Cloud Shield / CDN connection
Application protection in your existing delivery path.
Your CDN distribution already describes how your application is delivered. Cloud Shield connects to that distribution so you can add application security from the same project, with a clear relationship between delivery and protection.
Capabilities
CDN connection in practice.
Select your distribution
Choose an existing Cloud CDN distribution in the project when adding protection in Cloud Shield.
Reuse delivery settings
Keep the distribution’s configured hostnames, origin servers, DNS routing and TLS certificates.
Manage protection separately
Review managed policies, rules and analytics in the protected-domain workspace while keeping delivery settings in Cloud CDN.
Configuration & visibility
Know where each setting belongs.
Delivery and security remain connected through the distribution, with clear places to manage each.
- Cloud CDN configuration
- Manage the distribution’s origins, hostnames, caching behavior and TLS certificates in Cloud CDN.
- Protected domains
- Review the application domains connected to Cloud Shield and open the security workspace for each domain.
- Security policies
- Configure managed protection, supported rules and response pages within Cloud Shield.
- Plans and usage
- Track Shield protected requests and domain allowances separately from CDN delivery usage and charges.
How it works
Connect delivery and protection in three steps.
- 01
Prepare the distribution
Create or select the Cloud CDN distribution that delivers your application, and verify its hostnames, origin connectivity and TLS configuration.
- 02
Attach Cloud Shield
Open Cloud Shield in the same project, choose the distribution and review the application you are enabling protection for.
- 03
Review the protected domain
Check the connection and protection status, review policy settings and use analytics to inspect requests reaching the application.
Cloud CDN is required and billed separately from Cloud Shield. Compare plans
Frequently asked questions
No. Cloud Shield attaches to an existing Cloud CDN distribution. Select the distribution for the application you want to protect.
Cloud Shield uses the hostnames, origins, DNS routing and TLS certificates already configured for the selected Cloud CDN distribution.
Cloud CDN and Cloud Shield have separate plans and usage allowances. Shield Basic includes 1 domain, Advanced includes 5, and Business includes 10. Additional Business domains cost €10 per domain per month.
Explore Cloud Shield