The edge-origin pattern places a proxy or CDN at the public endpoint while keeping the authoritative origin web server private. The edge serves cached content or requests it from the origin. section 12.1.3
A web API request follows this path:
- The browser targets the API’s public subdomain, which is handled by the CDN edge. section 12.1.3
- The edge returns content from its cache or requests it from the origin using the origin’s private IP address. section 12.1.3
- A dedicated WAF filters potentially malicious HTTP requests, while CDN controls can detect and mitigate DDoS attacks. section 12.1.3
Public API, private origin
A client calls the web API through its public domain. The CDN responds immediately when content is cached; otherwise, it forwards the request to the unexposed origin server and returns the result. section 12.1.3
Use the architecture figure to trace the separation between the public edge and the private origin. section 12.1.3
