The typical implementation process for Edgio software generally involves the following steps:
Create an Edgio Property
• Sign up for an Edgio account
• Set up a new property in the Edgio Developer console
• Initialize the project using the Edgio CL
Local Development and Testing
• Use the Edgio CLI to run the application locally
• Test and preview the website on your local machine
Deployment
• Deploy the property to Edgio using the CLI command
• Review deployment details in the Edgio Developer Console
Configuration and Optimization
• Fine-tune settings in the Control portal
• Set up origin servers, caching rules, and security features
Go-Live Planning
• Carefully plan the transition of traffic to Edgio
• Coordinate with your team and Edgio support
Monitoring and Support
• Use diagnostic tools in the Control Portal for troubleshooting
• Contact Edgio support for technical assistance as needed
The implementation timeline can vary depending on the complexity of the project, but a basic setup can be completed in a few days to a week. More complex implementations involving custom configurations, multiple properties, or extensive testing may take several weeks to fully optimize and deploy
Rules Engine: Edgio's Rules Engine allows for extensive customization of CDN configurations. Users can create custom rules to handle how edge servers' cache and grant access to the platform. This includes overriding TTL, URL redirection, URL rewrite, access control, geoblocking, and more. The Rules Engine supports unlimited rules and match conditions, enabling businesses to tailor their CDN performance precisely to their needs.
Custom Reports: Edgio provides custom reporting capabilities via the Manage portal for Edgio profiles. Users can define the type of data to be collected for edge CNAMEs reports, allowing for detailed insights into hits and data-transferred statistics. This feature supports customization of metrics and groupings, providing businesses with the specific data they need to optimize their operations.
Managed Services: Edgio offers managed services that include comprehensive streaming management solutions tailored to individual business needs and budgets. This includes round-the-clock support, expert live event management, and advanced video content handling, ensuring top-quality streaming and efficient management of streaming services.
Custom Rules Administration: Edgio allows users to create, modify, and delete custom rule sets for security applications. This includes defining custom threat identification rules, which can be tailored to target malicious traffic with minimal impact on legitimate traffic. The platform supports rapid testing and deployment of these rules, enabling quick responses to security threats.
Edgio Sites: This service combines cutting-edge technology with top-tier security and performance, allowing businesses to tailor and optimize website experiences. Features like serverless sites, iterative migration, and incremental static regeneration enable businesses to customize their web development processes and improve user engagement and conversion rates.
Custom Software Development: Edgio supports custom software development to address unique business needs directly. This includes integrating various technologies and services to create bespoke solutions that enhance business operations and customer experiences.
API Integration: Edgio offers a robust suite of API endpoints that enable DevOps teams to automate the configuration and deployment of the Rules Engine. This includes creating and updating policies, tracking propagation status, and pulling a list of active rules by CNAME or origin, providing businesses with the flexibility to integrate Edgio's capabilities into their existing workflows.
Training
Onboarding Discovery Worksheet: Before going live, Edgio recommends using the Onboarding Discovery Worksheet to help users think through common use cases and concerns, ensuring a smooth launch.
Learning Center: Edgio's Learning Center provides expert resources in cybersecurity, web performance, and serverless architecture. This platform is designed to help users start their journey with Edgio and gain in-depth knowledge about the services offered.
Documentation: Edgio offers detailed documentation for various aspects of their services, including traditional sites, performance optimization, and security features. This documentation includes step-by-step guides, best practices, and technical details to help users understand and implement Edgio's solutions effectively.
Case Studies and Success Stories: Edgio shares customer success stories and case studies that highlight how other businesses have successfully implemented and benefited from Edgio's services. These examples can provide new users with insights and inspiration for their own implementations.
Support
24/7/365 Global Support: Edgio provides round-the-clock support to ensure that users can deliver flawless digital experiences. Their support team is available to assist with any issues or questions that may arise, ensuring immediate and effective responses.
Regional Support Numbers: Edgio offers regional support numbers for various countries, including India, Korea, Japan, the UK, and the US, making it easy for users to get in touch with support representatives in their region.
Incident Workflow: Edgio has a structured incident workflow to handle support requests efficiently. This includes gathering necessary information, creating and tracking incidents, analyzing and troubleshooting issues, and escalating unresolved incidents to senior engineers if needed.
