What changed

Two new nodes in Europe: Strasbourg and a second one in Milan

0.13.4 · November 3, 2026

The network goes from eleven to thirteen nodes, ten in Europe: Strasbourg (SBG) and Milan 2 (MI2). They come with every plan.

• new — SBG node in Strasbourg and MI2 in Milan: they serve every site, on any plan. They are in the European Union, so they also count for «EU nodes only» zones.

Purge and refill

0.13.3 · November 1, 2026

After a purge the nodes can request the pages right away: the first visitor finds them already cached instead of waiting for the server.

• new — API: POST /api/v1/pullzones/{id}/purge accepts {"urls": [...], "refill": true}. Each node purges the addresses and requests them from itself at once, one every half second, at most 300 queued. These requests do not count as traffic.
• new — WordPress plugin 1.2.0: «Ricarica subito le pagine svuotate» (on by default), wp 1primecdn warm --recent=<n> to prewarm the home page and the latest posts, and after a full purge it reloads the home page and the latest 30 posts on its own.

Analytics cookies and page caching

0.13.2 · November 1, 2026

A pull zone can let only login cookies skip the cache: visitors with Google Analytics or consent-banner cookies still get the page from the nodes.

• new — Pull Zone → Cache: «Skip the cache only for login cookies». Only WordPress logins, the WooCommerce cart, password-protected pages and PHP sessions count; other cookies (_ga, banners) do not. Off by default.
• improved — WordPress plugin 1.1.0: «Prepara la pull zone per WordPress» turns this option on too. API: {"cache": {"sessionCookiesOnly": true}}.

WordPress plugin

0.13.1 · November 1, 2026

With the 1PrimeCDN plugin the pages of a WordPress site stay cached on the nodes and are purged on their own when you publish or edit a post.

• new — WordPress plugin (pannello.1primecdn.com/1primecdn-wordpress.zip): cache headers for visitors who are not logged in, automatic purge of the post, home page, categories, tags, feeds and archives, buttons in the admin bar and WP-CLI commands.
• new — The plugin checks the pull zone and prepares it for WordPress with one click: durations decided by the site and URL parameters taken into account, so search never gets the wrong page.
• new — API: pull zones report their cache rules (cache) and PATCH /api/v1/pullzones/{id} accepts {"cache": {"edgeTtl", "browserTtl", "ignoreQuery"}}.

DNS API

0.13.0 · October 23, 2026

DNS zones can now be managed from other panels too, with the account's API key: list the zones, read, add, edit and delete records.

• new — DNS API: GET /api/v1/dns/zones, GET and POST /api/v1/dns/zones/{zone}/records, GET, PUT and DELETE /api/v1/dns/zones/{zone}/records/{id}. The zone can be given by id or by domain; the same rules as the panel apply and every change is published at once.
• new — KoaPanel: «Connect 1PrimeCDN» with the API key shows your zones and manages their records.

Degraded nodes that stop responding

0.12.10 · October 21, 2026

A node in the «degraded» state that goes silent now shows as offline, as already happened for online nodes.

• fixed — Dashboard, Infrastructure and status page: a degraded node with no news for more than 2 minutes shows as offline instead of staying «degraded».

New node in Sydney, Australia

0.12.9 · October 20, 2026

The network goes from ten to eleven nodes: Sydney (SYD) is the first in Oceania. Like Mumbai and Beauharnois, it is part of the Global network.

• new — SYD node in Sydney (Australia): with the Global network on, visitors from Australia and New Zealand are served from there instead of from Mumbai or Europe. Without the add-on it does not receive your sites' configuration.
• improved — Billing and manual: the Global network description now mentions Sydney and Oceania too.

New node in Beauharnois, Canada

0.12.8 · October 19, 2026

The network goes from nine to ten nodes: Beauharnois (BHS) is the first in North America. Like Mumbai, it is part of the Global network.

• new — BHS node in Beauharnois (Canada): with the Global network on, visitors from North America are served from there instead of from Europe. Without the add-on it does not receive your sites' configuration.
• improved — Billing and manual: the Global network description now mentions Beauharnois and North America too.

Sign-up with VAT number and SDI code

0.12.7 · October 17, 2026

New accounts give their VAT number and SDI code (or PEC) straight away, so e-invoices start with the right details. They can be changed in Billing.

• new — Sign-up: VAT number required (Italian with its check digit, or foreign with the country prefix) and an optional SDI code or PEC; without one, the invoice goes to the tax drawer.
• new — Billing → Billing details: company name, VAT number and SDI code or PEC, editable by the account owner. They also appear on the monthly statement.
• fixed — Removed the automatic top-up switch from Billing: it saved the settings but nothing charged the card. It will come back when payments with a saved card are live.

Security: the countries map

0.12.6 · October 17, 2026

The Countries tab has a world map: you see at a glance what is free, challenged or blocked, and change it with a click.

• new — Security → Countries: a map with free, challenged (yellow) and blocked (red) countries; those in the risk groups that are still free have a light orange tint. Hovering over a country shows its name and state; a click moves the state on like the chips below (free → challenge → blocked → free), for the zone chosen in the menu.
• improved — This map can be zoomed too, with the scroll wheel, a double click, two fingers or the + and − buttons, handy for small countries.

