Security
CORS Errors Behind a CDN: Causes and Header Fixes
A CORS error behind a CDN is almost never a browser bug and almost never an origin bug. It is a cache key problem. The ...
Fastly runs one of the smallest POP counts in the tier-1 CDN market and gets away with it. That is the single most misread fact about Fastly CDN. As of 2026 the company operates on the order of 100 points of presence against Cloudflare's 330-plus cities and CloudFront's 700-plus edge locations, and yet it holds anchor contracts in live sports, ticketing, and API delivery. The reason is architectural, not marketing: Fastly builds fewer, much larger POPs with enormous SSD cache tiers and dense settlement-free peering, so a single site absorbs the traffic that a competitor spreads across a dozen. This article gives you the network model, the answer to whether Fastly is an ISP, current published rates, and a bandwidth-versus-compute cost breakdown at 10, 50 and 100 TB per month.

No. Fastly is not an internet service provider in the retail sense. It sells no last-mile access, no residential broadband, no transit to end users. But the confusion is understandable, because Fastly does everything else an operator does: it holds its own autonomous system number (AS54113), announces its own address space, buys IP transit, and maintains a global peering policy at major internet exchanges.
The correct label is network operator and edge cloud provider. Fastly's traffic reaches you the same way any content network's does: either through settlement-free peering with your ISP at a shared exchange, through a private network interconnect where volume justifies it, or through paid transit as a fallback. When your traceroute to a Fastly-fronted site shows two or three hops, that is peering density doing its job, not Fastly being your ISP.
Fastly's design philosophy is fewer, fatter sites. Each POP carries substantial NVMe and SSD cache capacity and is provisioned with headroom to absorb regional failover, so when one site is drained for maintenance or degrades, neighbouring sites take the load without a cache-fill storm at origin. This is why Fastly's cache hit ratios on long-tail catalogs often beat networks with three times the location count: fewer caches means less catalog fragmentation and fewer origin fetches per unique object.
The trade-off is geographic. Fastly's coverage in interior South America, sub-Saharan Africa, South Asia outside the major metros, and parts of Southeast Asia is thinner than Cloudflare's or Akamai's. If your p95 latency target is 50 ms for users in Lagos, Karachi, or Bogotá, measure before you commit. In North America, Western Europe, Japan, and Australia the gap is functionally invisible.
Three problems recur across teams that leave Fastly, and none of them is about performance.
Bandwidth is expensive relative to volume-first CDNs. Fastly's published on-demand pricing as of 2026 starts around $0.12 per GB for the first 10 TB in North America and Europe, with per-request fees layered on top (roughly $0.0075 per 10,000 requests). Asia-Pacific and South America carry meaningfully higher per-GB rates. Enterprise commitments bring the effective rate down considerably, but even negotiated contracts rarely land below the range where a volume-focused provider is 5–20x cheaper per delivered gigabyte.
VCL is a hiring dependency. A production Fastly config with custom cache keys, conditional restarts, and error-handling logic is a real codebase. It needs review, testing, and someone who understands the multi-phase state machine. Teams that write it once and lose the author end up afraid to touch it.
Add-ons stack up. Compute execution, log volume, image optimization, WAF, and bot management are separately metered. A bandwidth-only estimate typically lands 1.5–2.5x under the real invoice.
Here is the arithmetic most teams skip. Figures use 2026 published on-demand rates for North America and Europe, cacheable static delivery, no edge compute, no security add-ons. Enterprise commit discounts on Fastly and CloudFront will lower those columns; they will not close the order-of-magnitude gap.
| Monthly egress | Fastly (on-demand) | CloudFront (on-demand) | BlazingCDN | Effective $/GB gap |
|---|---|---|---|---|
| 10 TB | ~$1,200 | ~$850 | $100 (25 TB tier) | 12x vs Fastly |
| 50 TB | ~$4,500 | ~$3,900 | $350 (100 TB tier) | ~13x vs Fastly |
| 100 TB | ~$8,000 | ~$7,300 | $350 | ~23x vs Fastly |
The honest reading: at 10 TB you are paying Fastly roughly $1,100 per month for instant purge, VCL, and real-time logs. If those features are load-bearing in your architecture, that is a defensible line item. If you are shipping game patches, VOD segments, installers or ISOs, you are paying a programmability premium on bytes that never touch a single line of custom logic.
