System Design · Guide

CDN

Edge caching, origin shielding, static asset delivery.

— min read System Design

Theory

CDN: Edge caching, origin shielding, static asset delivery.

A Content Delivery Network caches content at edge PoPs close to users — cutting latency and shielding origin servers from global traffic spikes. DNS geo-routing or anycast directs clients to the nearest edge node.

Static assets (JS bundles with content hashes, images, fonts) cache with long max-age and immutable flags. HTML and API responses use shorter TTLs or bypass caching entirely when personalized.

Origin shield is a mid-tier cache between edge PoPs and origin — one cache miss per region instead of per PoP. Use stale-while-revalidate to serve slightly stale content while refreshing asynchronously.

Production rollouts require idempotent automation, peer review, staged apply, and documented rollback — treat changes as production code.

Interviewers want STAR stories linking CDN to measurable outcomes: fewer outages, faster deploys, lower cost, or reduced toil.

Architecture Diagram

Users / clients
         |
  CDN
         |
  Core services
         |
  Data + observability

Examples

bash
# CDN
# Edge caching, origin shielding, static asset delivery.
# Validate in staging before production rollout.

Interview Questions

What problem does CDN solve?

It addresses the core use case described in production architecture — map features to reliability, scale, or velocity outcomes.

Key components of CDN?

Identify inputs, outputs, control plane, data plane, and failure domains — interviewers want structured decomposition.

Common production pitfalls?

Misconfiguration, missing observability, no rollback path, and scaling bottlenecks under peak load.

How do you test changes safely?

Staging parity, canary/gradual rollout, automated health checks, and documented rollback.

Metrics to prove success?

Error rate, latency percentiles, throughput, cost, and toil reduction — pick one primary SLO.

Beginner vs advanced concern?

Beginners focus on setup; advanced teams focus on blast radius, security boundaries, and operability at 10× scale.

Best Practices

  • Treat CDN config as code with review and CI validation.
  • Define SLOs and dashboards before production cutover.
  • Document rollback and ownership for on-call.
  • Use least privilege for credentials.

Common Mistakes

  • Adopting CDN without measurable success criteria.
  • No staging environment mirroring production constraints.
  • Missing rollback path during incidents.
  • Undocumented on-call expectations.

Trade-off Analysis

CDN improves edge caching, origin shielding, static asset delivery. but adds operational and cognitive complexity — justify with load and team size.

Favor simplicity until metrics (p99 latency, error rate, cost) prove the pattern necessary.

Every redundancy layer trades capital/operational cost for availability — align with explicit SLO targets.

Document accepted inconsistency windows and recovery behavior before production cutover.

Cheat Sheet

CDNEdge caching, origin shielding, static asset delivery.
SLOService level objective
RollbackRevert to last known good
CanaryLimited blast-radius rollout
RunbookIncident steps

Practical Exercises

CDN sandbox

Stand up CDN locally or in free tier; document commands and failure recovery.

Failure drill

Introduce misconfiguration; practice detection and rollback under time limit.