Network map: each node's traffic

0.12.5 · October 17, 2026

On the Infrastructure map the arrows between nodes are gone: traffic does not travel from one node to another. In their place, waves that grow with the traffic each node serves.

• improved — Infrastructure: around every node, waves that are larger and thicker the more traffic it served over the last 7 days (the whole network for staff, your own sites for customers). The hover name and the node's details show how many GB and what share.
• fixed — Removed the arrows between nodes: they were decorative and suggested traffic between nodes that does not exist.

Zoom on the network map

0.12.4 · October 16, 2026

The Infrastructure map can be zoomed in: handy to tell the European nodes apart, since they are close together.

• new — Infrastructure: zoom with the scroll wheel (around the pointer), with a double click, with two fingers on phones or with the + and − buttons; once zoomed in, drag the map to move around, and the corners button goes back to the whole map.
• improved — In a node's details the continent is written in full.

Nodes: no more pointless nginx reloads

0.12.3 · October 16, 2026

Nodes reloaded nginx 80-120 times an hour even when the configuration had not changed: the list of the other nodes arrived in a different order every time.

• fixed — The panel read the nodes without an order, and the database returns them in the physical order of the rows, which changes at every update of the last contact, that is at every request from a node. To the agent it looked like a new configuration: it rewrote the files and reloaded nginx. Now nodes, zones, names and Shield rules always come out in the same order.
• fixed — Agent 0.11.2: it sorts peers, zones, names and allowed or blocked addresses itself before comparing the configuration, so a difference in order alone no longer reloads nginx, even with an older panel.

Network map: name on hover, details on click

0.12.2 · October 16, 2026

On the Infrastructure map every node shows its name when you hover over it and opens its details when you click it.

• improved — Infrastructure: hovering over a node shows its name and flag; clicking it (or Enter on the keyboard, or a tap on phones) opens its details with status, provider, network and last contact.
• fixed — On the map some nodes had a name and others did not, because nearby labels would have overlapped: now there are no fixed labels, the name comes on hover.

Infrastructure with the night map

0.12.1 · October 16, 2026

The network page has its own map: a night map, with glowing nodes and the links between them.

• improved — Infrastructure: a full-width map on a dark background, with animated arcs between nodes, pulsing nodes and, at the top, how many nodes, countries and continents the network has.
• improved — Flags next to every node in the list and coloured cards for the network's numbers.

A new panel, dark theme included

0.12.0 · October 16, 2026

A redesigned panel: gradients, new icons, illustrations and a dark theme, switched on with the moon at the top.

• new — Dark theme: the moon button at the top switches it on, the sun switches it off. The panel remembers your choice; if you never chose, it follows your computer's or phone's theme.
• new — Dashboard: at the top, a globe with our real nodes and the links between them, numbers on coloured cards that count up to their value, illustrated tiles for Edge Storage, Images and Shield.
• improved — New icons across the panel, and flags next to the network's nodes.
• improved — On phones the menu opens from the button at the top left: before, under 800 pixels, the only way to change page was typing the address.
• improved — All drawn by the panel itself, with no images to download and no new libraries; with «reduce motion» on in your system the animations switch off.

Nodes learn their own address from the panel

0.11.3 · October 16, 2026

Each node's public address now comes from the panel instead of being guessed on the node: on a node behind NAT the guessed address was the outgoing one, which is wrong.

• fixed — The node takes its public address from the panel (agent 0.11.1, Shield 0.5.1). Before, the installer asked an external service, which on nodes behind NAT returns the outgoing address: certificates, performance measurements and Shield's always-allowed IPs started from the wrong number.
• improved — Node installation accepts the public address as an optional argument and, if the node is already registered, reads it from the panel.

Edge Storage and Images get their own page

0.11.2 · October 16, 2026

The two menu items marked «SOON» finally lead to the real features, which have been there since 0.10.0.

• new — Edge Storage: all your storage zones on one page, with files, space used against your plan's and traffic served. «New storage zone» opens the creation form with the type already chosen.
• new — Images: which zones have on-the-fly images switched on, how to use them (?w, ?q, ?f) and the link to switch them on.
• fixed — The Pull Zone page was stuck in a redirect loop and would not open: fixed.

A livelier panel

0.11.1 · October 16, 2026

Light animations across the panel: pages appear block by block, numbers count up to their value, charts draw themselves. If you asked your system for less motion, you won't see them.

• improved — Pages appear one block after another, statistics count up to their value, the bandwidth chart draws from the left and bars grow.
• improved — In the side menu the highlight slides to the chosen item; a thin bar at the top shows the page is on its way, and while it loads you see a skeleton of the page.
• improved — Buttons, switches, tabs, table rows and fields respond to the mouse and to the keyboard, with the same focus ring everywhere.
• improved — On phones: the top bar fits the screen, statistics are readable and the dashboard's bandwidth chart goes full width.
• improved — All in CSS, no new libraries: nothing extra to download. With «reduce motion» on in your system, the animations switch off.

Firewall with managed rules

0.11.0 · October 16, 2026

A WAF on the nodes that stops the most common attempts (traversal, SQL injection, XSS, scanners) by looking at the address, headers and method. You switch it on zone by zone, first in log-only mode.

