--- title: "Creating a CDN resource" description: "How to plan and create a CDN resource: domains and aliases, origins and origin groups, standard versus video delivery, and the limits to design around before you configure." url: "https://adultinfra.com/docs/cdn/create-a-resource/" dateModified: "2026-09-12" --- [Home](https://adultinfra.com/) / [Docs](https://adultinfra.com/docs/) / Delivery and CDN # Creating a CDN resource How to plan and create a CDN resource: domains and aliases, origins and origin groups, standard versus video delivery, and the limits to design around before you configure. LAST REVIEWED 2026-09-13 ON THIS PAGE - [Domains and aliases](https://adultinfra.com/docs/cdn/create-a-resource/#domains-and-aliases) - [Origins and origin groups](https://adultinfra.com/docs/cdn/create-a-resource/#origins-and-origin-groups) - [Standard versus video resources](https://adultinfra.com/docs/cdn/create-a-resource/#standard-versus-video-resources) - [What to decide before configuring](https://adultinfra.com/docs/cdn/create-a-resource/#what-to-decide-before-configuring) - [Resource limits](https://adultinfra.com/docs/cdn/create-a-resource/#resource-limits) - [Where AdultInfra fits](https://adultinfra.com/docs/cdn/create-a-resource/#where-adultinfra-fits) A **CDN resource** is the unit that binds domains to origins and defines every delivery behaviour downstream: caching, access, headers, TLS, and logging. Creating one is mostly a planning exercise: decide the model first, then the configuration follows. This page covers the decisions that are expensive to change later. Read [CDN overview](https://adultinfra.com/docs/cdn/cdn-overview/) first if you are choosing a delivery mode. ## Domains and aliases A resource has one primary domain and any number of **aliases**: additional hostnames that serve the same configuration and cache. Group hostnames into one resource only when they should share cache entries, headers, and access policy. - Keep a dedicated certificate per brand. A shared certificate can leak one property’s identity into another’s. - Force HTTPS and set the minimum acceptable TLS version; modern clients negotiate HTTP/2 and HTTP/3 automatically. - If two properties must not share cache or logs, give them separate resources even when they share an origin. - Plan `www` and bare-domain aliases deliberately. A redirect at the edge is cheaper than a second cache entry. ## Origins and origin groups An origin is where the edge fetches on a miss. Point at a single origin, or define an **origin group** with a primary and one or more backups so a failing origin is not a viewer-facing outage. For adult platforms the common patterns are: Origin pattern Use case Notes Object storage Packaged media, originals, derivatives Cheap, durable; treat as the canonical copy Private origin Application/API and protected media Must only accept edge addresses Origin group Deploys, storage migrations, DR Primary plus warm standby Keep origins private. If an origin is reachable from the public internet, viewers can bypass caching, access control, and edge security entirely. Use allow-lists, mutual TLS, or a private link between edge and origin, and rotate credentials on the origin rather than embedding them in URLs. ## Standard versus video resources The two resource types differ in how they handle byte ranges, manifests, and large objects. - **Standard delivery** serves websites, APIs, thumbnails, and prepared downloads. It optimises small-object caching and header/security policy. - **Video delivery** is built for HLS, DASH, MP4, and FLV: it honours byte ranges end to end, caches segments and manifests intelligently, and protects origin from seek-heavy traffic. See [Adult video CDN](https://adultinfra.com/adult-video-cdn/). Most platforms run several resources: one for the portal and API on standard delivery, one or more for video, and separate resources for anything that needs different access or caching rules. Do not put cacheable media and uncacheable API responses behind one resource. ## What to decide before configuring - **Traffic class:** website/API, prepared video, live, or mixed. - **Domain set:** primary plus aliases, and which certificate each needs. - **Origin architecture:** single, group, or object storage, and how it is locked down. - **Cache strategy:** cacheable bytes, TTLs, and key composition. See [Cache control and cache keys](https://adultinfra.com/docs/cdn/cache-control/). - **Access