Featured Articles

OpenResty Edge: Private CDN, Universal Gateway & WAF in One Platform

OpenResty Edge: Private CDN, Universal Gateway & WAF in One Platform

OpenResty Edge: Private CDN, Universal Gateway & WAF in One Platform

WAF Benchmark: OpenResty Edge 3.7–10x Faster than ModSecurity (208 Rules)

WAF Benchmark: OpenResty Edge 3.7–10x Faster than ModSecurity (208 Rules)

WAF Benchmark: OpenResty Edge 3.7–10x Faster than ModSecurity (208 Rules)

Building "Less is More" Event-Driven Operations with OpenResty Edge Webhook

Building "Less is More" Event-Driven Operations with OpenResty Edge Webhook

Building "Less is More" Event-Driven Operations with OpenResty Edge Webhook

Private CDN Solution: Enterprise Edge Architecture | OpenResty Edge

Private CDN Solution: Enterprise Edge Architecture | OpenResty Edge

Private CDN Solution: Enterprise Edge Architecture | OpenResty Edge

Zstd Compression in OpenResty Edge: Faster, Lighter Than Gzip and Brotli

Zstd Compression in OpenResty Edge: Faster, Lighter Than Gzip and Brotli

Zstd Compression in OpenResty Edge: Faster, Lighter Than Gzip and Brotli

SSL Certificate Automation with the ACME Protocol in OpenResty Edge

SSL Certificate Automation with the ACME Protocol in OpenResty Edge

SSL Certificate Automation with the ACME Protocol in OpenResty Edge

Photo by Yichun Zhang

How to Automate Managing Gateway Servers in K8s Environment (using OpenResty Edge)

How to Automate Managing Gateway Servers in K8s Environment (using OpenResty Edge)

EdgeLang: A Powerful and Efficient Language for Gateway Logic

EdgeLang: A Powerful and Efficient Language for Gateway Logic

EdgeLang: A Powerful and Efficient Language for Gateway Logic

Photo by Yichun Zhang

How to pass the real client IP addresses to backend servers via special request headers

How to pass the real client IP addresses to backend servers via special request headers

Latest Articles

OpenResty Edge TCP Load Balancing: Proxy TCP Services Without Editing Nginx Config

  • Create a TCP (stream) application in OpenResty Edge
  • Add an upstream and page rule for TCP load balancing
  • Test the TCP proxy by connecting to MySQL through an edge node
  • Frequently asked questions
  • Create a TCP (stream) application in OpenResty Edge
  • Add an upstream and page rule for TCP load balancing
  • Test the TCP proxy by connecting to MySQL through an edge node
  • Frequently asked questions

How to Enable Sticky Cookies in OpenResty Edge (Session Affinity)

  • How sticky cookies keep session affinity in OpenResty Edge
  • Enable sticky cookies for an upstream (server-level)
  • Test that every request hits the same backend
  • Disable sticky cookies and return to round robin
  • Test again and watch traffic spread across backends
  • Frequently asked questions
  • How sticky cookies keep session affinity in OpenResty Edge
  • Enable sticky cookies for an upstream (server-level)
  • Test that every request hits the same backend
  • Disable sticky cookies and return to round robin
  • Test again and watch traffic spread across backends
  • Frequently asked questions

OpenResty Edge WAF: Enable, Test, and Block Attacks

  • Enable the WAF for an Application in Log-Only Mode
  • Send a Test Attack and Review the WAF Logs
  • Disable and Re-enable Individual WAF Rules
  • Add a WAF Whitelist to Save CPU Cycles
  • Return 403 on a WAF Hit: Sensitivity and Risk-Score Thresholds
  • Verify the 403 Block in the WAF Logs
  • Create Your Own WAF Rule Set in EdgeLang
  • FAQ: WAF on OpenResty
  • Enable the WAF for an Application in Log-Only Mode
  • Send a Test Attack and Review the WAF Logs
  • Disable and Re-enable Individual WAF Rules
  • Add a WAF Whitelist to Save CPU Cycles
  • Return 403 on a WAF Hit: Sensitivity and Risk-Score Thresholds
  • Verify the 403 Block in the WAF Logs
  • Create Your Own WAF Rule Set in EdgeLang
  • FAQ: WAF on OpenResty

