Self-hosted diagnostics inspired by public CDN toolkits — probes run from this control plane with rate limits and SSRF guards.
Full page speed test with waterfall from probe locations.
Single-asset DNS / Connect / TLS / TTFB timings.
curl-style response headers with optional Referer and X-Pull.
Verify ALPN negotiation and HTTP/2 support.
Check Content-Encoding: br with Accept-Encoding: br.
Geolocation, ASN, and ISP for an IP or hostname.
Lookup A/AAAA/MX/TXT/NS from multiple resolvers.
ICMP ping from probe locations.
IPv6 ICMP ping from probe locations.
Hop-by-hop path from probe locations.
Curated directory of public BGP looking-glass servers.
Decode PEM certificates and spot missing intermediates.
Fetch AIA intermediates and compose a full chain.
Instant SHA-256 hash of any string.
Check CVE-2015-0204 export-grade RSA risk.
Check CVE-2015-4000 DHE_EXPORT risk.