• new — Security → Firewall: for each Pull Zone choose Off, Log only (notes suspicious requests without stopping them) or Block (403 error).
• new — Eight rule families, which you can exclude one by one if they stop a real visitor: paths outside the folder, files that are never served, SQL injection, XSS, command execution, Log4Shell and Shellshock, vulnerability scanners, unused HTTP methods.
• new — Also from the API: PATCH /api/v1/pullzones/ID with wafMode (off, registro, blocco) and wafSkip (the families to exclude).
• security — Stated limit: the rules look at the address, headers and method, not the body of POST requests, and they are not the OWASP CRS rules. IPs under «Always allow» still pass; service zones are not touched.
• improved — Node agent 0.11.0: if the configuration with the WAF fails nginx's check, the agent falls back to the one without the WAF by itself instead of leaving the node stopped.

Access log: your site's logs, to download

0.10.1 · October 16, 2026

One row for every request served by the nodes, one file per day, downloadable from the panel or the API. You switch it on site by site.

• new — Access log (Pull Zone → Access log): date and time, IP address, address requested, outcome, bytes, cache, the node that answered, country, referrer and browser. One file per day, compressed, one JSON row per request.
• new — Download it from the panel or the API: GET /api/v1/logs/ZONE_ID for the days available, with ?day=YYYY-MM-DD to fetch the file.
• new — It is off by default and you switch it on yourself, site by site, because those rows contain visitors' IP addresses. They are kept for 7 days and then deleted on their own; switch it off and the rows already collected are deleted at once, all of them.
• improved — Node log rows now carry the referrer as well: where the visitor came from.

Edge Storage and path rules

0.10.0 · October 15, 2026

Two things that were missing: keeping your files with us, without a server of your own, and making the cache behave differently inside one part of a site.

• new — Edge Storage: create a storage Pull Zone and upload files from the panel or the API. You need no origin server: we keep the files, in the European Union and inside the nightly backup, and the nodes serve them. Included: 1 GB pay-as-you-go, 2 GB with Start, 10 with Scale, 25 with Unlimited.
• new — Images on the fly work on storage files too: ?w=800 and ?f=webp behave exactly as on your own server. On a 101 KB PNG: 1 KB in WebP at 300 pixels.
• new — Path rules (Pull Zone → Path rules): /api/ never cached, /static/ for a year. You give the start of the path, and among several rules the longest one wins. Inside a path with a rule, images on the fly keep working.
• improved — With the cache turned off by a rule, the response says X-Cache: BYPASS instead of leaving the header empty.
• fixed — A node left behind on the base configuration was invisible: every node now reports the fingerprint of its own and monitoring warns when one differs from the others. A node in that state, with images switched on, would have stopped applying any configuration at all.

We credit the SLA penalty ourselves

0.9.19 · October 15, 2026

If in a month we miss the guaranteed 99.9%, the credit arrives on its own when the month closes. It used to have to be claimed within thirty days: not any more.

• new — Automatic SLA penalty: when the month closes the panel works out the availability of each of your zones and, if we were below 99.9%, credits 10% to 100% of the month's fee. You do not have to claim it, you do not have to prove a loss, and you see it as a line on your statement.
• new — If more than one zone had an outage, the worst one counts: there is a single fee and the cap is still 100%. The figure is the same one you see on the zone's page, so there can be no disagreement about what you are owed.
• improved — Terms of service updated: the penalty no longer has to be claimed. You still have thirty days to tell us the measurement is wrong, if you think it is.

A ninth node, in Mumbai. And every visitor to their own continent

0.9.18 · October 15, 2026

The network leaves Europe. The European nodes still come with every plan; the nodes outside Europe are the «Global network» add-on, €24.90 a month.

• new — Mumbai node (BOM), the ninth in the network. Someone visiting a site from India or Japan is served from there instead of from Europe: 127 milliseconds less travel per round trip, and a page makes plenty of them.
• new — «Global network» add-on (Billing): €24.90 a month, adds to any plan and brings in the nodes outside Europe. It starts at once and you only pay the remaining days of the month; it ends on the 1st of the following month, so a month already paid for is not lost. The European nodes still come with every plan.
• new — The node is chosen in DNS, from the continent the request comes from. Visitors from a continent where we have no node are served from Europe; if the node for their continent stops answering, they fall back to Europe on their own within seconds.
• fixed — The monthly statement now also shows the plan fee and any add-ons: it used to list traffic only, with the fee visible just as a credit movement. And it is issued by Prime Server S.r.l., the company invoicing since 1 October.

"EU nodes only" now holds tomorrow too

0.9.17 · October 15, 2026

The choice was stored as the list of nodes that existed that day: the first new node outside the Union would have started serving those sites with nobody noticing. It is now stored as a promise and recomputed every time.

• fixed — Pull Zone → Advanced, "Nodes in the European Union only": the checkbox already said it would account for nodes added later, but the panel froze the list as it was. Non-EU nodes are now recomputed on every DNS publish and on every configuration sent to the nodes. No zone was affected: the fix lands before the first node outside Europe.
• new — API: PATCH /api/v1/pullzones/:id accepts {"soloUe": true}, and the zone reports soloUe. The explicit excludePops list still works, and the two add up.

