Amazon CloudFront as a CDN for Drupal

When I access from Sweden the site feels reasonable quick and responsive. From other parts of the world it feels less so, even when the Internet connection is good.

The reason is of course that my server is located in Sweden and that location matter on the Internet. Latency and capacity gets worse, in most cases, the bigger the distance is. Ping time to a server close by can be something like 10-20 ms. With a server on the other side of the world the ping time is most likely 300+ ms.

The solution is to move the content closer to the visitors and that can be done with a Content delivery/distribution network, CDN.

Really big players like Google and Facebook build there own systems. They simply build a bunch of data centers all over the world. Big players use CDN services from companies like Akamai and Limelight.

Both options is a bit over my budget for There are a number of cheaper CDN providers that I here people mention from time to time but none of them has struck my fancy. Not that low cost or not that easy to set up or weak coverage etc.

Then there is Amazon CloudFront. Easy to set up and you pay only for what you use, that goes for all Amazon Web Services.

I’m already using other Amazon Web Services with good result and earlier this year they expanded their presences in Asia so now they cover North America, Europe and Asia very well.

Amazon CloudFront for will cost something like €2 (Euro) per month. That is a reasonable cost to make more quick and responsive for users outside Sweden.

Set up Amazon CloudFront as a CDN for Drupal

The goal is to make CloudFront serve all static files like images, js and css.

When you create a CloudFront Distribution you can either set one of your S3 buckets as origin or set a custom origin. I selected custom and simply entered “”. “Origin” tells Amazon from where it should download the static files from.

CloudFront will cache the files for at least 24 hours, or longer if you set it up that way. If you use Apache and have mod_expires activated Drupals default htaccess file set the cache time to “2 weeks after access” for static files. It looks to me like CloudFront respects this value.

With CloudFront set up what remains is to make Drupal change the url of all static files to the URL of your CloudFront distribution.

I had already set up Drupal to serve static files via Lighttpd, see Running Lighttpd as a static file server for Drupal 6 on a Debian GNU/Linux server. After setting up a CloudFront I just needed to change the static url in my settings.php file and I was done.

The easiest and best way for most sites is to use the excellent CDN module for Drupal. The CDN module can do a lot of other things as well, like push files to Amazon S3. It is used by some of the biggest Drupal sites out there.

I’m pleasantly surprised by how easy it is to set up CloudFront and how well it works. It’s easy and cheep enough for any small site that has readers from all around the world.

Invalidate (clear/purge) files on Amazon CloudFront

There is one problem with this setup. If you upload a new version of a file without changing the name CloudFront will serve the old version until it expires from its cache.

I noticed this when I changed an image style and flushed the old images. The result was not pretty, the updated style was a bit larger so the images on CloudFront was to small and got “stretched”.

One solution is to change the Expires settings from “2 weeks after access” to lets say “1 day after access”. Then you just wait for one day and CloudFront will be updated.

It’s also possible to invalidate files via CloudFront API calls. I which Amazon Console could have some simple interface for this but there seem to be none for some reason.

Luckily Aleksandar Kolundzija has put up CloudFront-PHP-Invalidator on GitHub. It’s a PHP Class for invalidating objects stored on Amazon CloudFront service. I wrote my own basic web interface for it so I can paste in a bunch of file path and hit a button to invalidate them.

This should be made it to a Drupal module that would automatically invalidate the images on CloudFront when you change a image style. I leave that for another day.


There are a ton of similar distributed reverse proxy style CDNs which are cheaper than the overhyped Amazon (and have more pops to boot)…

Suggestion on some to check out?

As the developer of the CDN module, I’m glad to read you like it :)

This issue will add support for Far-Future expires headers through unique file URLs: That indirectly also solves your problem with invalidating old versions of files.

For CSS/JS files if you use the AdvAgg module it will give each iteration of the aggregate a unique name, working around the Cloud Front issue.

Using hook_advagg_files_table you could have it tie in with the CloudFront-PHP-Invalidator. You can see this hook in action in the fork of the css_emimage module I have (awaiting the patch to be committed).

Thanks! Time to checkout AdvAgg properly.

Hey dude. great post. Thanks for the info!

I still have one doubt though. I was saving my files in the default files folder, now I installed CDN module + AWS CloudFront and I can see that the new images I upload/ and the ones I see when hit a node got the CloudFront url. So when it is safe to remove the old files folders? CDN somehow moved the images there to CloudFront or they are moved when they’re hit the first time?

Thanks in advance.

You never remove the original files from your files folder. A CDN is not a file storage.

OK, now I understand. And in your experience which one brings the best results cost/performance wise?

Thanks againa for your answers.

Thank you for the helpful tutorial. I am working on a project that needs this functionality so I went ahead and created a CloudFront Invalidation module, which can be found at The big difference is that I used Amazon’s own PHP SDK, loaded via the AWS SDK module. This should allow for more code re-use - modules such as AmazonS3 already rely on this library.

Any feedback is considered helpful and co-maintainers are welcome.

Excellent news! Will try to make time to check that out.