diff --git a/debian/changelog b/debian/changelog
index 89c63c1..95e3805 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -7,6 +7,8 @@ propellor (2.2.2) UNRELEASED; urgency=medium
   * Note that since a new switch had to be added to allow testing the binary,
     upgrading to this version will cause a rebuild from scratch of propellor.
   * Added hasLoginShell and shellEnabled.
+  * debCdn changed to new httpredir.debian.org official replacement for
+    http.debian.net.
 
  -- Joey Hess <id@joeyh.name>  Thu, 02 Apr 2015 10:09:46 -0400
 
diff --git a/src/Propellor/Property/Apt.hs b/src/Propellor/Property/Apt.hs
index 75c5977..7f2ed79 100644
--- a/src/Propellor/Property/Apt.hs
+++ b/src/Propellor/Property/Apt.hs
@@ -61,7 +61,7 @@ binandsrc url suite = catMaybes
 		return $ debLine bs url stdSections
 
 debCdn :: SourcesGenerator
-debCdn = binandsrc "http://http.debian.net/debian"
+debCdn = binandsrc "http://httpredir.debian.org/debian"
 
 kernelOrg :: SourcesGenerator
 kernelOrg = binandsrc "http://mirrors.kernel.org/debian"