DNS + CDN + WAF — Open Stack

Your edge infrastructure.
Without the black box.

EmpireCDN is a managed DNS, CDN, and WAF platform built on open-source components you can audit. No 200-record zone cap. No opaque bot management. Pricing that doesn't punish growth.

Start free — 1 zone included Compare vs Cloudflare
CoreDNS 1.11.3 nameservers live at ns1/ns2.empirecloud.eliteaiempire.com — MVP in production
Platform

Everything you need to run your domains at the edge

Built on PowerDNS, nginx + GeoIP, ModSecurity OWASP CRS, and Let's Encrypt. Every component is open-source and auditable.

DNS

Authoritative DNS — no record cap

PowerDNS backend with AXFR secondary failover (Knot DNS). A/AAAA/CNAME/MX/TXT/SRV/CAA. No 200-record limit. Unlimited zones on paid plans.

CDN

GeoIP-routed CDN edge

nginx with ngx_http_geoip2_module routes traffic to the nearest origin. Ashburn + Falkenstein + GCP us-east day-1. Tokyo Phase 2.

WAF

OWASP WAF — detection or blocking

ModSecurity v3 + OWASP Core Rule Set v4. Detection-only on Free. Blocking mode + custom rules on Pro. Per-rule whitelist UI in dashboard.

SSL

Automatic TLS via Let's Encrypt

Wildcard certs per zone. Auto-renew. ACME multi-account rotation to stay under rate limits. Zero manual cert management.

CF

Cloudflare migration tool

Paste your CF zone ID + token. We bulk-import all records and page rules into EmpireCloud, then swap NS last. 24-hour parallel safe-mode before cutover.

Analytics

Request analytics & cache hit rate

Per-zone: request volume, bandwidth, cache hit rate, top URLs, top error codes, WAF block events. 30-day retention on Pro.

Auth

Empire-Auth SSO integration

Log in with the same account as EmpireGit and other Empire tools. SAML/OIDC for Enterprise. Powered by self-hosted Authentik.

API

Full REST API + Terraform

Manage zones, records, cache rules, WAF toggles, and SSL certs programmatically. Same API surface the dashboard uses. No vendor lock-in.

Pricing

Transparent pricing. No per-seat surprises.

Pay per zone. No bandwidth overages on Free. Pro zones include 100 GB/mo bandwidth included.

Free
$0 /mo
1 zone. Forever free. No credit card.
  • + 1 zone
  • + Unlimited DNS records
  • + CoreDNS authoritative
  • + WAF detection mode
  • + 100K requests/mo included
  • + 7-day analytics
  • + Community support
Get started
Most popular
Pro
$10 /zone/mo
Everything in Free + WAF blocking, full analytics, priority support.
  • + Unlimited zones
  • + Unlimited DNS records
  • + PowerDNS authoritative + AXFR failover
  • + WAF blocking + custom rules
  • + 5M requests/mo per zone
  • + 100 GB bandwidth/mo per zone
  • + 30-day analytics retention
  • + GeoIP CDN routing
  • + Email support (24h SLA)
  • + CF migration tool
Start Pro trial
Team
$25 /zone/mo
For agencies and teams managing multiple customer domains.
  • + Everything in Pro
  • + Multi-user access per zone
  • + 25M requests/mo per zone
  • + 500 GB bandwidth/mo per zone
  • + 90-day analytics
  • + Audit log export
  • + Slack/webhook alerts
  • + Priority email support (4h SLA)
Contact sales
Enterprise
Custom
Dedicated nodes, SLA-backed uptime, SAML SSO, custom contracts.
  • + Everything in Team
  • + Dedicated edge nodes
  • + 99.99% uptime SLA
  • + SAML/OIDC SSO
  • + Custom WAF ruleset
  • + DDoS protection add-on
  • + 1-year analytics
  • + Dedicated Slack channel
  • + Phone support
Talk to us
Open Stack

No vendor lock-in. Every component auditable.

EmpireCDN is built on battle-tested open-source software. You can inspect every component, self-host the stack, or migrate away at any time.

CoreDNS 1.11.3 PowerDNS 4.9+ Knot DNS (AXFR secondary) dnsdist (LB + DoT/DoH) nginx + ngx_http_geoip2 ModSecurity v3 OWASP CRS v4 MaxMind GeoLite2 Let's Encrypt + ACME Postgres 16 Flask control plane Next.js dashboard Authentik SSO Stripe billing