This curriculum spans the technical and operational complexity of a multi-workshop integration program for global enterprises adopting Verizon’s CDN, covering configuration, security, and compliance tasks typically addressed in extended advisory engagements.
Module 1: CDN Architecture and Verizon’s Global Infrastructure
- Selecting optimal edge server locations based on real-time latency telemetry and regional user density patterns.
- Configuring multi-tier caching hierarchies (edge, regional, origin) to balance performance and cache hit ratios.
- Implementing anycast routing for DNS resolution and evaluating its impact on connection setup times.
- Integrating third-party monitoring tools with Verizon’s performance APIs to validate global PoP health.
- Assessing the trade-offs between shared and dedicated CDN infrastructure for compliance-sensitive workloads.
- Designing failover paths between Verizon CDN and secondary providers using DNS-based traffic steering.
Module 2: Content Ingestion and Origin Management
- Configuring origin shield settings to prevent traffic surges from overwhelming origin servers during cache misses.
- Establishing secure origin connections using mutual TLS and managing certificate lifecycle across multiple domains.
- Setting up dynamic origin selection based on geolocation or content type for multi-origin architectures.
- Optimizing large file upload workflows using Verizon’s Aspera integration for media ingest pipelines.
- Implementing origin request throttling to protect backend systems during flash traffic events.
- Validating origin health checks and adjusting timeout thresholds to reduce false-positive outages.
Module 3: Caching Strategy and Performance Optimization
- Defining cache key normalization rules to handle query string variations without sacrificing hit rates.
- Configuring time-based and event-driven cache purging for time-sensitive content updates.
- Using cache tags to manage content invalidation across related assets in complex publishing workflows.
- Implementing stale-while-revalidate policies to maintain availability during origin fetch delays.
- Adjusting TTLs based on content volatility and user access patterns using historical analytics.
- Enabling dynamic content caching for personalized responses while avoiding user data leakage.
Module 4: Security Configuration and Threat Mitigation
- Deploying DDoS protection rules at the edge with rate limiting thresholds tuned to application behavior.
- Configuring Web Application Firewall (WAF) policies to block OWASP Top 10 threats without breaking legitimate traffic.
- Managing SSL/TLS certificate provisioning and rotation across domains using automated workflows.
- Enforcing HTTP Strict Transport Security (HSTS) and managing preload list submissions.
- Implementing tokenized URLs for secure content access and setting token expiration policies.
- Reviewing and auditing edge ACLs to restrict access by IP, geography, or user agent patterns.
Module 5: Video Delivery and Adaptive Streaming
- Configuring origin storage and manifest handling for HLS and DASH streaming workloads.
- Optimizing segment caching behavior for live vs. on-demand video streams.
- Setting up Just-in-Time (JIT) packaging for secure multi-DRM delivery workflows.
- Monitoring video start time and rebuffering rates using Verizon’s Real User Monitoring (RUM) data.
- Integrating with client-side analytics SDKs to correlate CDN metrics with viewer QoE.
- Scaling edge capacity in advance of scheduled live events using traffic forecasting models.
Module 6: Analytics, Monitoring, and Troubleshooting
- Building custom dashboards using Verizon’s Insights API for traffic, cache efficiency, and error rates.
- Correlating edge logs with internal application logs to diagnose performance bottlenecks.
- Setting up alerting thresholds for sudden drops in cache hit ratio or increases in 5xx errors.
- Conducting forensic analysis of cache misses using detailed access logs and cache status codes.
- Exporting raw log data to SIEM systems for security incident investigations.
- Validating CDN configuration changes through controlled canary rollouts and A/B testing.
Module 7: Integration with DevOps and Automation
- Managing CDN configurations as code using version-controlled JSON templates and CI/CD pipelines.
- Automating domain provisioning and certificate binding using Verizon’s REST APIs.
- Integrating cache purge operations into deployment workflows for zero-downtime releases.
- Implementing role-based access control (RBAC) for CDN configuration changes across teams.
- Using infrastructure-as-code tools to replicate environments across staging and production.
- Auditing configuration drift by comparing deployed settings against source-of-truth repositories.
Module 8: Compliance, Governance, and Multi-Tenant Operations
- Mapping CDN data flows to meet GDPR, CCPA, and other regional data residency requirements.
- Enabling logging and audit trails for regulatory compliance reporting and third-party audits.
- Isolating configurations and access for multiple business units within a single enterprise account.
- Managing domain ownership verification and DNS delegation for large-scale domain portfolios.
- Enforcing content policies at the edge for prohibited file types or restricted geographies.
- Reviewing and updating SLA-aligned operational procedures for incident escalation and resolution.