you should specify the country where your origin is located. IO River will then automatically pick the closest CDN POP to your origin for each CDN.

For example, if your origin is a S3 bucket located in AWS region us-east-1, you should select Virginia for your origin-shield location.

Enabling Origin-Shield

To enable origin-shield for an origin:

1. Navigate to your service.
2. In the sidebar, select Origins.
3. Next to the origin you would like to enable origin-shield for, click on the Set Origin Shield button.
4. In the origin-shield form, select the providers you would like to enable origin-shield for. CDN providers which don't support origin-shield will be disabled.
5. Under Origin Location, select the country in which your origin is located.
6. Click on Save Changes.