Images on the fly, and origin shield

0.9.16 · October 15, 2026

Images are resized and converted on the node, in the format the browser prefers. And a single node can act as the intermediary towards your server.

• new — Images on the fly (Pull Zone → Cache): ?w=800 for width, ?h= for height, ?q=70 for quality, ?f=webp or ?f=avif to force the format. Without ?f the browser decides: AVIF for those who support it, WebP for the rest, the original for everyone else. On a real PNG: 28 KB become 6.8 in AVIF and 4.4 in WebP at 400 pixels.
• new — If the conversion fails — an odd image, a busy service, a huge file — the original is served. A large image still shows; a page with no images does not.
• new — Origin shield (Pull Zone → Advanced): pick a node and the other seven fetch from it instead of from your server. Fewer requests to the origin, one more hop to cross: worth it when there are many nodes or your server is far away.

You decide who may use your files

0.9.15 · October 15, 2026

Three things that were missing: signed addresses that expire, domains allowed to embed your files, and the CORS header. They are in Pull Zone → File access.

• new — Signed URLs: every address carries a signature that expires. Without one the node answers 403, with an expired one 410, and the check happens on the node without asking your server anything. It is what you want for video, PDFs, gated downloads or anything you would rather not leave to whoever knows the address. Only you see the key, and you can regenerate it.
• new — Hotlink protection: list the domains allowed to embed your files and the rest get a 403. Anyone arriving with no referrer — a direct link, a download — still gets through, otherwise legitimate downloads would break.
• new — CORS: the Access-Control-Allow-Origin header is set per zone, for when fonts or assets are used from another domain.

People sign up on their own, and the panel says what to do

0.9.14 · October 15, 2026

From today an account can be opened from 1primecdn.com without going through us, with the first month included. And whoever arrives for the first time no longer finds an empty panel.

• new — Public sign-up at pannello.1primecdn.com/registrati: confirm your email address, choose a password, and the account is open. The Start plan is on from the first minute with €9.90 of welcome credit: the first month is on us and no card is needed.
• new — «First steps» on the dashboard: create the Pull Zone, connect the domain, run the benchmark. Each step ticks itself off when it is done and the box disappears once they are finished.
• improved — Node caches can no longer fill the disk: each node works out how much space to give each site from the disk it actually has, instead of a fixed limit that, summed across sites, exceeded it. The in-memory index also went from 780 to 234 MB per node.

Top up your credit by card

0.9.13 · October 15, 2026

The «Add credit» button now takes you to a Stripe payment page. Your card details never pass through our panel.

• new — Card top-up from Billing: you pay on Stripe and the credit appears within seconds. If you close the window before coming back, the top-up still lands, because crediting does not depend on your browser.
• security — Credit is only applied with a valid Stripe signature, and the signature covers the timestamp too: a request captured and replayed later is refused. The same payment cannot be credited twice.
• improved — If your Pull Zones were suspended for an empty balance, they restart on their own right after the top-up.

The unlimited plan's bandwidth ceiling now actually exists

0.9.12 · October 15, 2026

Selling «unlimited up to 200 Mbit/s» without being able to enforce it was an empty promise. From today no single request can take a node's whole port, and the total across the network is measured minute by minute.

• new — On plans that declare a bandwidth ceiling, each single connection is limited to an eighth of it: one download can no longer saturate a node and leave other visitors with nothing.
• new — Each site's bandwidth is summed across every node, minute by minute. The month's peak is in Pull Zone → Availability, next to your plan's ceiling.
• new — If a site stays above the ceiling for five minutes running you get an email. We switch nothing off and slow nothing down: we say so and we talk about it, exactly as the terms state.

Fixed-price plans are in the panel

0.9.11 · October 15, 2026

From today you pick a plan instead of paying by the GB: Start €9.90, Scale €24.90, Unlimited €50. Accounts opened earlier stay on pay-as-you-go and nothing changes until they decide otherwise.

• new — Billing → Your plan: choose Start (1 TB), Scale (5 TB) or Unlimited (200 Mbit/s). The fee comes out of your credit on the 1st of the month, and the first month costs only the days remaining.
• new — The usage box shows traffic used against traffic included: amber at 80%, red once you are over. At 80% you get an email, and if you go over you get another one explaining what happens.
• new — Going over your plan's traffic brings no bill adjustment: from the 1st of the next month you move up a plan, and if you would rather stay where you are, just tell us.
• improved — Moving up takes effect at once, moving down from next month: the current month is already paid for and is not thrown away.
• improved — Accounts opened before the plans stay on pay-as-you-go at their own price per GB, monthly minimum included. Nobody's price changes by itself.

A public status page, and maintenance that no longer costs you availability

0.9.10 · October 15, 2026

From today anyone can see how the network is doing at 1primecdn.com/stato, and scheduled maintenance stops counting as an outage — but only on the conditions we wrote into the terms.

