Acquia Edge Standard is a streamlined Content Delivery Network (CDN) and Web Application Firewall (WAF) solution designed to enhance the performance and security of your websites. Acquia Edge Standard routes site traffic through a secure network that caches content to reduce load times, protects against common web threats, and provides detailed insights into your traffic patterns.

Key features

• Content Delivery Network (CDN): Improves site speed by caching content closer to users to reduce latency and bandwidth consumption.

• Web Application Firewall (WAF): Provides robust security against Open Web Application Security Project (OWASP) Top 10 vulnerabilities, Distributed Denial of Service (DDoS) attacks, and malicious bot traffic.

• Acquia managed ruleset: Includes pre-configured rules maintained by Acquia for Drupal core hardening and technology shielding, such as blocking WordPress scans and mitigating known bots.

• Rate limiting: Safeguards domains by restricting request volumes from individual clients. The system temporarily blocks further requests from abusive IP addresses for 10 minutes.

• IP access control: Enables you to explicitly allow or block traffic based on specific client IP addresses or Classless Inter-Domain Routing (CIDR) ranges.

• Security metrics dashboard: Offers real-time visibility into mitigated threats, saved bandwidth, and rule effectiveness through a centralized audit table.

• Role-Based Access Control (RBAC): Enables permission management through defined Edge Administrator, Edge Manager, and Edge Viewer roles.

Acquia Edge Standard is a streamlined Content Delivery Network (CDN) and Web Application Firewall (WAF) solution designed to enhance the performance and security of your websites. Acquia Edge Standard routes site traffic through a secure network that caches content to reduce load times, protects against common web threats, and provides detailed insights into your traffic patterns.

Key features

• Content Delivery Network (CDN): Improves site speed by caching content closer to users to reduce latency and bandwidth consumption.

• Web Application Firewall (WAF): Provides robust security against Open Web Application Security Project (OWASP) Top 10 vulnerabilities, Distributed Denial of Service (DDoS) attacks, and malicious bot traffic.

• Acquia managed ruleset: Includes pre-configured rules maintained by Acquia for Drupal core hardening and technology shielding, such as blocking WordPress scans and mitigating known bots.

• Rate limiting: Safeguards domains by restricting request volumes from individual clients. The system temporarily blocks further requests from abusive IP addresses for 10 minutes.

• IP access control: Enables you to explicitly allow or block traffic based on specific client IP addresses or Classless Inter-Domain Routing (CIDR) ranges.

• Security metrics dashboard: Offers real-time visibility into mitigated threats, saved bandwidth, and rule effectiveness through a centralized audit table.

• Role-Based Access Control (RBAC): Enables permission management through defined Edge Administrator, Edge Manager, and Edge Viewer roles.

Prerequisites

Before you configure Edge Standard, ensure you meet the following requirements:

1. Active subscription: You must have an active Acquia Cloud platform subscription with an Edge Standard entitlement.

2. Acquia purge module: Install the latest version of the Acquia Purge module on your Drupal application to ensure cache invalidation functions correctly.

3. DNS access: You must have administrative access to your external DNS provider, such as Amazon Web Services (AWS) Route 53 or GoDaddy, to perform ownership validation and traffic repointing.

4. Acquia ID: Administrative users must be able to log in to the Edge console at Edge Console | Acquia.

Compatibility and constraints

Supported use cases

• Acquia-hosted custom domains: Edge Standard is designed for custom domains such as example.com where you can repoint DNS.

Current constraints and incompatibilities

Edge Standard does not currently support the following products or scenarios:

• Acquia Cloud Site Factory (ACSF)

• Acquia Cloud Professional (ACP)

• Node.js applications

• Customers requiring Federal Risk and Authorization Management Program (FedRAMP)-compliant WAF or CDN

• Multi-Experience Operations (MEO) or multi-region failover setups

Additional limitations

• SSL certificates: Acquia Edge Standard automatically provisions and manages SSL certificates for all configured domains. Bring Your Own (BYO) certificate is not supported. After DNS validation, certificates generate automatically. Customers remain responsible for maintaining a valid SSL certificate on the Cloud Platform origin. For details, visit Provision a hostname.

• Root domains: Support for root (bare) domains is available only if your DNS registrar provides CNAME flattening (ALIAS or ANAME records).

• Stacked CDNs: Stacking Edge Standard with other reverse-proxy CDNs (such as Platform CDN) is not supported.

  For an overview of all Edge offerings, visit Acquia Edge overview.