CDN to Origin Certificates: Your Own CA with OpenSSL

Tue, 15 Jul 2025 00:00:00 +0000

There’s a common assumption that because a CDN handles the TLS connection your users see — the certificate shown in the browser’s address bar — you don’t need to think too hard about certificates on your origin. That’s wrong, and the consequences show up as cryptic error codes rather than obvious failures.

A CDN like Akamai doesn’t act as a transparent tunnel. It terminates the TLS session from the client, inspects and processes the request, then opens a new TLS session toward your origin. Two separate connections, two separate certificate validations.

Is Your Website Ready for the Holiday Rush?

Tue, 03 Dec 2024 00:00:00 +0000

11.11 just happened. Black Friday is right behind it. Then Christmas, then New Year’s. If your platform survived Singles Day with headroom to spare, you might be tempted to relax. Don’t. Each of these events amplifies the same underlying gaps — and the ones that don’t show up under moderate traffic tend to surface spectacularly under peak load.

The preparation conversation usually focuses on infrastructure scaling: more instances, higher database connection limits, load balancer tuning. That’s necessary but not sufficient. Two factors that consistently determine whether a platform has a good or bad holiday season sit outside the application layer entirely: security posture and edge performance.

Security on Eknix — Web security & performance for the enterprise

CDN to Origin Certificates: Your Own CA with OpenSSL

Is Your Website Ready for the Holiday Rush?