Release day is a read storm. A single origin disk will saturate before 210+ caches would. Version the filename, cache for a long time, shield first-byte, and token-protect anything that should not be public.
Versioned objects skip purge
app-1.4.2.exe never needs invalidation. latest.exe does. Prefer hashes in the name and a tiny pointer file with a short TTL or purge.
Large-file optimisation
Cloud CDN is built for large objects on a 200+ Tbps network — installers, zips, datasets, game depots — not only website assets.
Range requests and resumes
Download managers will request ranges. Validate a large test object through the distribution before launch day.
Do not Brotli a zip
Leave already-compressed binaries alone. Brotli and Gzip are for text. Recompressing a zip wastes CPU and can hurt.