Content delivery network protection from malware and data leakage

A node in a cloud system that protects a Content Delivery Network (CDN), the node comprising:

• a network interface, a data store, and a processor communicatively coupled to one another, wherein the network interface is communicatively coupled to one or more origin servers in the CDN and to one or more cache servers communicatively coupled to end users for providing content thereto;
• and
• memory storing computer executable instructions, and in response to execution by the processor, the computer-executable instructions cause the processor to
• receive traffic from the one or more cache servers destined for the one or more origin servers,
• monitor the traffic in an inline manner,
• process the traffic for malware and data leakage based on policy, and
• block the traffic responsive to detection of one or more of the malware and the data leakage, prior to the traffic entering the CDN.

A method comprising:

• in a node in a cloud system that protects a Content Delivery Network (CDN), the node comprising a network interface, a data store, and a processor communicatively coupled to one another, wherein the network interface is communicatively coupled to one or more origin servers in the CDN and to one or more cache servers communicatively coupled to end users for providing content thereto, receiving traffic from the one or more cache servers destined for the one or more origin servers,
• monitoring the traffic in an inline manner,
• processing the traffic for malware and data leakage based on policy, and
• blocking the traffic responsive to detection of one or more of the malware and the data leakage, prior to the traffic entering the CDN.