# Keenpix Learn > Human-first learning paths for image CDN fundamentals, performance, cost, origins, security, operations, migrations, frameworks, and agent integration. Canonical HTML: [https://keenpix.com/learn](https://keenpix.com/learn) Last reviewed: 2026-09-03 Start with the problem, not the product. Every guide is designed to remain useful without its Keenpix next step. ## Image CDN fundamentals Understand the delivery path, responsive images, formats, and cache behavior before choosing a product. - [AVIF vs WebP in production: choose with your cache](https://keenpix.com/blog/avif-vs-webp-production-caching): Compare AVIF and WebP without borrowed benchmarks, then configure format negotiation and CDN cache variants without serving the wrong bytes. - [What is an image CDN? How optimization and delivery work](https://keenpix.com/blog/what-is-an-image-cdn): An image CDN fetches, transforms, caches, and delivers image variants close to users. Learn the request lifecycle, tradeoffs, and when you need one. - [Responsive image CDN guide: srcset, sizes, DPR, and formats](https://keenpix.com/blog/responsive-image-cdn-guide): Build responsive image CDN URLs with srcset and sizes, choose width candidates, handle DPR and format negotiation, and avoid common cache mistakes. - [Image CDN vs traditional CDN: caching and transforms](https://keenpix.com/blog/image-cdn-vs-traditional-cdn): A traditional CDN caches existing files. An image CDN creates optimized variants and then caches them. Compare responsibilities, costs, and use cases. ## Performance Measure real image delivery, control variant growth, and improve the slow path without invented benchmarks. - [How to measure image CDN performance reproducibly](https://keenpix.com/blog/reproducible-image-performance-measurement): Build a repeatable image delivery test that separates cold transforms, warm caches, transfer, decoding, rendering, and field experience. - [Stop cache stampedes in image transformation](https://keenpix.com/blog/image-transform-cache-stampedes-capacity): Coalesce cold image transforms, serve stale safely, shed overload, and size CPU and memory capacity from measured service time and working sets. - [Image CDN cache keys: tame Vary: Accept](https://keenpix.com/blog/image-cdn-cache-keys-vary-accept): Design image cache keys that keep AVIF, WebP, and JPEG correct without multiplying variants for every raw Accept header or query permutation. ## Cost and buying Model the whole bill, compare service boundaries, and decide when managed or self-hosted delivery fits. - [Best Image CDNs in 2026: 10 Services Compared](https://keenpix.com/blog/best-image-cdns-2026): Compare 10 image CDN and optimization services using verified August 2026 pricing, use cases, tradeoffs, and clear best-fit recommendations for developers. - [Cloudinary Credits Explained: Pricing vs Keenpix](https://keenpix.com/blog/keenpix-vs-cloudinary): Learn how Cloudinary credits combine transformations, storage, and bandwidth, then compare that meter with Keenpix managed-delivery pricing. - [imgix Credits Explained: Delivery and Storage Pricing](https://keenpix.com/blog/keenpix-vs-imgix): Learn how imgix credit packages combine managed media and delivery allowances, then compare the meter with Keenpix managed-delivery pricing. - [ImageKit Bandwidth Pricing Explained: Limits and Overage](https://keenpix.com/blog/keenpix-vs-imagekit): Learn how ImageKit bandwidth allowances and overage work, then compare their boundary with Keenpix managed-delivery pricing. - [Image CDN Pricing: Why Keenpix Bills by Managed Delivery](https://keenpix.com/blog/transparent-image-cdn-pricing): See why Keenpix bills for optimized managed delivery instead of transformations, with published plans, included transforms, and always-on metered overage. - [Self-hosted vs managed image optimization: how to choose](https://keenpix.com/blog/self-host-vs-managed-image-optimization): Compare who owns the database, cache, delivery bill, upgrades, monitoring, and failure recovery in self-hosted and managed image optimization. ## Origins and architecture Keep ownership of source assets while designing a safe, cacheable path from origin to delivery edge. - [Design a user-upload image pipeline end to end](https://keenpix.com/blog/user-upload-image-pipeline-design): Design image uploads