The EdgeLang DSL in OpenResty Edge

  • Introduction to Edgelang
  • Add a page rule defined using Edgelang
  • Test
  • Modify the Edgelang definition of the page rule
  • Define WAF rules using Edgelang
  • Edgelang user manual
  • Introduction to Edgelang
  • Add a page rule defined using Edgelang
  • Test
  • Modify the Edgelang definition of the page rule
  • Define WAF rules using Edgelang
  • Edgelang user manual

Configure HTTP basic auth in OpenResty Edge

  • Configure the HTTP basic auth credentials for applications
    • Add a basic auth user group
    • Enable the basic authentication
    • Test
  • Configure the global HTTP basic auth
    • Add a global basic auth user group
    • Configure the global auth for application
Photo by Yichun Zhang
  • Configure the HTTP basic auth credentials for applications
    • Add a basic auth user group
    • Enable the basic authentication
    • Test
  • Configure the global HTTP basic auth
    • Add a global basic auth user group
    • Configure the global auth for application

Gateway Config's Version Control & Release Management in OpenResty Edge

  • Create a page rule for the sample application
  • Release the page rule
  • Test
  • Modify the page rule
  • Release the modification
  • Test the modification
  • Revert the release
  • Test of the release reverting
Photo by Yichun Zhang
  • Create a page rule for the sample application
  • Release the page rule
  • Test
  • Modify the page rule
  • Release the modification
  • Test the modification
  • Revert the release
  • Test of the release reverting

Redirect to different URIs Based on Clients' Language Settings (OpenResty Edge)

  • The origin site which supports different languages
  • Create a page rule for redirection
  • Test the new page rule
  • Add a new page rule to redirect to the English page
  • Test the new page rule
Photo by Yichun Zhang
  • The origin site which supports different languages
  • Create a page rule for redirection
  • Test the new page rule
  • Add a new page rule to redirect to the English page
  • Test the new page rule

Automatic Let's Encrypt SSL Renewal, No Cron — OpenResty Edge

  • Add the domains to your Edge application
  • Issue and auto-renew a Let’s Encrypt SSL certificate
  • Verify HTTPS and the Let’s Encrypt certificate on a gateway
Photo by Yichun Zhang
  • Add the domains to your Edge application
  • Issue and auto-renew a Let’s Encrypt SSL certificate
  • Verify HTTPS and the Let’s Encrypt certificate on a gateway

Upload SSL Certificates for HTTPS Sites in OpenResty Edge

  • Upload the SSL certificate and private key in the Edge console
  • Push the new certificate without a server reload or restart
  • Test the uploaded certificate with curl –resolve
Photo by Yichun Zhang
  • Upload the SSL certificate and private key in the Edge console
  • Push the new certificate without a server reload or restart
  • Test the uploaded certificate with curl –resolve

CDN for Live Streaming: Surviving Peak Events Without Peak-Event Bills

  • Why live streams crash at peak: running day-to-day doesn’t mean surviving the peak
  • How a private CDN turns peak stability from probability into certainty
  • Live streaming CDN cost comparison: surviving the peak isn’t paying for the peak
  • The real cost of a private CDN: not the same as building from scratch
  • Beyond delivery: what a live streaming scenario needs from the same gateway layer
  • FAQ
  • Why live streams crash at peak: running day-to-day doesn’t mean surviving the peak
  • How a private CDN turns peak stability from probability into certainty
  • Live streaming CDN cost comparison: surviving the peak isn’t paying for the peak
  • The real cost of a private CDN: not the same as building from scratch
  • Beyond delivery: what a live streaming scenario needs from the same gateway layer
  • FAQ