• new — 1primecdn.com/stato: the eight nodes, which ones are answering right now and ninety days of history, one bar per day. The data is the same we use to work out penalties, not a hand-written page.
• new — Infrastructure → Scheduled maintenance (staff): declare a window and the minutes inside it do not count against customer availability. The panel enforces what the terms promise: at least 48 hours' notice and no more than two hours a month, or it refuses the window.
• improved — A window announced late is still recorded but flagged in red, and those minutes keep counting as an outage: the rule applies to us too.

Your site's availability, measured and put in writing

0.9.9 · October 15, 2026

The terms of service now carry a 99.9% SLA with penalties. For a promise like that to be worth anything it has to be measured, and you have to see the number too: from today every Pull Zone has its own availability page.

• new — Pull Zone → Availability: this month's percentage, the minutes your site was unreachable, and the list of outages with start time, length, nodes involved and cause. If we are below the promised level the page already tells you what you are owed, without your having to ask.
• new — The eight nodes check each other every twenty seconds. A node counts as down only if the majority of the others cannot reach it: that way a network problem at the watcher does not become an outage at the watched.
• new — Errors are counted by whose they are: a 502 or 504 generated by us is our outage, a 500 coming from your own server is not. Your site counts as down only in the minutes when none of its assigned nodes could serve it.
• fixed — The Arezzo node was writing its logs in Italian time rather than UTC: for two hours every night its usage landed on the wrong day. The timezone is now read from the log line itself, whatever it is.

London and Warsaw are talking to the panel again

0.9.8 · October 15, 2026

The two new nodes reach the internet from a different address than the one they answer on, and the panel's firewall did not know it. For an hour they could neither fetch their configuration nor serve pages that were not yet in cache for sites whose origin is hosted with us.

• fixed — London and Warsaw are VPSes behind NAT: they go out from an address other than their own. The panel's firewall now knows it. Visitors served by those two nodes were getting a 504 on pages not yet in cache.
• new — Every node can now declare its outbound address, and that is the one the public lists carry: /api/public/ips, nginx-realip and apache-remoteip. If you put our addresses in your server's firewall, or in your real-visitor-IP configuration, fetch the updated list: for London and Warsaw the address has changed.
• new — Monitoring alerts now also go out by email, not only over Telegram. This failure was caught by the very first check, but nobody was told.

Under attack, your site stays on the nodes shielded from network attacks

0.9.7 · October 15, 2026

Four of our eight nodes sit behind OVH's anti-DDoS filter and two behind Hetzner's. When you switch «Under attack» on, the site is served only from those.

• new — Every node now states whether its provider filters network attacks (volumetric, layers 3 and 4): you can see it in Infrastructure → PoP list, next to the provider.
• new — With «Under attack» on for a zone, the unfiltered nodes leave the DNS in under a minute and come back as soon as you switch it off. It never goes below two nodes: if the filter would leave only one, they all stay.
• improved — Excluded nodes keep receiving the site's configuration and keep its certificate ready, so when the attack ends they serve again at once, with no reissue.

Brotli on every node: pages weigh a third less

0.9.6 · October 14, 2026

Until now the nodes only compressed with gzip. With Brotli the same page drops by another third, with nothing for you to change.

• new — Brotli is on across all eight nodes for HTML, CSS, JavaScript, JSON and SVG. On a real page: 296 KB uncompressed, 60 KB with gzip, 38 KB with Brotli. Clients without Brotli still get gzip.
• improved — It follows the «Compression» switch you already have in the Pull Zone: nothing new to configure.

You choose which nodes serve your site

0.9.5 · October 14, 2026

With the London node the network has a point outside the European Union. If you have a constraint on where your data may sit, you can now remove the nodes you do not want, site by site.

• new — Pull Zone → Advanced → «Nodes that serve this site»: untick the nodes you do not want and they leave the DNS. They do not even receive the site's configuration, so they never serve it and never ask for its certificate.
• new — Shortcut «Only nodes in the European Union»: it covers the nodes we add later too, with nothing for you to change.
• new — API: PATCH /api/v1/pullzones/:id accepts excludePops. It never goes below two nodes.

Two new nodes: London and Warsaw

0.9.4 · October 14, 2026

The network goes from six nodes to eight. London covers the UK and Ireland, Warsaw eastern Europe: until now those visitors were served from Falkenstein.

• new — PoPs in London (Erith) and Warsaw. Eight nodes in eight European cities.
• fixed — The list of node addresses (the one your server downloads to see visitors' real IPs) was being cached and could fall behind: it is no longer cached. If your server runs primecdn-realip-sync.sh it will pick up the new nodes within the hour, with nothing for you to do.

The CDN now spots a server that redirects to itself

0.9.3 · October 14, 2026

If your origin server answers «go to https://yoursite.com» for the very address we serve, the CDN in front makes visitors bounce for ever. The panel now sees this before switching on.

• new — When you turn the CDN on for a name, the panel queries the origin the way the CDN will: if that scheme redirects back to the same address it tries the other one, and if both do it refuses and tells you what to remove on the server.
• fixed — Before, the CDN switched on anyway and the site ended up in a redirect loop.

Turning the CDN on for a new site no longer leaves gaps in HTTPS

0.9.2 · October 14, 2026

Switching the CDN on for a domain with several names left some nodes without a certificate, and whoever landed on them saw the security warning. Two causes, both fixed.

