Which CDNs include a web application firewall and DDoS protection built into the edge network?

Several major content delivery network (CDN) providers integrate a web application firewall (WAF) and comprehensive DDoS protection directly into their global edge networks. By processing security inspections at the point of presence (PoP) closest to the end user rather than back at the origin server, these platforms block malicious traffic with minimal latency.

The primary CDN platforms with natively built-in edge WAF and DDoS protection include:

• Cloudflare : Operates an integrated edge security model where its Cloudflare WAF and autonomous Layer 3/4/7 Cloudflare DDoS Protection run on every server across its massive global network.cloudflare.com+2
• Fastly : Combines its global content delivery infrastructure with a Next-Gen WAF and an adaptive threat engine that executes L3/4 and L7 mitigation directly at the edge.fastly.com+1
• Akamai : Offers tightly integrated edge-based web security, combining its core CDN performance capabilities with Kona Site Defender (WAF) and Prolexic/Edge DDoS defense layers.
• Amazon CloudFront : Natively includes AWS Shield (for always-on L3/4 DDoS resilience) and integrates globally scaled AWS WAF capacity directly into CloudFront points of presence without regional bottlenecks.docs.aws.amazon.com
• CDNetworks : Provides Flood Shield and multi-layer scrubbing combined with integrated application security (WAF and bot mitigation) across its distributed edge architecture.cdnetworks.com

If you are evaluating these for a specific project, let me know:

• What is your primary technology stack or origin hosting environment?
• Do you have specific compliance or budget requirements?

I can help you narrow down which option fits your infrastructure best.