Built in the network, Sucuri CDN is responsible for caching your website on its edges automatically. With zero configuration, the CDN is able to speed your website by 70%.
You can find out the CDN edges locations on the Sucuri Firewall Locations article.
How Sucuri CDN Works
When a good CDN is in place, most part of your website - if not all of it since it depends on the type of your website - will be transferred directly from a PoP (point of presence) of the CDN, which is a fancy name for "one of the data centers" used by the CDN network.
In a few words, if the Sucuri Firewall was activated (and automatically the CDN as well), the Paris visitor would get the website assets from the Sucuri Firewall Europe data centers, decreasing the page load time and the server resource usage (such as bandwidth).
Discovering The Nearest Cluster
You don't need to do anything to activate the CDN despite of activating the Firewall itself, however you can discover which data center/cluster you're accessing. There are a couple tools you could use, but the simplest one is a tool called
If you are using Microsoft® Windows, install Git for Windows before proceeding.
Open the Terminal/Git for Windows and run the following command:
curl -IL http://yourdomain.com/
In this example, we'll be requesting the HTTP headers of Sucuri KB. Don't worry, although it seems technical, it's pretty simple:
$ curl -IL https://kb.sucuri.net/ HTTP/2 200 server: nginx date: Wed, 27 Dec 2017 18:51:37 GMT content-type: text/html; charset=UTF-8 vary: Accept-Encoding x-sucuri-cache: HIT x-xss-protection: 1; mode=block x-frame-options: SAMEORIGIN x-content-type-options: nosniff x-sucuri-id: 14016
Here's the lines we need to pay attention for the purpose of this article:
x-sucuri-cache: HIT x-sucuri-id: 14016
According to "x-sucuri-cache" header, the page requested (kb.sucuri.net) was served straight from Sucuri CDN and answered by "14016" PoP (CDN edge). The first two digits (14) identifies the PoP (CDN edge) reached, which was the Washington data center.
The curious part here is that Washington data center is not the closest one to my region, but it's the data center with the best network connectivity and lower latency.
That's what an Anycast CDN network does, it "guides" the connections to the POP (CDN edge) with the best/shortest network path, which happens to be the closest data center most part of the time. It also allow Sucuri's engineers to re-route traffic in case of a maintenance or congestion with minimal or no impact.
Despite of using
curl, you can also use a Visual Traceroute tool, such as The Dazzlepod IP Address Lookup and Monitis Visual Trace Route Tool, that with a certain success rate is able to demonstrate the network path on a map.