Building a Self-Hosted Live Streaming CDN for HLS with OpenResty Edge

  • Why live HLS breaks a naive caching setup
  • Building it on OpenResty Edge: two page rules with opposite TTLs
  • The most critical step: the Use stale proxy cache action
  • A shield tier with gateway partitions: collapsing to one fetch network-wide
  • Verifying the configuration and load testing
  • FAQ
  • Why live HLS breaks a naive caching setup
  • Building it on OpenResty Edge: two page rules with opposite TTLs
  • The most critical step: the Use stale proxy cache action
  • A shield tier with gateway partitions: collapsing to one fetch network-wide
  • Verifying the configuration and load testing
  • FAQ

How to Run a Real-Time Cache Purge Network-Wide in OpenResty Edge

  • Create a real-time cache purge job in OpenResty Edge
  • Verify the cache status with the Cache-Status header
  • Purge cache across the whole network with no reload
  • Purge cache by URL prefix
  • Custom purge conditions
  • FAQ
Photo by Yichun Zhang
  • Create a real-time cache purge job in OpenResty Edge
  • Verify the cache status with the Cache-Status header
  • Purge cache across the whole network with no reload
  • Purge cache by URL prefix
  • Custom purge conditions
  • FAQ

Enable HTTP Cache in OpenResty Edge: Proxy Cache Without Cache-Control Headers

  • Enable proxy cache in a page rule and set the cache key
  • Test the cache and verify Cache-Status HIT/MISS with curl
  • Enforce caching without a Cache-Control header
  • Frequently asked questions
Photo by Yichun Zhang
  • Enable proxy cache in a page rule and set the cache key
  • Test the cache and verify Cache-Status HIT/MISS with curl
  • Enforce caching without a Cache-Control header
  • Frequently asked questions

Control Access to DNS Applications in OpenResty Edge's Admin Console

  • Check DNS page permissions as a super user
  • Create a user group with only read permission for this DNS application
  • Create a tester account
  • See the DNS applications with permission granted
  • What is OpenResty Edge
  • Check DNS page permissions as a super user
  • Create a user group with only read permission for this DNS application
  • Create a tester account
  • See the DNS applications with permission granted
  • What is OpenResty Edge

Call Lua modules by Edgelang in OpenResty Edge

  • Create a Lua module in OpenResty Edge
  • Call the Lua module in an HTTP application of OpenResty Edge
  • Verify the effect of calling the Lua module
  • What is OpenResty Edge
  • Create a Lua module in OpenResty Edge
  • Call the Lua module in an HTTP application of OpenResty Edge
  • Verify the effect of calling the Lua module
  • What is OpenResty Edge

The EdgeLang DSL in OpenResty Edge

  • Introduction to Edgelang
  • Add a page rule defined using Edgelang
  • Test
  • Modify the Edgelang definition of the page rule
  • Define WAF rules using Edgelang
  • Edgelang user manual
  • Introduction to Edgelang
  • Add a page rule defined using Edgelang
  • Test
  • Modify the Edgelang definition of the page rule
  • Define WAF rules using Edgelang
  • Edgelang user manual

Automating Kubernetes Gateway Node Lifecycle with OpenResty Edge

  • The gateway dilemma in the Kubernetes era: static control models vs. cloud-native reality
  • Capability one: automated lifecycle management for gateway nodes
  • Capability two: multiple K8s clusters and unified control
  • Capability three: a two-tier upstream system
  • Summary
  • The gateway dilemma in the Kubernetes era: static control models vs. cloud-native reality
  • Capability one: automated lifecycle management for gateway nodes
  • Capability two: multiple K8s clusters and unified control
  • Capability three: a two-tier upstream system
  • Summary

Zstd Compression in OpenResty Edge: Faster, Lighter Than Gzip and Brotli

  • The Evolution of Compression Algorithms
  • What is Zstandard (zstd)
  • Why Zstandard is Particularly Well-Suited for OpenResty Edge
  • How to Enable Zstandard (Zstd) Compression in OpenResty Edge
  • Zstd vs Brotli vs Gzip: Which Should You Serve?
  • The Evolution of Compression Algorithms
  • What is Zstandard (zstd)
  • Why Zstandard is Particularly Well-Suited for OpenResty Edge
  • How to Enable Zstandard (Zstd) Compression in OpenResty Edge
  • Zstd vs Brotli vs Gzip: Which Should You Serve?

