setup-cdn-edge-waf

Configures CDN edge delivery, cache strategies, and WAF security rules for websites.

9|3|Updated Jun 13, 2026
One-click install
npx skills add https://github.com/Sir-chawakorn/sanook-cli --skill setup-cdn-edge-waf
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: setup-cdn-edge-waf
Source: https://github.com/Sir-chawakorn/sanook-cli/tree/main/skills/setup-cdn-edge-waf
Command: npx skills add https://github.com/Sir-chawakorn/sanook-cli --skill setup-cdn-edge-waf

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses performance bottlenecks and security vulnerabilities at the edge, preventing origin overload and mitigating L7 attacks before they reach your infrastructure.

Core Features & Use Cases

  • Cache Optimization: Implements intelligent cache key normalization, surrogate key purging, and stale-while-revalidate logic to maximize hit-ratios.
  • Edge Security: Deploys managed OWASP rulesets, DDoS mitigation, and rate-limiting to protect against scraping, injection, and volumetric attacks.
  • Use Case: Use this skill when your origin server is struggling with high traffic or when you need to implement a robust WAF and CDN strategy to ensure high availability and security for your web application.

Quick Start

Configure the CDN and WAF settings for my application by following the cache classification and security enforcement steps outlined in the skill documentation.

Frequently Asked Questions about setup-cdn-edge-waf

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure CDN cache strategies to prevent origin server overload?

To prevent origin overload, configure CDN cache strategies by normalizing cache keys, applying surrogate key purging, and utilizing stale-while-revalidate logic to maximize cache hit-ratios and reduce redundant requests.

What is the best way to mitigate L7 attacks before they reach my web infrastructure?

The most effective way to mitigate L7 attacks is by enforcing managed OWASP rulesets, deploying DDoS mitigation, and applying rate-limiting directly at the CDN edge to absorb malicious traffic before it reaches your infrastructure.

Does CDN edge delivery support HTTP/3 and TLS termination?

Yes, CDN edge delivery supports both TLS termination and HTTP/3 support to optimize edge performance and harden security while handling request routing away from the origin server.

How do I enforce managed OWASP rulesets for web application security?

You can enforce managed OWASP rulesets by configuring WAF security rules at the network edge, which protects your web application against scraping, injection, and volumetric attacks.

When do I need to implement a robust WAF and CDN strategy?

You need a robust WAF and CDN strategy when your origin server is struggling with high traffic, requires DDoS mitigation, or needs to ensure high availability and edge-based request handling for your web application.

Why does cache key normalization improve CDN hit-ratios?

Cache key normalization improves CDN hit-ratios by standardizing request variations, ensuring that identical content requests retrieve from the cache rather than triggering a new fetch to the origin server.