Verifiable by design
The infrastructure your product runs on, on open standards end to end
Authoritative DNS, an asset CDN, an image proxy and email relay — one platform, standard protocols, DNSSEC on by default. Migrating in is a hostname change. So is migrating out.
- 4
- services, one platform
- 2
- image URL syntaxes, drop-in compatible
- DNSSEC
- on every zone, by default
- 0
- proprietary protocols
Services
Authoritative DNS
ns1/ns2.vappcdn.com
Your own nameservers, with DNSSEC signing on every zone.
Asset CDN
fonts / cdnjs.vappcdn.com
Fonts and JS libraries served from our edge, with integrity you can verify.
Compatible with Google Fonts CSS2 API · npm, cdnjs, unpkg URL styles
Image Proxy
img.vappcdn.com
Resize, convert and cache images at the edge, close to your users.
Compatible with wsrv.nl URL parameters
Email Relay
mail.vappcdn.com
Transactional and mailbox email, without renting someone else's reputation.
Compatible with SMTP · IMAP · JMAP
Why cdn.vapp.vn
Signed by default
Every zone is DNSSEC-signed the moment it is created — including the answers that say a name does not exist. There is nothing to switch on; once you publish the DS record at your registrar, a validating resolver will catch a forged answer.
Priced without surprises
Flat, predictable pricing with no per-query metering and no egress billing. You should be able to read your bill before you get it, not after.
Standards, not lock-in
Every service speaks the protocol you already use — no proprietary client, no bespoke SDK. Migrating in is a hostname change, and migrating out is too.
Verifiable, not just trusted
Assets carry integrity hashes you can check yourself, and every zone change is recorded. You can check our work instead of taking our word for it.