SSL Certificate Automation with the ACME Protocol in OpenResty Edge

  • What is the ACME protocol?
  • Why you need ACME for automatic certificate management
  • How to set up automatic SSL certificate issuance and renewal in OpenResty Edge
  • What is the ACME protocol?
  • Why you need ACME for automatic certificate management
  • How to set up automatic SSL certificate issuance and renewal in OpenResty Edge

Accurately Restore the Real Client IP Address in OpenResty Edge

  • Set “Trusted hosts to set real IP” and “Real IP from” Globally
  • Configure the Application to Output the Client Address
  • Check the Client Address Received on OpenResty Edge
  • What is OpenResty Edge
Photo by Yichun Zhang
  • Set “Trusted hosts to set real IP” and “Real IP from” Globally
  • Configure the Application to Output the Client Address
  • Check the Client Address Received on OpenResty Edge
  • What is OpenResty Edge

Automating Kubernetes Gateway Node Lifecycle with OpenResty Edge

  • The gateway dilemma in the Kubernetes era: static control models vs. cloud-native reality
  • Capability one: automated lifecycle management for gateway nodes
  • Capability two: multiple K8s clusters and unified control
  • Capability three: a two-tier upstream system
  • Summary
  • The gateway dilemma in the Kubernetes era: static control models vs. cloud-native reality
  • Capability one: automated lifecycle management for gateway nodes
  • Capability two: multiple K8s clusters and unified control
  • Capability three: a two-tier upstream system
  • Summary

How to Set Up a Self-Hosted CDN: Step-by-Step Guide with OpenResty Edge

  • How OpenResty Edge Works: Edge Node, Admin, and Origin
  • What You’ll Need Before You Start
  • Step 1 — Install OpenResty Edge and Initialize the Cluster
  • Step 2 — Plan and Register Your Edge Nodes
  • Step 3 — Configure DNS and Traffic Routing
  • Step 4 — Set Up Caching Rules for High Hit Rates
  • Step 5 — Configure Edge Security Policies
  • Step 6 — Monitor Your CDN and Set Up Alerting
Photo by Yichun Zhang
  • How OpenResty Edge Works: Edge Node, Admin, and Origin
  • What You’ll Need Before You Start
  • Step 1 — Install OpenResty Edge and Initialize the Cluster
  • Step 2 — Plan and Register Your Edge Nodes
  • Step 3 — Configure DNS and Traffic Routing
  • Step 4 — Set Up Caching Rules for High Hit Rates
  • Step 5 — Configure Edge Security Policies
  • Step 6 — Monitor Your CDN and Set Up Alerting

Adding Custom Response Headers in OpenResty Edge

  • Add New Respond Header and Use String As Value
  • Use “System Hostname” As a Built-in Variable for Value
  • Add New Respond Header and Use String As Value
  • Use “System Hostname” As a Built-in Variable for Value

Redirect to different URIs Based on Clients' Language Settings (OpenResty Edge)

  • The origin site which supports different languages
  • Create a page rule for redirection
  • Test the new page rule
  • Add a new page rule to redirect to the English page
  • Test the new page rule
Photo by Yichun Zhang
  • The origin site which supports different languages
  • Create a page rule for redirection
  • Test the new page rule
  • Add a new page rule to redirect to the English page
  • Test the new page rule

