Easily compare CloudFront and Imperva for POP locations, products, pricing, features & support. We hope this helps you better understand the similarities and differences between these content delivery networks.
Company
| Company | CloudFront | Imperva |
|---|---|---|
| Short profile | CloudFront is the CDN of AWS (Amazon Web Services), the world's largest cloud services provider. CloudFront offers a mature set of content delivery products and has a big network of POPs on many continents. Solid documentation and APIs make CloudFront a developer-friendly CDN. | Imperva's CDN (formerly Incapsula) makes your websites and applications faster, more reliable and safer. A global network of servers provides content caching, load balancing and failover, while an enterprise-grade cloud web application firewall and DDoS protection safeguard your site from the latest threats. |
Products
| Product | CloudFront | Imperva |
|---|---|---|
| Dynamic content deliveryNon-cacheable content delivery. User login, shopping cart ... | Dynamic Content Delivery | Content Delivery Network |
| Small file deliveryStatic object delivery; caching of small files (file size <1 MB) | Content Caching | |
| Large file deliveryStatic object delivery; caching of large files (file size >1 MB) | ||
| Live videoDelivery of live video. RTMP? Transcoding/transmuxing? | Streaming Media | |
| Video on demandDelivery of on demand video | ||
| Image OptimizationAutomatic image transformation/compression/optimization | Image Compression | |
| DNSAuthoritative DNS for customer domain | AWS Route53 |
Name Server (NS) Protection
Name Server (NS) Protection is a secure proxy in front of your authoritative DNS
|
| WAFWeb Application Firewall | AWS WAF | Web Application Firewall |
| Anti-DDoSDDoS attack protection. Specific product(s) for this. | AWS Shield | DDoS Protection |
| Private CDNDedicated edge resources & custom configs | ||
| Edge ComputeRun your code on CDN edge servers | Lambda@Edge |
Network
How many POP locations do CloudFront and Imperva have in different parts of the world?
| Region | CloudFront | Imperva |
|---|---|---|
| North America | 19 | 12 |
| Latin America | 7 | 5 |
| Europe | 31 | 12 |
| Russia & CIS | 0 | 0 |
| Asia excl. China | 18 | 12 |
| China | 4 | 0 |
| Oceania | 5 | 3 |
| Middle East | 4 | 3 |
| Africa | 4 | 2 |
Pricing
| Pricing & contract duration | CloudFront | Imperva |
|---|---|---|
| Minimum contract term | None | Unknown |
| Minimum monthly costs | None | Unknown |
| Requests costsCustomers pay for client to CDN requests | $0.0075 - $0.022 per 10k requests | Unknown |
| Ingress costsCustomers pay for origin-to-CDN bytes transferred | $0.02 - $0.16 per GB (free if origin is AWS) | Unknown |
| NA/EU traffic (low volume) | $0.085 per GB | Unknown |
| APAC traffic (low volume) | $0.12 per GB (India: $0.109) | Unknown |
| LATAM traffic (low volume) | $0.11 per GB | Unknown |
Features
| Web acceleration | CloudFront | Imperva |
|---|---|---|
| Instant setupSign up, configure, start testing. | ||
| Change propagation delayHow fast do config changes propagate to all POPs? | ~10 minutes | Instant |
Apex/root domain OK  No performance degradation when using http(s)://domain.com |
Only if used together with AWS Route53 | Anycasted network (regional) |
| HTTP/2 | HTTP/2 announcement (Sep 2016) | FAQ |
| HTTP/3 | HTTP/3 announcement | |
| WebSockets | Using WebSockets with CloudFront distributions | WebSockets docs |
| IPv6Do the edge servers have IPv6? | IPv6 support announcement (Oct 2016) | IPv6 support |
| Compression Reduce file size for faster delivery |
Resend from origin, or compress on edge
CloudFront can compress many content types on the edge and supports Brotli
|
Compress on the edge |
| Origin pull - protocolHTTP only or HTTPS possible too? | HTTP and HTTPS |
HTTP and HTTPS.
Can be IP address
|
| Origin pull - Host headerUse client > edge value? Set specific value? | Can't configure specific other Host header |
Can configure specific other Host header.
Forward client request Host header is possible
|
| Origin ShieldOne POP pulls from origin, other POPs pull from the shield POP | Origin Shield docs | |
| Waiting RoomDuring peak traffic, route users to a virtual waiting room | Virtual Waiting Room on AWS | Waiting Room |
| Push / uploadStore your content directly on CDN, no customer origin | ||
| Cache control - CDN caching | Granular control/override rules possible | |
| Cache control - client caching | Granular control/override rules possible | |
| Serve Stale CDN serves cached but expired content in case origin is in trouble |
Supports Cache-Control extensions | |
| Purge Invalidate or delete cached objects on CDN |
Purge Speed | Instant |
| Purge - capabilities | Purge all and by directory/file type (wildcards) | Purge all, by directory, by file extension, by tag(s) |
| Analytics | Amazon CloudFront Reports & Analytics | Real time perf and security events dashboard |
| Log files |
Only delivered to S3
CloudFront delivers access logs for a distribution up to several times an hour
|
Available via UI, API, or full SIEM integration
Logs are not delayed
|
| API | Purge, analytics, configuration | Purge, analytics, configuration |
| HTTPS & Content Protection | CloudFront | Imperva |
|---|---|---|
| CDN domain HTTPSUse the CDN's domain, like cloudfront.net | Free (not SNI) | CDN and SSL/TLS |
| Customer domain HTTPSYour domain in the CDN's certificate | ||
| Customer cert HTTPSYour certificate on the CDN | Free (SNI) or $600/m for non-SNI | |
| Token authentication | Serving Private Content through CloudFront | Via authentication header |
| Geo blocking | Restricting the Geographic Distribution of Your Content | |
| Hotlink protectionThird parties cannot deeplink to your content | Use AWS WAF for Referer Checking | |
| Basic authenticationUser logs in on the CDN to get content | Two Factor Authentication | |
| IP white/blacklisting | Use AWS WAF to Block IP Addresses | IP address/ranges/subnets, self-service in UI |
Support
| Customer support | CloudFront | Imperva |
|---|---|---|
| Documentation | Yes, public. API docs | Yes, public |
| Humans | Community support is free. Email and phone support (AWS Support) available at extra costs | Imperva’s team of support engineers deliver technical assistance 24x7x365 via phone, email, or online via the self service portal |