• fixed — The Let's Encrypt check could land on a node that had not yet received the new site's configuration: it answered «not found» and issuance failed. Any node can now pass the check on to the others, even for a name it does not know yet.
• fixed — The nodes all asked for the same certificate at once and got in each other's way. Now a single node asks for each name and the others pick it up from the panel within a minute; if that node cannot manage it, after ten minutes any node may try.
• improved — When a certificate fails, the node's log now records the real reason instead of a useless line.

«Waiting for nameservers» even when the nameservers were already set

0.9.1 · October 10, 2026

The nameserver check only ran when you opened the domain and pressed the button, so anyone who changed their nameservers at the registrar saw the domain stuck as waiting for days, even once it was already ours. It now checks itself.

• fixed — Every domain's status updates on its own: as soon as the registry delegates to ns1/ns2/ns3.1primecdn.com the zone turns Active, with nothing for you to do.
• new — Under «Waiting for nameservers» you now see which nameservers the registry is actually answering with, so it is obvious when the change at the registrar has not gone through yet.

HTTPS certificates: one node issues, all of them use it

0.9.0 · September 30, 2026

Until now every node asked Let's Encrypt for its own certificate, but Let's Encrypt grants five a week per name: from the sixth node on someone was left without one, and whoever landed there saw the security warning. Now a single node asks and the others receive it from the panel.

• fixed — A new site goes HTTPS on every node at once: no more uncovered nodes as the network grows (it was the Let's Encrypt limit: 5 certificates a week per name).
• new — The first node that obtains the certificate deposits it in the panel; the others download it, renewals included.
• new — API: PATCH /api/v1/pullzones/:id now changes originUrl and originHost too, not just the status.
• improved — Turning the CDN on for a DNS record: the protocol towards the origin follows the one the other pull zones on the same server already use.

Purge: we tell you when it's your server holding the old page

0.8.11 · September 28, 2026

Sometimes you purge the cache and still see the old page: almost always it's the site's own server answering from a cache of its own. The panel now checks and says so.

• new — Once a purge is done the panel asks the origin server: if it answers from a cache of its own (Next.js, Varnish, LiteSpeed, caching plugins, another CDN in front) a notice appears in the Pull Zone with the details.
• improved — Manual: how the two caches stack up and in which order to clear them (site first, then the CDN).

API per i rivenditori: crea, metti in pausa ed elimina le pull zone

0.8.10 · September 27, 2026

Con la chiave API ora si gestiscono anche le pull zone, non solo lo svuotamento della cache: serve a KoaBilling per vendere la CDN ai clienti.

• new — POST /api/v1/pullzones crea una pull zone (nome, origin, hostname del cliente); ripetere la richiesta con lo stesso nome restituisce la stessa zona.
• new — GET, PATCH ({"status": "PAUSED"|"ACTIVE"}) e DELETE su /api/v1/pullzones/:id, con il traffico del mese.

Fix in Staff → Prime Mail

0.8.9 · September 26, 2026

The «Disable» and «Regenerate key» buttons of the connected panels answered «Operation not recognised»: the operation never reached the server.

• fixed — Staff → Prime Mail: disabling, re-enabling and regenerating a panel's key now work.

Admin sign-in with Prime Software ID

0.8.8 · September 24, 2026

The platform administrator signs in to the panel from the Prime Software ID Home page, without a password and with two-step verification. Nothing changes for customers.

• security — «Sign in as admin» from Prime Software ID: only for the email set on the server (PSID_SUPERADMIN), with two-step verification and only for an active Prime staff member.
• improved — /api/health also returns the panel version.

New PoP in Milan

0.8.7 · September 22, 2026

The network's sixth node is in Milan, on Akamai (Linode): together with Arezzo, Italian visitors now have two PoPs in Italy. Nothing to do, sites already use it.

• new — MIL PoP in Milan (Akamai / Linode): 6 nodes on 4 different providers.

Blog and «Under attack?» page

0.8.6 · September 21, 2026

The 1primecdn.com site has a blog in Italian and English, with guides on DDoS attacks, and a page for anyone under attack right now: steps to follow immediately and a form that alerts the staff in real time.

• new — Site: blog with 8 articles (6 on DDoS, bots and security, 2 on CDN and speed) in Italian and English.
• new — Site: «Under attack?» page with the urgent help form, linked from every article and from the menu.
• new — Staff → Help requests: the form requests, with an immediate email to the staff (and Telegram if configured); replying to the email writes to the customer.
• fixed — Security and manual: with «Under attack» verified Google and Bing crawlers still get through (since 0.8.1); the text still said they were stopped.

More precise cache and a panel protected by the CDN

0.8.5 · September 21, 2026

Fixed a bug that made many Pull Zones ignore cookies and the backup copy: pages of signed-in users now never come from the cache, while static files stay cached for everyone. The panel and Prime Mail are now served by the nodes.

