Delivery Pricing
What's combined into CNX Delivery, and what sits outside it. Pricing is scoped per engagement — contact us for a quote.
Delivery is one product made of several pieces, each covered in more detail elsewhere in this section, plus the platform pieces that hold them together. It's priced and deployed per engagement — bandwidth, number of PoPs, certificate volume, and traffic profile all factor in — not sold as separate line items.
Combined into Delivery
| IX port and PNI to origin | Included — see Exchange |
| DNS Shield — authoritative DNS with local-reachability steering | Included — see DNS Shield |
| CDN/WAF — schema validation, OWASP CRS, cache split, QUIC/HTTP-3 | Included — see CDN/WAF |
| PKI — dedicated, hardware-rooted private CA | Included — see PKI |
| mTLS enforcement, both directions | Included — see mTLS |
| GitOps change management for WAF, DNS, and CA configuration | Included |
| Access via your own SSO or CamDigiKey | Included |
| TSA-sealed log storage, encryptable against your own RSA key | Included |
| Metrics exported to Prometheus, dashboards in Grafana via your own SSO | Included |
| Carrier data sponsorship / zero-rating | Available on request |
Outside Delivery
| Sealed compute & hardware-attested access | Scoped and priced separately — see Sealed Compute |
| Dark fiber or physical interconnect to your facility | Your cost, not CNX's |
| Application-side integration — certificate handling, pinning, JWT minting | Your own development team |
| Existing login and account-level authentication | Stays yours — Delivery sits in front of it, not instead of it |
Pricing is scoped per engagement based on bandwidth, PoP footprint, and certificate volume. Contact us for a quote.