How to Set Up a Simple Reverse Proxy and Load Balancer with OpenResty Edge

  • Set up an OpenResty Edge reverse proxy and load balancer from the web console
  • Create an application and an upstream for your backend
  • Add a round-robin page rule
  • Release the config to every gateway node and verify with curl
Photo by Yichun Zhang
  • Set up an OpenResty Edge reverse proxy and load balancer from the web console
  • Create an application and an upstream for your backend
  • Add a round-robin page rule
  • Release the config to every gateway node and verify with curl

Automatic Let's Encrypt SSL Renewal, No Cron — OpenResty Edge

  • Add the domains to your Edge application
  • Issue and auto-renew a Let’s Encrypt SSL certificate
  • Verify HTTPS and the Let’s Encrypt certificate on a gateway
Photo by Yichun Zhang
  • Add the domains to your Edge application
  • Issue and auto-renew a Let’s Encrypt SSL certificate
  • Verify HTTPS and the Let’s Encrypt certificate on a gateway

Upload SSL Certificates for HTTPS Sites in OpenResty Edge

  • Upload the SSL certificate and private key in the Edge console
  • Push the new certificate without a server reload or restart
  • Test the uploaded certificate with curl –resolve
Photo by Yichun Zhang
  • Upload the SSL certificate and private key in the Edge console
  • Push the new certificate without a server reload or restart
  • Test the uploaded certificate with curl –resolve

Configuring SNI proxies in OpenResty Edge

  • Create an SNI proxy application
  • Create an upstream and a page rule for the application
  • Test the SNI proxy application
  • Create an SNI proxy application
  • Create an upstream and a page rule for the application
  • Test the SNI proxy application

OpenResty Edge TCP Load Balancing: Proxy TCP Services Without Editing Nginx Config

  • Create a TCP (stream) application in OpenResty Edge
  • Add an upstream and page rule for TCP load balancing
  • Test the TCP proxy by connecting to MySQL through an edge node
  • Frequently asked questions
  • Create a TCP (stream) application in OpenResty Edge
  • Add an upstream and page rule for TCP load balancing
  • Test the TCP proxy by connecting to MySQL through an edge node
  • Frequently asked questions

WAF Benchmark: OpenResty Edge 3.7–10x Faster than ModSecurity (208 Rules)

  • The Benchmark: 208 WAF Rules on One CPU Core
  • Why Rule Count Doesn’t Have to Hurt WAF Performance
  • How to Implement a WAF at the Edge: Four Steps
  • FAQ: WAF performance
  • The Benchmark: 208 WAF Rules on One CPU Core
  • Why Rule Count Doesn’t Have to Hurt WAF Performance
  • How to Implement a WAF at the Edge: Four Steps
  • FAQ: WAF performance

OpenResty Edge WAF: Enable, Test, and Block Attacks

  • Enable the WAF for an Application in Log-Only Mode
  • Send a Test Attack and Review the WAF Logs
  • Disable and Re-enable Individual WAF Rules
  • Add a WAF Whitelist to Save CPU Cycles
  • Return 403 on a WAF Hit: Sensitivity and Risk-Score Thresholds
  • Verify the 403 Block in the WAF Logs
  • Create Your Own WAF Rule Set in EdgeLang
  • FAQ: WAF on OpenResty
  • Enable the WAF for an Application in Log-Only Mode
  • Send a Test Attack and Review the WAF Logs
  • Disable and Re-enable Individual WAF Rules
  • Add a WAF Whitelist to Save CPU Cycles
  • Return 403 on a WAF Hit: Sensitivity and Risk-Score Thresholds
  • Verify the 403 Block in the WAF Logs
  • Create Your Own WAF Rule Set in EdgeLang
  • FAQ: WAF on OpenResty

Open Source OpenResty vs. OpenResty Edge: Key Differences

  • Open Source vs. OpenResty Edge at a Glance
  • When Open Source Hits Its Limits: 6 Real Scenarios
  • Choosing the Right Path for Your Infrastructure
  • Open Source vs. OpenResty Edge at a Glance
  • When Open Source Hits Its Limits: 6 Real Scenarios
  • Choosing the Right Path for Your Infrastructure

