Myra CDN vs OVHcloud

Anycast CDN with RAM cache and HTTP/2

Content is cached in RAM with real-time invalidation and stale-object support, then delivered over Anycast IPv4/IPv6. Protocols on the CDN sheet are HTTP/1.1 and HTTP/2. Image optimisation includes WebP conversion and on-the-fly resizing via query string. Docs also mention HTTP, HTTPS, DNS, IMAP, and SMTP on the wider platform, plus automatic IPv4/IPv6 translation for IPv4-only origins.

Optional mTLS and signed URLs at the edge

Clients can authenticate to the CDN with a client certificate. The CDN can also present a client certificate to the origin so only Myra reaches origin. Signed URLs add a cryptographic signature and optional expiry. TLS 1.2/1.3 is stated. These controls are optional add-ons, not defaults for every domain.

Layer 7 DDoS on the same reverse proxy

Malicious HTTP is filtered in Myra's network before a redundant reverse proxy forwards clean traffic. Documented controls include GeoIP blocking, rate limits, attack notifications, post-mitigation reports, and upstream monitoring. Network-layer cloud scrubbing and on-prem BGP protection are separate products for IP prefixes. Vendor capacity claims (for example 1 Tbps class attacks) should be validated in an RFP, not treated as a measured SLA.

WAF, bot management, and EU CAPTCHA add-ons

The CDN is sold as a stack with Hyperscale WAF, deep bot management, and Myra EU CAPTCHA (cookie-free, hashed telemetry, optional dedicated DE/EU endpoints). A managed WAF service is offered as an add-on. This is useful for KRITIS and banking sites that want one German operator. It is not a reason to assume every module is included in a CDN-only quote.

Germany-only TLS termination on request

Because WAF and DDoS inspection decrypt HTTPS, Myra states it will terminate TLS exclusively in Germany when the customer requests it. Exclusive processing in German data centres is the same kind of option. If the contract is silent, marketing still describes globally placed PoPs. Write the region constraint into the order form.

REST APIv2, Myra App, and DNS cutover

Go-live is DNS (A/AAAA to Myra, CNAME, or moving authoritative DNS) plus certificate upload via the Myra App or API. APIv2 is documented at apiv2.myracloud.com and can create domains, change cache settings, and edit DNS. Docs also cover SSO, certificate management, waiting rooms, object storage, WebSockets, and maintenance pages. There is no official self-host of the filter plane.

Anti-DDoS Protection and Vast Network Capacity

Every OVHcloud service includes unlimited anti-DDoS mitigation, scrubbing attacks across layers 3, 4, and 7 without downtime fees. The global network exceeds 100 Tbit/s, ensuring low latency and high throughput. No charges apply to outbound traffic, unlike some rivals, which helps control costs for data-intensive apps like streaming or backups.

Sustainability with Low PUE and Resource Reuse

OVHcloud reports a power usage effectiveness (PUE) of 1.28 across its facilities, beating industry averages. It uses 7 times less water than peers and runs on 100% low-carbon energy sources. Servers get repurposed for secondary uses before recycling, targeting zero landfill waste by 2025. This approach reduces operational costs passed to customers.

OpenStack Public Cloud and Reversibility

Built on OpenStack, the public cloud supports pay-as-you-go pricing with API access for automation. Private cloud options avoid lock-in through data export tools and standard formats. Customers retain full control, with no data mining for ads. Features like vRack private networking connect services seamlessly across regions.