AnycastEdge routes every request over BGP anycast to the nearest healthy point of presence — with edge compute, managed TLS, and DDoS mitigation built in.
fra1 · fra2 · lhr1 · lhr2 · ams1 · waw1 · mad1 · nyc1 · iad2 · ord1 · sfo3 · lax1 · yyz1 · gru1 · scl1 · jnb1 · nrt1 · sin1 · bom1 · syd1
One platform for routing, caching, compute, and security — provisioned in minutes, operated at global scale.
BGP anycast steers every request to the nearest healthy PoP automatically — no DNS geo-tricks required.
Static and dynamic content cached at the edge with fine-grained TTLs, instant purge, and origin shielding.
Run functions at every PoP — auth, transforms, personalization — with p95 cold starts of 4 ms on the edge-js@2 runtime.
Certificates issued and renewed automatically at every edge node, with modern cipher suites by default.
Volumetric and application-layer attacks absorbed across our full network capacity, always on.
Per-PoP traffic, cache ratio, and latency metrics streamed live, with sub-minute granularity.
No redirects, no geo-DNS lookups — BGP itself picks the shortest path.
A user's browser resolves anycastedge.duckdns.org and issues a request.
BGP anycast routes the packet to the closest of 120+ PoPs; cache hits return right there.
Misses fetch from your origin with origin shielding — over the shortest available AS path.
Onboarding is invite-only during the beta — requests are processed every Friday.