Incidents

CDN incidents are easy to misread because a public symptom can originate in the CDN, an origin, DNS, a certificate authority, a cloud dependency, or the customer’s own configuration. Use primary sources to establish what is known before assigning cause. This page is a monitoring method and source directory. It is not a live incident feed. Start with the incident class Signal Check first Confirm with Broad availability drop Provider status page Provider incident history and your regional probes New CVE or exploited flaw Vendor advisory and CISA KEV Product/version scope and remediation text Elevated 5xx responses CDN and origin logs The 5xx ownership and diagnosis guide Certificate failures CDN certificate state and CA status TLS handshake logs and affected hostnames Cache or purge anomaly Cache-status headers and purge operation IDs The purge verification checklist Suspected attack WAF, bot, and DDoS event logs Provider advisory, indicators, and application logs Primary status sources Akamai service status AWS Health Dashboard Cloudflare status Fastly status Google Cloud service health Microsoft Azure status Subscribe to the provider’s official email, RSS, Atom, webhook, or API option where one exists. A third-party aggregator is useful for discovery, but it should not be the sole evidence for impact, cause, or resolution. ...

Synopsis This chapter provides standard playbooks for incidents in multi-CDN environments. It covers detection, triage, scoping by geography and network, isolation and reroute choices, change control during active events, communication, restoration, and post-incident analysis. The objective is to protect users first, keep changes reversible, and leave an audit trail that improves future responses. Principles Incident handling favors user outcomes over internal metrics. Actions modify the smallest scope that achieves protection. All changes must be reversible. Each action records who acted, what changed, and why. Telemetry drives decisions and distinguishes symptoms from causes. Providers are treated as interchangeable routes unless a risk register documents exceptions. ...