Yandex Cloud
Search
Contact UsGet started
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • AI for business
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Yandex Cloud CDN
  • Getting started
    • Overview
    • Providers
    • Resource
    • Origins and origin groups
      • Overview
      • TLS certificates
      • CORS
      • Content compression
    • Redirecting requests
    • Content caching
    • Secure tokens
    • IP-based access policy
    • Location rules
    • Log export
    • Labels
    • Quotas and limits
  • Access management
  • Pricing policy
  • Terraform reference
  • Monitoring metrics for the EdgeCDN provider
  • Monitoring metrics for the Yandex Cloud CDN provider
  • Audit Trails events
  • Release notes
  • Troubleshooting
  1. Concepts
  2. Data exchange between clients and the CDN
  3. CORS

CORS in Cloud CDN

Written by
Yandex Cloud
Updated at November 11, 2025

Yandex Cloud CDN supports cross-domain requests via CORS (cross-origin resource sharing).

In the resource settings, you can:

  • Allow CORS requests with any origins (the Origin header values): Set the Access-Control-Allow-Origin header to * or to the Origin header’s value in the request.
  • Allow CORS requests for specific origins: Set the Access-Control-Allow-Origin header to the value of the Origin header in the request, but only if it is listed as allowed in the settings.
  • Deny CORS requests: Disable adding the Access-Control-Allow-Origin header to responses.

CORS settings apply to all files of the resource.

Note

To make sure cross-domain requests are enabled, additionally set up CORS on a source if the source supports this mechanism. For example, CORS configuration is required for Object Storage buckets.

When you use the EdgeCDN provider, the maximum number of CORS domains when responding to client requests is 20. Learn more about limits and restrictions.

See alsoSee also

  • CORS configuration guide.

Was the article helpful?

Previous
TLS certificates
Next
Content compression
© 2025 Direct Cursus Technology L.L.C.