Private CDN Solution: Enterprise Edge Architecture | OpenResty Edge

  • The Breaking Point: When Public CDNs Fail the Enterprise
  • The CDN Landscape: Public CDN vs. DIY Open Source vs. Commercial Private CDN
  • From OpEx to CapEx: The Business Case for a Private CDN
  • Why OpenResty Edge? Evaluating an Enterprise Private CDN Platform
  • The Edge Is Your Competitive Advantage — Not a Commodity
  • Frequently Asked Questions
  • The Breaking Point: When Public CDNs Fail the Enterprise
  • The CDN Landscape: Public CDN vs. DIY Open Source vs. Commercial Private CDN
  • From OpEx to CapEx: The Business Case for a Private CDN
  • Why OpenResty Edge? Evaluating an Enterprise Private CDN Platform
  • The Edge Is Your Competitive Advantage — Not a Commodity
  • Frequently Asked Questions

OpenResty Edge Data Protection: From Scheduled Backups to Automatic Failover

  • First line: scheduled backups and off-host sync
  • Second line: primary–standby streaming replication
  • Third line: automatic failover cluster
  • Comparing the three approaches and selection guidance
  • First line: scheduled backups and off-host sync
  • Second line: primary–standby streaming replication
  • Third line: automatic failover cluster
  • Comparing the three approaches and selection guidance

Global Search in OpenResty Edge

  • Search for Request ID
  • Search for texts on the interface
  • Search for upstreams
  • Search for applications
  • Search for blog posts
  • Search for Request ID
  • Search for texts on the interface
  • Search for upstreams
  • Search for applications
  • Search for blog posts

OpenResty Edge Static Files: Serve Assets from the Gateway with No Back-to-Source

  • Upload static files to the Global Static File storage
  • Create a page rule to serve them directly from the gateway
  • Test exact match, directory prefix, and ignored prefix
  • Upload static files to the Global Static File storage
  • Create a page rule to serve them directly from the gateway
  • Test exact match, directory prefix, and ignored prefix

How to Enable Sticky Cookies in OpenResty Edge (Session Affinity)

  • How sticky cookies keep session affinity in OpenResty Edge
  • Enable sticky cookies for an upstream (server-level)
  • Test that every request hits the same backend
  • Disable sticky cookies and return to round robin
  • Test again and watch traffic spread across backends
  • Frequently asked questions
  • How sticky cookies keep session affinity in OpenResty Edge
  • Enable sticky cookies for an upstream (server-level)
  • Test that every request hits the same backend
  • Disable sticky cookies and return to round robin
  • Test again and watch traffic spread across backends
  • Frequently asked questions

Configure HTTP basic auth in OpenResty Edge

  • Configure the HTTP basic auth credentials for applications
    • Add a basic auth user group
    • Enable the basic authentication
    • Test
  • Configure the global HTTP basic auth
    • Add a global basic auth user group
    • Configure the global auth for application
Photo by Yichun Zhang
  • Configure the HTTP basic auth credentials for applications
    • Add a basic auth user group
    • Enable the basic authentication
    • Test
  • Configure the global HTTP basic auth
    • Add a global basic auth user group
    • Configure the global auth for application

Gateway Config's Version Control & Release Management in OpenResty Edge

  • Create a page rule for the sample application
  • Release the page rule
  • Test
  • Modify the page rule
  • Release the modification
  • Test the modification
  • Revert the release
  • Test of the release reverting
Photo by Yichun Zhang
  • Create a page rule for the sample application
  • Release the page rule
  • Test
  • Modify the page rule
  • Release the modification
  • Test the modification
  • Revert the release
  • Test of the release reverting
Contact us

Love to hear from you, Get in touch 👋

Message was sent successfully!

Our Team will get back to you within 24 hours.
x