Technical Customer Support: Users who subscribe to a support plan can contact Edgio's technical support team for assistance with CDN configuration and other technical issues. The support team is equipped to handle a wide range of technical challenges and provide expert guidance.
Custom Support Solutions: For clients with specific needs, Edgio offers customized support solutions. This includes tailored support plans and dedicated account managers to ensure that users receive the level of support required for their unique business needs.
Employee Advocacy Program: Edgio has implemented an Employee Advocacy program to drive employee engagement and amplify the company's brand on social media. This program helps new users understand the importance of consistent messaging and brand advocacy, contributing to overall business success.
Additional Resources
Contact Support Page: Edgio's Contact Support page provides detailed information on how to reach the support team for various solution areas, including CDN delivery, streaming, sites, security, and performance.
Edgio implements several security measures to protect data:
Information Security Teams: Edgio maintains dedicated information security teams to promote and enforce information security policies and practices.
Compliance with Standards: Applicable services are certified under standards like PCI-DSS, ISO 27001, and SSAE-18 SOC 1, 2 or 3.
Network Security: Edgio protects its networks using industry-recognized security practices, procedures, and tools adapted to its threat landscape.
Regular Testing: Systems and processes for network security are regularly tested to maximize operational capacity.
Secure Software Development: Edgio employs a secure software development lifecycle, including privacy and cybersecurity risk assessments.
Mobile Device Management : Corporate-issued devices are maintained by accountable individuals responsible for device and data protection.
Network Monitoring: Tools and procedures are used to identify unauthorized activity on Edgio networks.
Supply Chain Risk Management: Contractual measures mandate third-party vendors' compliance with information security requirements.
Client-Side Protection : A solution to monitor scripts and APIs on webpages to prevent data exfiltration and support compliance requirements.
Web Application and API Protection (WAAP): A multi-layer security solution including Web Application Firewall, DDoS Protection, Bot Management, and API
Security Operations Center (SOC): 24/7 security monitoring and response services provided by a global team of security experts.
These measures demonstrate Edgio's comprehensive approach to securing customer data across its platform and services.
Edgio releases updates frequently, with a structured approach to managing these updates. Here are the key points regarding the frequency and management of updates:
Frequency of Updates
Regular Release Notes: Edgio provides detailed release notes that document updates and changes to their platform. These notes are published regularly, often multiple times a month, indicating a high frequency of updates. For example, updates were noted on various dates in December 2023, November 2023, and other months throughout the year.
Versioned Updates: Edgio's updates are versioned, allowing users to track changes and improvements over time. For instance, the release notes for Edgio Applications v7 include multiple updates and enhancements, such as security improvements, new features, and bug fixes.
Management of Updates
CLI-Based Updates: Edgio provides a Command Line Interface (CLI) for updating packages. Users can update their projects to the latest version of Edgio by running specific commands within the root directory of their project. This process includes synchronizing dependencies and ensuring compatibility across minor versions.
Version Control and Comparison: Edgio's platform supports versioning of security apps, access rules, rate rules, custom rules, and managed rules. Users can view up to the last 200 versions of a configuration, compare different versions, and reactivate older versions if needed.
Automated and Manual Updates: Edgio offers both automated and manual update processes. For example, users can configure their firewall and DNS settings to accommodate new IP blocks and domains introduced in updates. This ensures that the infrastructure remains compatible with the latest versions of Edgio.
Real-Time Log Delivery (RTLD): Edgio provides real-time data and visualizations about network performance and security. This includes integrating WAF and rate-limiting data into SIEM systems to enhance threat intelligence and proactive monitoring.
Client-Side Protection: Edgio's Client-Side Protection solution continuously monitors scripts and APIs on the browser side to prevent malicious code execution. This solution supports compliance with the latest security standards, such as PCI DSS v4.0, and provides real-time reporting and management of client-side vulnerabilities.
Data Ownership
Customer Data Control: Edgio acknowledges that any processing of Customer Data and End User Data occurs exclusively at the direction and discretion of the customer. This means that customers retain control over their data and Edgio processes it based on the customer's instructions.