from authenticated ingestion and byte validation through quarantine, moderation, durable storage, transformation, delivery, and recovery. - [Bring-your-own-origin image CDN architecture](https://keenpix.com/blog/bring-your-own-origin-image-cdn-architecture): Design an image delivery layer around source assets you already own, with explicit origin, cache, URL, security, and recovery boundaries. ## Security Separate public delivery from private origins, constrain fetches, and protect transform URLs from abuse. - [Private image origin security boundaries](https://keenpix.com/blog/private-image-origins-security-boundaries): Choose between public assets, signed source grants, authenticated gateways, and private networks without leaking origin credentials into delivery URLs. - [Secure image pipelines: SSRF to image bombs](https://keenpix.com/blog/secure-image-pipelines-ssrf-image-bombs): Defend image fetch and transform services with origin allowlists, redirect revalidation, byte and pixel ceilings, timeouts, and observable failures. - [Signed image URLs with HMAC: stop unauthorized transforms](https://keenpix.com/blog/signed-image-urls-hmac): Learn when an origin allowlist is enough, when HMAC signing helps, how Keenpix canonicalizes a transform request, and what secret rotation breaks. ## Operations and troubleshooting Diagnose symptoms from the browser back to the origin, then deploy, observe, and roll back safely. - [Cache invalidation with versioned image URLs](https://keenpix.com/blog/cache-invalidation-versioned-image-urls): Use immutable versioned image URLs across browser, CDN, and origin caches, with safe publication, rollback, purge, revocation, and verification patterns. - [Safe image CDN rollouts and rollbacks](https://keenpix.com/blog/safe-image-cdn-rollouts-and-rollbacks): Canary image delivery changes with explicit acceptance gates, cache-aware rollback, observability, and a tested path back to the previous URL generator. - [Image delivery troubleshooting: diagnose by symptom](https://keenpix.com/blog/image-delivery-troubleshooting-by-symptom): Trace broken, slow, stale, oversized, or incorrectly cropped images from browser selection through caches, transforms, and origin access. - [Self-host an image CDN with Docker: production checklist](https://keenpix.com/blog/self-host-image-cdn-docker): Deploy Keenpix with a pinned Docker image, persistent Postgres, health checks, CDN cache rules, backups, and a repeatable smoke test. ## Migrations Translate URLs and behavior, canary representative traffic, and retain a tested reversal path. - [Vercel Image Optimization to Keenpix Migration](https://keenpix.com/blog/migrate-vercel-image-optimization-to-keenpix): Move next/image from Vercel's optimizer to a Keenpix custom loader with config mapping, canary rollout, cache and origin checks, and rollback. - [ImageKit to Keenpix Migration Guide](https://keenpix.com/blog/migrate-imagekit-to-keenpix): Move ImageKit transforms and origins to Keenpix with a compatibility table, asset-export gate, canary plan, cache checks, and rollback. - [Cloudinary to Keenpix Migration Guide](https://keenpix.com/blog/migrate-cloudinary-to-keenpix): Migrate Cloudinary image URLs to Keenpix with an explicit parameter map, origin plan, canary rollout, cache checks, and tested rollback. ## Frameworks Connect responsive image markup and framework loaders without hiding the underlying delivery contract. - [How to optimize Next.js images with a custom CDN loader](https://keenpix.com/blog/nextjs-custom-image-cdn-loader): Connect next/image to Keenpix with a custom loader, responsive sizes, format negotiation, and an origin allowlist you can verify in the browser. - [How JoodCMS integrates Keenpix image delivery](https://keenpix.com/blog/joodcms-keenpix-integration): A code-backed case study of JoodCMS using Keenpix for responsive variants, source allowlists, domain sync, prewarming, and safe fallbacks. ## Agent integration Give coding agents bounded, inspectable context and verify their integration against the same public contracts. - [Agent-assisted image CDN integration without blind trust](https://keenpix.com/blog/agent-assisted-image-cdn-integration): Give a coding agent public, bounded contracts for image delivery, then verify generated URLs, security boundaries, responsive behavior, and rollback.