Find answers, guides, and tutorials to supercharge your content delivery.

Zone Settings

Updated on October 4, 2018

KeyCDN's Zones come with a number of configurable Zone settings. Here is a list and description of the CDN features for both Push and Pull Zones:

Image Processing

Image Processing transforms and optimizes images with simple URL parameters.

Force Download

Forces files to download instead of opening (Content-Disposition header).


Enables cross-origin resource sharing (CORS). This will set the header to: Access-Control-Allow-Origin "*". Make sure this option is enabled if you are using resources such as fonts, CSS files, icons, etc from another domain.


Enables Gzip compression on: text/plain, text/css, text/js, text/javascript, text/xml, text/x-component, application/json, application/x-javascript, application/javascript, application/xml, application/xml+rss, application/atom+xml, application/xhtml+xml, image/svg+xml, font/ttf, font/eot, font/otf.


Adding or modifying the Expires and Cache-Control response header fields that are sent to the client if the response code equals 200, 201, 204, 206, 301, 302, 303, 304, or 307. This setting overwrites the value received from the origin in case of a Pull Zone. The expire value only has an impact on the web browser cache and not on the KeyCDN cache.

  • -1: Cache-Control: no-cache
  • 0: Push Zone: disabled
    Pull Zone: as received from the origin (header honoring)
  • >0: Cache-Control: max-age=t, where t is the time specified in the directive in minutes converted to seconds

Block Bad Bots

Block bad bots draining your credits. Bad bots HTTP response code is 451.

Allow Empty Referrer

This directive is only relevant if you are using Zone Referrers. It allows you to specify if you want to allow empty referrers or not.

Secure Token

Restrict access to all the files within this Zone by secure access tokens. This defines a time interval for which the specified Zone URLs should be accessible. Once it expires, the URLs will return a 403 error.

Shared SSL

Enables the wildcard certificate for this Zone (https://*

Custom SSL

Custom SSL is fully supported (also known as private SSL). They reflect one or more Zone Aliases. (e.g.:

Let's Encrypt SSL

Automatically creates a certificate for your Zone Alias (limited to only one Zone Alias), e.g.

Force SSL

Redirects HTTP requests to HTTPS. Returns a 301 Moved Permanently.

KeyCDN uses cookies to make its website easier to use. Learn more about cookies.