[
{
"feature": "Service name",
"category": "General",
"aws": "Amazon CloudFront",
"azure": "Azure CDN",
"gcp": "Cloud CDN"
},
{
"feature": "PoP count",
"category": "General",
"aws": "~600+ edge locations across 100+ cities",
"azure": "~180 PoP locations across 65+ metro areas",
"gcp": "~180+ edge caching locations worldwide"
},
{
"feature": "Geo-restriction",
"category": "General",
"aws": "Built-in geo-restriction by country allowlist/denylist",
"azure": "Geo-filtering rules by country/region codes",
"gcp": "Cloud Armor geo-based access policies"
},
{
"feature": "HTTP/2 support",
"category": "Protocol Support",
"aws": "Enabled by default on all distributions",
"azure": "Supported on Standard and Premium profiles",
"gcp": "Enabled by default on all load-balanced backends"
},
{
"feature": "HTTP/3 (QUIC) support",
"category": "Protocol Support",
"aws": "Supported; enable per-distribution via policy",
"azure": "Preview support on Azure Front Door",
"gcp": "Supported natively via QUIC on global load balancer"
},
{
"feature": "WebSocket support",
"category": "Protocol Support",
"aws": "Supported via CloudFront distributions",
"azure": "Supported on Azure CDN Standard/Premium and Front Door",
"gcp": "Supported through global external Application Load Balancer"
},
{
"feature": "Custom SSL",
"category": "Protocol Support",
"aws": "Free ACM certificates; SNI and dedicated IP options",
"azure": "Free managed certificates; BYOC via Key Vault",
"gcp": "Google-managed SSL certificates; self-managed upload supported"
},
{
"feature": "WAF integration",
"category": "Security",
"aws": "AWS WAF with managed rule groups and custom rules",
"azure": "Azure WAF on Front Door and CDN with OWASP rulesets",
"gcp": "Cloud Armor with preconfigured WAF rules and adaptive protection"
},
{
"feature": "DDoS protection",
"category": "Security",
"aws": "AWS Shield Standard (free); Shield Advanced for enhanced protection",
"azure": "Azure DDoS Protection Basic (free); Standard tier available",
"gcp": "Cloud Armor DDoS protection included; Managed Protection Plus available"
},
{
"feature": "Origin shield",
"category": "Caching & Performance",
"aws": "CloudFront Origin Shield: additional caching layer to reduce origin load",
"azure": "Origin shielding available on Azure Front Door Premium",
"gcp": "Origin-fill optimization with Cloud CDN cache hierarchy"
},
{
"feature": "Dynamic content acceleration",
"category": "Caching & Performance",
"aws": "Optimized TCP and TLS connections; persistent origin connections",
"azure": "Dynamic site acceleration (DSA) profile with route optimization",
"gcp": "Dynamic compression and Cloud CDN cache modes for dynamic content"
},
{
"feature": "Real-time logs",
"category": "Caching & Performance",
"aws": "Real-time logs to Kinesis Data Streams; standard logs to S3",
"azure": "Diagnostic logs to Log Analytics, Storage, or Event Hubs",
"gcp": "Cloud Logging integration with per-request log entries"
},
{
"feature": "Cache purge",
"category": "Caching & Performance",
"aws": "1,000 free invalidation paths/month; $0.005 per additional path",
"azure": "Unlimited cache purge at no extra cost",
"gcp": "Cache invalidation at no additional cost"
},
{
"feature": "Edge compute",
"category": "Edge Compute",
"aws": "Lambda@Edge and CloudFront Functions for request/response manipulation",
"azure": "Azure Functions and Front Door Rules Engine for edge processing",
"gcp": "No native edge compute equivalent; use Cloud Run or Cloud Functions at region level"
},
{
"feature": "Pricing model",
"category": "Pricing",
"aws": "Per-request + per-GB data transfer out (tiered by region)",
"azure": "Per-GB data transfer out (varies by profile tier and region)",
"gcp": "Per-GB data transfer out + per-cache-fill from origin"
},
{
"feature": "Cost per GB (first 10 TB)",
"category": "Pricing",
"aws": "$0.085/GB (US/EU); varies by region",
"azure": "Varies by profile: ~$0.081/GB (Standard Microsoft); varies by tier",
"gcp": "$0.08/GB (North America); varies by region"
}
]