• fixed — Pull Zones whose cache duration is set by the origin: cookies and «Serve the backup copy if the origin does not answer» were ignored because of a bug in the node configuration. They now work.
• security — Requests with credentials (Authorization header, e.g. APIs with a key) are never stored in or served from the cache.
• improved — Static files (CSS, JavaScript, images, fonts) cached even for signed-in users: private pages always stay fresh, everything else comes from the node.
• security — The panel and Prime Mail go through the CDN: the server address no longer appears in DNS and it accepts connections only from the nodes.

Redirects on the nodes

0.8.4 · September 19, 2026

A Pull Zone can now act as a redirect only: the nodes answer with a permanent 301 to another site, keeping path and parameters, with automatic HTTPS and no server needed.

• new — Pull Zone → Origin → «Redirect»: permanent 301 to the chosen address, /page?x=1 included.
• new — New PoP in Arezzo (Aruba), the first in Italy: there are now 5 nodes on 3 providers.

Cache purge on every node

0.8.3 · September 19, 2026

A cache purge now waits for every node to confirm it: before, it could show as completed when only the first node had run it.

• fixed — Purge cache: each PoP receives and confirms the purge; it shows as completed only once all active nodes have run it.

Origin server allowed only on its own zone

0.8.2 · September 19, 2026

A Pull Zone's origin server now bypasses Shield and the rate limits only on its own zone, no longer on the whole network.

• security — The origin server is allowed only on the Pull Zone that uses it: setting an address as origin no longer exempts it from Shield on other customers' zones.
• improved — If the origin itself goes through the CDN, the real server listed in 1PrimeCDN's DNS is allowed.

Shield no longer stops Google, Bing or your own server

0.8.1 · September 19, 2026

Verified search engines and the origin servers of your Pull Zones no longer go through Shield's scoring: never challenged or blocked.

• fixed — A Pull Zone's origin server reading its own pages through the CDN is no longer challenged.
• improved — Googlebot and Bingbot are always allowed, recognised by the official networks published by Google and Microsoft (updated daily), not by the user agent, which can be faked.

The panel in English

0.8.0 · September 19, 2026

1PrimeCDN now speaks English too: the whole panel, the manual and What's new. Pick it with the IT/EN selector at the top, on the login page or in «Your account»; on first visit your browser's language is used.

• new — Panel in English: menus, pages, messages, manual and What's new. IT/EN selector at the top, on the login page and in «Your account».
• new — Dates, numbers and amounts follow the chosen language (e.g. €30.60 and 19 Sep in English).
• improved — Country names in Security in the panel's language.

Security report and real IP for Apache and WordPress too

0.7.1 · September 19, 2026

The Security Overview is now a report: how many requests Shield analysed and stopped, a chart by hour or by day, the countries they come from and the IPs stopped most often, for the whole network or per zone. The nodes also send the X-PrimeCDN-Client-IP header, and Pull Zone → Origin has ready-made configurations for Apache and PHP/WordPress.

• new — Security → Overview: report for 24 hours, 7 or 30 days with requests analysed and stopped, challenges shown and passed, blocked IPs and requests from scanners.
• new — Chart of stopped requests by hour or by day, split by type: too fast, challenge, blocked country.
• new — Where the stopped requests come from (countries) and the IPs stopped most often, with reason and node. Each customer sees only their own zones.
• new — New X-PrimeCDN-Client-IP header sent to your server: it contains only the visitor's IP, like Cloudflare's CF-Connecting-IP.
• new — Pull Zone → Origin: ready-made configuration for Apache (mod_remoteip) and 6 lines for PHP/WordPress, with the list of nodes already included.

Performance: your site with and without 1PrimeCDN

0.7.0 · September 19, 2026

New Performance section: a real benchmark of your site with and without the CDN, measured from the panel and from every PoP, with suggestions for improving it. In Security, one click on an IP shows its country, organisation and history. New public list of nodes to see your visitors' real IP.

• new — Performance: time to first byte and total time with and without the CDN, per measuring point and per page, percentage served from cache and benchmark history.
• new — Automatic suggestions: pages that don't stay in cache, uncompressed files, images that are too heavy, origin errors.
• new — Staff: one click on an IP in the Security log opens its country, organisation, network, abuse contact and Shield history.
• new — Pull Zone → Origin: instructions for letting your server see the visitors' real IP, with a list of nodes that updates itself.

Challenged countries and a more compact Security page

0.6.2 · September 19, 2026

Besides blocking, a country can now be «challenged» (soft block): visitors from there go through the one-second challenge and then browse. The Security page is split into tabs, with smaller controls. Shield recognises vulnerability scanners, and Billing no longer shows the €1 minimum as usage.

• new — Countries: one click on a country moves it from allowed to challenge to blocked; for the risk groups there is an Allow · Challenge · Block selector.
• improved — Security split into tabs (Overview, Countries, IP rules; for staff also Log and Nodes); «Under attack» is a switch.
• security — Shield recognises vulnerability scanners (anyone looking for .env, .git, admin panels…): first a challenge, then a block.
• fixed — Billing: the month's usage shows the real amount; the €1 minimum appears only in the estimate and never on internal accounts.
• fixed — Prime AI no longer suggests «Ignore query string» for whole sites put on the CDN through DNS.

Shield: blocking by country

0.6.1 · September 19, 2026

On the Security page you can block visitors by country, on each Pull Zone. With one click you block the highest-risk countries, or the medium-risk ones as well, or you pick them one by one. The challenge page now shows the 1PrimeCDN logo.

