Clear walkthrough of DNS → Anycast → BGP before the first byte. On self-hosted fleets the same path is only half the story: after traffic lands, someone still has to assign sites, rotate certs, and purge across those PoPs from one place. We have been building an open-source CDN control plane (CDNCA, AGPL-3.0) for self-hosted nodes and a plugin marketplace; marketplace features roll out release by release. Curious which part surprised you most when you traced a real miss — DNS, Anycast catchments, or origin fallback?