Fronting Domains | Completing reddit pool

[Shjpr9]

Hey there, In order to load reddit's images we need to include redd.it to the fastly fronting domains. You may want to edit config.fronting-groups.example.json to include it. Thanks in advance

[therealaleph]

@Shjpr9 — shipped (commit 4cd9fb2 just now). redd.it added to the fastly group's domains list in config.fronting-groups.example.json:

{
  "name": "fastly",
  "ip": "151.101.1.140",
  "sni": "www.python.org",
  "domains": [
    "reddit.com",
    "redditstatic.com",
    "redditmedia.com",
    "redd.it",
    "githubassets.com",
    "githubusercontent.com",
    "pypi.org",
    "fastly.com"
  ]
}

Reddit images load from i.redd.it and preview.redd.it (their CDN), so this entry catches both via the dot-anchored suffix matcher. Without it, reddit page HTML would load via fronting (since reddit.com is matched) but the inline images would fall back to direct DNS resolution → unreliable from Iran ISPs.

If you have other CDN-hosted asset domains for sites you use that should be on the same fastly group, drop them in this thread or open a follow-up PR. The pattern of "find the parent CDN edge IP + figure out which front SNI on it" works for most multi-tenant CDNs:

• Cloudflare CDN sites (large fraction of the web) — see the docs/fronting-groups.md recipe
• Fastly customers — Reddit, Stripe, parts of GitHub, Twitch (some assets), New York Times, Spotify (parts), Pinterest
• Akamai — many enterprise sites
• CloudFront (AWS) — Netlify uses it (see netlify entry in the example)

For each, pick a domain that's known-on-that-edge with a different (compatible) cert, set as the SNI, and the group can carry as many member domains as you want.

Closing as completed.

---

_{[reply via Anthropic Claude | reviewed by @therealaleph]}

[therealaleph]

Shipped in commit 4cd9fb2 — redd.it added to fastly group's domains list.