[
SECURITY · ORIGIN PROTECTION]
Hide the servers.Serve the content.
Users talk to Medianova at the edge - your origin stays off the public internet and only accepts authenticated CDN traffic.
ORIGIN SHIELD
Full origin protection.
From Application Security and Performance: every request passes through the edge layer first.
Block direct-to-origin attacks
Malicious traffic, bots and DDoS probes are filtered before they reach your infrastructure.
Reduce origin exposure
Offload transactions to the CDN so origin IP addresses are harder to target directly.
Authenticated CDN hops
Origin Basic Authentication lets the CDN reach password-protected origins without exposing credentials to visitors.
CONTROLS
What you can configure.
Origin Basic Authentication
Store username and password in the Control Panel; the CDN includes them on each origin request only.
TLS to origin
Modern HTTPS delivery and TLS 1.3 at the edge, with SNI and timeout controls in advanced settings.
Private CDN isolation
Dedicated infrastructure with WAF, rate limiting and DDoS defense on your own edge.
Zero downtime failover
Automatic rerouting during outages or attacks keeps services online - from homepage security messaging.
USE CASES
When the origin must stay private.
Password-protected staging
Let the CDN authenticate to an origin that already uses HTTP Basic Auth.
Hidden origin IPs
Publish only Medianova hostnames so attackers cannot bypass the edge.
Hybrid and multi-CDN
Keep a consistent shield even when traffic arrives from several providers.
GET STARTED
Enable origin Basic Auth.
- 01 / 03
Open Security
Select the Dynamic CDN Resource that fronts your origin.
- 02 / 03
Turn on Origin Basic Authentication
Enter the username and password your origin expects.
- 03 / 03
Save
The CDN includes credentials on every origin fetch - visitors never see them.
Keep your origin off the attack surface.
Talk to an engineer about shielding, credentials and failover.
Talk to an engineer