Something went wrong. Try again.
[READ-ONLY] Mirror of https://github.com/openstatusHQ/openstatus. 🫖 Status page with uptime monitoring & API monitoring as code 🫖 openstatus.dev
bun drizzle-orm monitoring monitoring-as-code nextjs observability on-call open-source shadcn-ui status-page statuspage synthetic-monitoring tinybird turso uptime uptime-checker uptime-monitor
Something went wrong. Try again.
4.6 kB · 166 lines
TypeScript
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167import { getHeader } from "./get-header";
export const CDN_PROVIDERS = [ "cloudflare", "cloudfront", "fastly", "akamai", "vercel", "bunny", "netlify", "keycdn", "imperva", "sucuri", "azure-front-door", "google",] as const;
export type CdnProvider = (typeof CDN_PROVIDERS)[number];
export const CDN_LABELS: Record<CdnProvider, string> = { cloudflare: "Cloudflare", cloudfront: "Amazon CloudFront", fastly: "Fastly", akamai: "Akamai", vercel: "Vercel", bunny: "Bunny CDN", netlify: "Netlify", keycdn: "KeyCDN", imperva: "Imperva", sucuri: "Sucuri", "azure-front-door": "Azure Front Door", google: "Google Cloud CDN",};
export interface CdnDetection { provider: CdnProvider | null; /** header names (or `header: value` pairs) that matched */ evidence: string[];}
type Fingerprint = { provider: CdnProvider; headers?: string[]; /** presence-only signals too generic to be strong (e.g. `x-cache`) */ broadHeaders?: string[]; /** substring match against the given header's value (lowercased) */ contains?: { header: string; value: string; /** * broad signal shared with non-CDN infra (e.g. `via: 1.1 google` is also * sent by Google's load balancer/translate proxy): never matches on its * own — needs a strong signal or a second broad signal to corroborate */ broad?: boolean; }[];};
// ordered outermost-proxy first: when stacked (e.g. Cloudflare in front of// Vercel) the first match is the network that actually served the clientconst FINGERPRINTS: Fingerprint[] = [ { provider: "cloudflare", headers: ["cf-ray", "cf-cache-status"], contains: [{ header: "server", value: "cloudflare" }], }, { provider: "akamai", headers: [ "x-akamai-request-id", "x-akamai-transformed", "x-check-cacheable", ], contains: [{ header: "server", value: "akamaighost" }], }, { provider: "imperva", headers: ["x-iinfo"], contains: [{ header: "x-cdn", value: "incapsula" }], }, { provider: "sucuri", headers: ["x-sucuri-id", "x-sucuri-cache"], }, { provider: "fastly", headers: ["x-fastly-request-id", "fastly-debug-digest"], // `x-served-by: cache-` is a generic Varnish prefix and `x-cache`/`x-timer` // are shared cache headers: any one alone must not claim Fastly broadHeaders: ["x-cache", "x-timer"], contains: [ { header: "x-served-by", value: "cache-", broad: true }, { header: "via", value: "fastly" }, ], }, { provider: "cloudfront", headers: ["x-amz-cf-id", "x-amz-cf-pop"], contains: [{ header: "via", value: "cloudfront" }], }, { provider: "bunny", headers: ["cdn-pullzone", "cdn-requestid"], contains: [{ header: "server", value: "bunnycdn" }], }, { provider: "keycdn", contains: [{ header: "server", value: "keycdn" }], }, { provider: "azure-front-door", headers: ["x-azure-ref"], }, { provider: "google", headers: ["x-goog-cache-status", "x-google-cache-control"], contains: [{ header: "via", value: "1.1 google", broad: true }], }, { provider: "netlify", headers: ["x-nf-request-id"], contains: [{ header: "server", value: "netlify" }], }, { provider: "vercel", headers: ["x-vercel-id", "x-vercel-cache"], contains: [{ header: "server", value: "vercel" }], },];
export function detectCdn(headers: Record<string, string>): CdnDetection { for (const fingerprint of FINGERPRINTS) { const evidence: string[] = []; // a single broad signal (e.g. `via: 1.1 google`, `x-served-by: cache-`) // can't match alone — require a strong signal or two broad ones agreeing let strongMatches = 0; let broadMatches = 0;
for (const name of fingerprint.headers ?? []) { if (getHeader(headers, name)) { evidence.push(name); strongMatches++; } } for (const name of fingerprint.broadHeaders ?? []) { if (getHeader(headers, name)) { evidence.push(name); broadMatches++; } } for (const { header, value, broad } of fingerprint.contains ?? []) { const actual = getHeader(headers, header); if (actual?.toLowerCase().includes(value)) { evidence.push(`${header}: ${actual}`); if (broad) broadMatches++; else strongMatches++; } }
if (strongMatches > 0 || broadMatches >= 2) { return { provider: fingerprint.provider, evidence }; } }
return { provider: null, evidence: [] };}