• new — Country blocking on each Pull Zone: «Block highest risk» and «+ medium risk» buttons, or pick country by country with search.
• new — Visitors from a blocked country see «Site not available»; IPs set to «Always allow» still get through.
• new — Staff: country blocking across the whole network.
• improved — 1PrimeCDN logo on the challenge page.

1PrimeCDN Shield: protection against attacks

0.6.0 · September 19, 2026

1PrimeCDN Shield is here. Every node checks the traffic and on its own stops anyone making too many requests or bypassing the cache, with a JavaScript challenge for doubtful cases. On the new Security page you'll find «Under attack» mode and rules to block or always allow an IP. New PoP in Falkenstein (Germany).

• new — Security: «Under attack» mode for each Pull Zone, with a one-second challenge for anyone opening the pages.
• new — IP rules per zone: block or always allow an IP or a network, with reason and duration.
• new — Automatic protection on the nodes: a score for each IP, JavaScript challenge between 30 and 70, temporary block above 70; every block has a reason and an expiry.
• security — Per-IP request and connection limits and defences against slow attacks on all nodes.
• new — Staff: decision log with «Unblock», network-wide rules and Shield status on each node; monitoring alerts you if a node's Shield stops responding.
• new — Third PoP in Falkenstein (Hetzner, Germany), which also hosts the ns1 DNS.

Automatic charging, passwords and monitoring

0.5.0 · September 19, 2026

Credit is now deducted automatically every night based on traffic, with a monthly statement and suspension when the credit runs out. Forgot password and password change, HTTPS enforced on sites on the CDN, Telegram alerts when something goes wrong and a nightly backup.

• new — Automatic billing: every night the previous day's traffic is deducted from your credit (included GB already subtracted).
• new — Monthly statement on the 1st of the month, printable or savable as PDF, with the €1 minimum; summary email.
• new — Email alert when your credit is about to run out; when it runs out, Pull Zones are suspended and restart on their own after a top-up.
• new — Forgot password from the login page and password change from «Your account» (top right).
• security — After a password change, sessions open on other devices are closed.
• improved — Sites with a certificate are always redirected to HTTPS; certificates renew on their own and the nodes reload them.
• new — Staff: Monitoring page with Telegram alerts (nodes, DNS, certificates, Prime Mail, backups) and Prime Mail page with the latest sends.
• new — Staff: reset a customer's password with a temporary password.
• improved — Nightly backup of the panel and DNS databases, with a copy on a node in another data center.
• improved — Origin shield hidden until it becomes available.

Managed DNS and Infrastructure page

0.4.0 · September 18, 2026

1PrimeCDN now also manages your domains' DNS, like Cloudflare: you change the nameservers once and from then on you edit all the records, putting any subdomain on the CDN with one click. New Infrastructure page with the world map and the status of the nodes.

• new — DNS: add a domain, we import the existing records (site, www, mail, verifications) and give you the 1PrimeCDN ns1/ns2 nameservers.
• new — A, AAAA, CNAME, MX, TXT, NS, SRV and CAA records with editing and deletion; automatic nameserver check.
• new — «On CDN» switch on A, AAAA and CNAME: the name is served by the PoPs, with pull zone and HTTPS created automatically (it works on the main domain too).
• new — Infrastructure: world map with online and offline PoPs; for staff, CPU load, memory, disk, connections, outbound bandwidth and cache of each node.
• improved — Dashboard: the «Global network» now shows the real map of Europe.
• new — Panel emails are sent through Prime Mail, the single email service for all Prime panels: no more Gmail setup panel by panel.

First node live, real traffic, what's new and manual

0.3.0 · September 18, 2026

The first 1PrimeCDN PoP (Gravelines, OVH) is connected to the panel: it receives the settings, runs purges and sends real traffic data. Also new: the What's new and Manual pages and an email with every new version.

• new — 1PrimeCDN edge node: disk cache, automatic HTTPS with Let's Encrypt for domains pointing to the node, X-Cache and X-PrimeCDN-PoP headers.
• new — Changes made in the panel reach the nodes in about 20 seconds; purges are run and confirmed.
• new — Bandwidth, requests and hit ratio come from the nodes' real logs: dashboard, statistics and billing use this data.
• new — What's new page with all versions and Manual page with step-by-step instructions.
• new — Automatic email to administrators with every new version (Gmail, configurable in Staff → Settings).
• improved — A PoP that hasn't responded for more than 2 minutes shows as offline.

Staff area and free credit

0.2.0 · September 18, 2026

Prime staff see all customers, give credit with a reason and create new accounts.

• new — Prime Staff → Customers: customer list with credit and traffic, free credit visible to the customer, new customers with a temporary password.

First version of the panel

0.1.0 · September 18, 2026

Dashboard, pull zones, cache purge, hostnames with SSL, credit-based billing and API.

• new — Pull zones with cache rules, origin, custom hostnames and statistics.
• new — Pay-as-you-go billing with prepaid credit and automatic top-up.
• new — API keys to purge the cache from CMSs and scripts (e.g. PrimeNews24).