How to hide specific response headers in Gcore CDN

Introduction

The Hide response headers feature lets you remove selected HTTP headers from CDN responses before they are delivered to end users. This is useful when you want to reduce exposure of server details, protect privacy, or slightly reduce response size.

If you have ever asked, Can I hide specific headers in CDN responses? the answer is yes. In Gcore CDN, you can hide only the headers you choose by using the Hide only mode.

Why hide response headers

Hiding response headers can help you:

• Reduce information disclosure about your origin or application stack
• Improve privacy by removing headers that may reveal internal implementation details
• Lower response size by removing unnecessary headers
• Keep responses cleaner and easier to standardize across environments

How to access the setting

To configure hidden headers for a CDN resource, go to CDN resource settings → HTTP headers → Hide response headers.

How to hide specific headers

Use Hide only mode when you want to remove only selected headers and keep all other response headers unchanged.

1. Open the CDN resource settings for the required resource.

2. Go to HTTP headers.

3. Find Hide response headers.

4. Select Hide only mode.

5. Add the headers you want to hide to the list.

6. Save the changes.

Example headers to hide

Common headers that administrators often hide include:

• Server
• X-Powered-By
• X-AspNet-Version

Important limitations

Some mandatory headers cannot be hidden because they are required for correct HTTP behavior or CDN operation. If a header is required by the platform, it will remain in the response even if you add it to the hide list.

If a header does not disappear after you save the configuration, check whether it is mandatory or added by another part of your delivery chain, such as the origin server, application, or another proxy.

Tips and caveats

• Test the response after each change to confirm the header is removed as expected.
• Review both CDN and origin configurations, since headers can be added upstream or downstream.
• Use header hiding only for values you do not need to expose to clients.
• If you need to hide many headers, keep a documented list for future maintenance.

Summary

To hide specific headers in Gcore CDN, open the CDN resource settings, go to HTTP headers, enable Hide only mode, and add the headers you want to remove. This is a practical way to improve security, privacy, and response cleanliness while keeping the rest of the response intact.