| Workload profile | Dominant cost driver | Best fit |
|---|---|---|
| Live sports, ticketing, real-time inventory | Purge frequency, TTFB variance | Fastly |
| VOD, game patches, software distribution, ISOs | Raw egress | BlazingCDN, Bunny.net, CDN77 |
| API acceleration with auth at the edge | Requests, compute invocations | Fastly Compute or Cloudflare Workers |
| Emerging-market audience, latency-sensitive web | POP proximity | Cloudflare, Akamai, Gcore |
| AWS-native app, simple static delivery | Integration effort | CloudFront |
| Mixed: dynamic app plus heavy media tail | Both | Split by hostname (see below) |
You do not have to choose. Keep Fastly on the hostname that needs surrogate-key purging and edge logic — the app shell, the API, the personalised HTML. Point a separate asset hostname at a volume CDN for segments, images, installers and archives. Origin stays the same; you route by DNS. In practice this moves 80–95% of bytes off the expensive network while leaving every feature you actually depend on intact.
For that asset hostname, BlazingCDN's volume pricing is worth benchmarking: flat tiers starting at $100 per month for 25 TB and $350 for 100 TB, with overage at $0.0035 per GB and dropping to $0.002 per GB at 2 PB. It runs NVMe SSD edge storage, offers 100% uptime, and delivers stability and fault tolerance comparable to Amazon CloudFront at a fraction of the byte cost — which matters most for enterprises where egress is the single largest infrastructure line. Onboarding is typically under an hour, so a parallel A/B on a subset of assets costs almost nothing to try.
Fastly's June 2021 outage remains the reference case for CDN concentration risk: a single customer configuration change triggered a latent software bug that took a large share of the network offline for roughly an hour. Fastly's postmortem was unusually candid, and the platform has been materially more stable since. The lesson is not about Fastly specifically.
No. Fastly is a CDN and edge cloud provider, not an internet service provider. It operates its own autonomous system and address space and peers directly with ISPs at internet exchanges, but it does not sell last-mile connectivity to consumers or businesses.
Roughly 100 points of presence globally, far fewer than Cloudflare or CloudFront. Fastly compensates with much larger per-site capacity, dense SSD caching, and aggressive settlement-free peering, which keeps cache hit ratios high and origin egress low. Coverage is strongest in North America, Europe, Japan and Australia.
Published on-demand bandwidth starts around $0.12 per GB for the first 10 TB in North America and Europe as of 2026, plus roughly $0.0075 per 10,000 requests. Asia-Pacific and South America are higher. Enterprise commitments reduce the effective rate substantially, but volume-first CDNs still price bytes an order of magnitude lower.
When more than 60% of your CDN spend is bandwidth for cacheable objects and edge compute touches under 10% of requests. At that ratio you are funding programmability you are not using. Large-file distribution — video, patches, installers — is the clearest case.
Yes, and it is the most common mature setup. Split by hostname: dynamic and purge-sensitive content on Fastly, static and heavy assets on a volume CDN. Weighted DNS lets you shift traffic between them without a redeploy.
Global propagation is typically under 150 milliseconds for both single-URL and surrogate-key purges. That figure is genuinely differentiated; most competitors land in the seconds range. It matters for live scores, stock levels and breaking news, and matters very little for a static marketing site.
Pull 90 days of CDN invoices and split the line items into four buckets: bandwidth, requests, compute, and observability plus security. Calculate your effective dollars per delivered GB. Then measure what percentage of requests actually execute custom edge logic. If bandwidth is over 60% of spend and edge logic touches under 10% of requests, you have a hostname-split opportunity worth four figures a month at 10 TB and five figures at 100 TB.
Second measurement, same week: sample p95 TTFB from your three largest non-US markets against your current CDN and one alternative. POP count is a proxy; measured latency from your actual audience is the number that should drive the decision. What does your split look like — and has anyone here run Fastly and a volume CDN side by side long enough to have real cache-hit-ratio numbers for both?
Security
A CORS error behind a CDN is almost never a browser bug and almost never an origin bug. It is a cache key problem. The ...
Pricing - Pricing & Costs
Akamai Alternatives in 2026: A CDN Cost Comparison Framework The number that ends most Akamai renewal conversations is ...