Data Use and Transfer: Edgio may use, process, and transfer Customer Data and End User Data in connection with providing services, including transfers to entities in countries that may not provide statutory protections for personal data. This is done for purposes such as administration, provisioning, invoicing, fraud detection, and product development.
Data Protection Addendum: Edgio processes Customer Data and End User Data in accordance with their Data Protection Addendum, which outlines the terms and conditions for data processing and ensures compliance with applicable data protection laws.
Data Portability
Portability Rights: Edgio supports data portability, allowing customers to obtain and transfer their data. This is in line with data protection regulations such as the GDPR, which ensures that individuals can easily move, copy, transfer, and reuse their personal data across different services and IT environments.
Data Formats: Data provided for portability is typically in a commonly used, machine-readable format, making it easier for customers to transfer their data to other platforms or services.
Compliance with Regulations: Edgio complies with various data protection regulations, including the GDPR, which mandates data portability rights. This compliance ensures that customers can exercise their right to data portability effectively.
Security and Compliance
Security Measures: Edgio implements robust security measures to protect data, including logical access control policies, data backup policies, incident response plans, and regular security testing. These measures ensure that data is secure and can be safely transferred when needed.
Certifications: Edgio holds several certifications that demonstrate their commitment to data security and compliance, including PCI-DSS, SOC 2 Type II, ISO/IEC 27001, and CSA STAR Certification. These certifications provide additional assurance that data is handled securely and in compliance with industry standards.
Legal and Contractual Obligations
Terms of Service: Edgio's Terms of Service outline the responsibilities of both parties regarding data ownership and processing. Customers are responsible for obtaining and maintaining all necessary consents and permissions for the use, processing, and transfer of their data.
Contract Renewal
Automatic Renewal: Edgio's contracts typically include automatic renewal clauses. For instance, an Order Form will automatically be renewed for successive periods of one year unless either party notifies the other of its intent not to renew at least 90 days prior to the expiration of the then-current term. This automatic renewal ensures continuity of service unless explicitly terminated by either party.
Notification of Renewal: The parties must notify each other of their intent not to renew the contract at least 90 days before the current term expires. This notification must be in writing.
Evaluation and Negotiation: The renewal process provides a chance to review and renegotiate the contract terms. This includes evaluating the performance of the existing contract, identifying any necessary amendments, and negotiating new terms if required.
Renewal Terms: The terms of the renewed contract are typically based on the existing agreement but can be modified through mutual consent. Any amendments to the Order Form must be agreed upon in writing by both parties.
Termination for Cause:
Edgio may terminate the agreement for cause under several conditions, including:
Appointment of a receiver or administrator for the customer or its property.
Customer's general assignment for the benefit of creditors.
Commencement of bankruptcy or insolvency proceedings against the customer that are not dismissed within 60 days.
Customer's liquidation or dissolution.
Customer ceasing business operations.
PCI-DSS Compliance: Edgio maintains PCI-DSS (Payment Card Industry Data Security Standard) Level 1 compliance by undergoing annual audits from approved Visa and MasterCard auditors. Their solutions help customers meet PCI-DSS requirements for protecting cardholder data.
SOC 2 Type II Compliance: Edgio undergoes regular audits and can provide a Service Organization Controls (SOC) 2 Type II report, which evaluates the effectiveness of their security controls based on AICPA Trust Services Principles.
ISO/IEC 27001 Certification: Edgio is certified under the ISO/IEC 27001 standard, which outlines requirements for information security management systems. This certification demonstrates their systematic approach to managing information security risks.
CSA STAR Certification: Edgio has achieved the Cloud Security Alliance (CSA) STAR Certification, which assesses the security practices of cloud service providers against the ISO/IEC 27001 standard and the CSA Cloud Controls Matrix.
MPA Best Practices Compliance: Edgio has demonstrated alignment with the Motion Picture Association (MPA) Best Practices for securely storing, processing, and delivering protected media and content.
GDPR and Data Protection Compliance: Edgio complies with the EU's General Data Protection Regulation (GDPR) and other applicable data protection laws. They have implemented measures to protect personal data and offer a Data Protection Addendum (DPA) for customers.
Client-Side Protection for PCI DSS v4.0: Edgio's Client-Side Protection solution is designed to help organizations meet the latest PCI DSS v4.0 requirements for protecting payment data against client-side threats like Magecart attacks.