model:** public, signed, token-gated, or geo-restricted. See [Secure token and signed access](https://adultinfra.com/docs/cdn/secure-token/). - **Failure behaviour:** origin failover and request collapsing. See [Origin shielding and failover](https://adultinfra.com/docs/cdn/origin-shielding/). - **Observability:** logs to export and metrics to alert on. ## Resource limits Design within the platform’s per-resource limits rather than discovering them in production: - **Aliases per resource** are bounded; split into multiple resources when you exceed the practical hostname count. - **Origins per group** are bounded; use weighted groups and health checks rather than an unbounded origin list. - **Header size and count:** custom request and response headers count against a fixed budget. - **Rule and policy counts:** caching, access, and header rules per resource are limited; consolidate overlapping rules. - **Certificate coverage:** each alias must be covered by a certificate the resource serves. If a planned resource would exceed a limit, split by concern (media vs API, brand vs brand) rather than stretching one resource. ## Where AdultInfra fits AdultInfra provisions and tunes these resources for adult workloads (range-heavy seeking, volatile live concurrency, and origin-egress cost) and can validate the design on a controlled slice before a full migration. Bring one hostname and the metric you want to improve and [talk to us](https://adultinfra.com/contact/). **Need this configured for your platform?** [Get a test plan](https://adultinfra.com/contact/) and an engineer will map the resource, cache, and delivery design to your workload. ```json {"@context":"https://schema.org","@graph":[{"@type":"TechArticle","headline":"Creating a CDN resource","description":"How to plan and create a CDN resource: domains and aliases, origins and origin groups, standard versus video delivery, and the limits to design around before you configure.","url":"https://adultinfra.com/docs/cdn/create-a-resource/","dateModified":"2026-09-13","keywords":"create CDN resource, CDN origin group, CDN domain alias, video CDN resource, adult CDN setup","author":{"@id":"https://adultinfra.com/#organization"},"publisher":{"@id":"https://adultinfra.com/#organization"},"inLanguage":"en"},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://adultinfra.com/"},{"@type":"ListItem","position":2,"name":"Documentation","item":"https://adultinfra.com/docs/"},{"@type":"ListItem","position":3,"name":"Creating a CDN resource","item":"https://adultinfra.com/docs/cdn/create-a-resource/"}]}]} {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://adultinfra.com/#organization","name":"AdultInfra","url":"https://adultinfra.com","logo":"https://adultinfra.com/favicon.svg","description":"Luxembourg-based specialist infrastructure for adult platforms.","slogan":"Already behind the adult internet.","areaServed":"Worldwide","knowsAbout":["Adult video CDN","Porn tube site infrastructure","Adult live-cam streaming","Creator subscription platforms","Byte-range video caching","Origin shielding","Player quality of experience","DDoS protection","GPU infrastructure","Adult-capable AI inference"],"location":{"@type":"Place","name":"Luxembourg","address":{"@type":"PostalAddress","addressCountry":"LU"}},"contactPoint":{"@type":"ContactPoint","contactType":"sales","url":"https://adultinfra.com/contact/"}},{"@type":"WebPage","@id":"https://adultinfra.com/docs/cdn/create-a-resource/#webpage","url":"https://adultinfra.com/docs/cdn/create-a-resource/","name":"Creating a CDN resource","description":"How to plan and create a CDN resource: domains and aliases, origins and origin groups, standard versus video delivery, and the limits to design around before you configure.","isPartOf":{"@id":"https://adultinfra.com/#website"},"about":{"@id":"https://adultinfra.com/#organization"},"primaryImageOfPage":{"@type":"ImageObject","url":"https://adultinfra.com/og-default.png"},"inLanguage":"en","mainEntity":{"@id":"https://adultinfra.com/docs/cdn/create-a-resource/#article"},"dateModified":"2026-09-13"},{"@type":"WebSite","@id":"https://adultinfra.com/#website","url":"https://adultinfra.com","name":"AdultInfra","description":"Luxembourg-based specialist infrastructure for adult platforms.","publisher":{"@id":"https://adultinfra.com/#organization"},"inLanguage":"en","potentialAction":{"@type":"ContactAction","target":"https://adultinfra.com/contact/"}}]} ```