Overview

You can configure referer validation, IP address access control lists (ACLs), User-Agent ACLs, token authentication, remote authentication, and IP access frequency to identify and filter out unauthorized users and improve CDN security.

You can modify access control settings of a domain name that is in the Enabled or Configuring state and is not locked or banned by CDN.
IP addresses belong to carriers and change irregularly. Although Huawei Cloud periodically updates the IP address library, the update may be delayed. As a result, some access control functions may occasionally block or allow requests, or client requests may not be scheduled to the optimal PoP.

Function	Description
Referer Validation	You can configure a referer blacklist or whitelist to identify and filter out users from specific access sources.
IP ACL	You can filter out requests from specific IP addresses.
User-Agent ACL	You can filter out requests from specific user agents.
Token Authentication	You can protect your website resources from being downloaded by malicious users.
Remote Authentication	You can allow CDN to forward user requests to a specific server for authentication to prevent malicious resource download.
IP Access Frequency	You can restrict the number of times that a single IP address requests a URL from a PoP per second to defend against CC attacks and malicious theft.