Notes and Constraints

Before connecting a domain name to Huawei Cloud CDN, understand CDN's requirements on domain names and origin servers to prevent service loss caused by violations.

Domain Name Requirements and Specifications

Item	Description
Domain name	Chinese mainland Your HUAWEI ID has completed real-name authentication. The domain name has been licensed by the Ministry of Industry and Information Technology (MIIT) and the Internet Content Provider (ICP) license is still valid. The domain name has passed content moderation. Outside the Chinese mainland The domain name has passed content moderation. Global You have completed real-name authentication on Huawei Cloud. The domain name has been licensed by the MIIT and the ICP license is still valid. The domain name has passed content moderation.
Acceleration domain name	Basic specifications: A domain name can contain up to 200 characters, including letters, digits, hyphens (-), periods (.), and asterisks (). It can start with a letter, digit, or asterisk. An asterisk, if any, must be the first character. Each label of a domain name (for example, in .**.com) can contain up to 63 characters. You can add up to 100 domain names under each account. An acceleration domain name must be unique. CDN does not allow websites containing illicit content. The existing domain names connected to CDN are reviewed regularly. If a domain name involves any violations, CDN acceleration will be disabled for the domain name and other domain names in your account. If a domain name has been in the Disabled or Rejected state for more than 120 days, CDN starts the domain name deletion process and deletes the domain name records after confirmation. If CDN acceleration is required for the domain name, add the domain name again. If a domain name has not been accessed for more than 180 days, CDN starts the domain name suspension process and disables CDN acceleration for the domain name after confirmation. Rules for handling outstanding payments and attacks: If your account enters the retention period due to outstanding payments, CDN will disable services for your domain names and delete their CNAME resolution. In this case, the domain names cannot be accessed. If a site is attacked, CDN PoPs will bear the attack traffic. Therefore, the origin server will not break down. If CDN PoPs fail to provide services due to heavy attack traffic, CDN will temporarily ban the domain name, change its status to Disabled, and disable the acceleration service for it. CDN PoP resources are occupied during attacks. Therefore, related fees are generated. Wildcard domain name specifications: You can add a domain name including a wildcard (). For example, if you add .test.com to CDN as an acceleration domain name and have it resolved to the CNAME provided by CDN, all of the level-2 domain names under .test.com, such as a.test.com, will enjoy CDN acceleration by default. However, level-3 domain names (such as b.a.test.com) would not. If you add a wildcard domain name to a particular account, you cannot add any of the level-2 domain names under that domain name to other accounts. You will be billed for the acceleration service provided to all of the level-2 domain names under a wildcard domain name. If there are multiple level-2 domain names, billing will be based on the traffic generated by the wildcard domain name, not on each of the level-2 domain names. NOTE: When purging cache or prefetching content of a wildcard domain name, perform cache purge or prefetch for each subdomain name separately. The following is an example: A wildcard domain name .a.com has subdomain names 1.a.com, 2.a.com, and 3.a.com. You need to enter URLs of content under a specific subdomain name for cache purge, for example, http://1.a.com/abc.jpg, instead of *http://.a.com/abc.jpg**.

Item

Description

Domain name

Chinese mainland
- Your HUAWEI ID has completed real-name authentication.
- The domain name has been licensed by the Ministry of Industry and Information Technology (MIIT) and the Internet Content Provider (ICP) license is still valid.
- The domain name has passed content moderation.
Outside the Chinese mainland
- The domain name has passed content moderation.
Global
- You have completed real-name authentication on Huawei Cloud.
- The domain name has been licensed by the MIIT and the ICP license is still valid.
- The domain name has passed content moderation.

Acceleration domain name

Basic specifications:

A domain name can contain up to 200 characters, including letters, digits, hyphens (-), periods (.), and asterisks (*). It can start with a letter, digit, or asterisk. An asterisk, if any, must be the first character.
Each label of a domain name (for example, *** in ***.***.com) can contain up to 63 characters.
You can add up to 100 domain names under each account.
An acceleration domain name must be unique.
CDN does not allow websites containing illicit content. The existing domain names connected to CDN are reviewed regularly. If a domain name involves any violations, CDN acceleration will be disabled for the domain name and other domain names in your account.
If a domain name has been in the Disabled or Rejected state for more than 120 days, CDN starts the domain name deletion process and deletes the domain name records after confirmation. If CDN acceleration is required for the domain name, add the domain name again.
If a domain name has not been accessed for more than 180 days, CDN starts the domain name suspension process and disables CDN acceleration for the domain name after confirmation.

Rules for handling outstanding payments and attacks:

If your account enters the retention period due to outstanding payments, CDN will disable services for your domain names and delete their CNAME resolution. In this case, the domain names cannot be accessed.
If a site is attacked, CDN PoPs will bear the attack traffic. Therefore, the origin server will not break down. If CDN PoPs fail to provide services due to heavy attack traffic, CDN will temporarily ban the domain name, change its status to Disabled, and disable the acceleration service for it. CDN PoP resources are occupied during attacks. Therefore, related fees are generated.

Wildcard domain name specifications: You can add a domain name including a wildcard (*). For example, if you add *.test.com to CDN as an acceleration domain name and have it resolved to the CNAME provided by CDN, all of the level-2 domain names under *.test.com, such as a.test.com, will enjoy CDN acceleration by default. However, level-3 domain names (such as b.a.test.com) would not.

If you add a wildcard domain name to a particular account, you cannot add any of the level-2 domain names under that domain name to other accounts.
You will be billed for the acceleration service provided to all of the level-2 domain names under a wildcard domain name. If there are multiple level-2 domain names, billing will be based on the traffic generated by the wildcard domain name, not on each of the level-2 domain names.
NOTE:

When purging cache or prefetching content of a wildcard domain name, perform cache purge or prefetch for each subdomain name separately. The following is an example:

A wildcard domain name *.a.com has subdomain names 1.a.com, 2.a.com, and 3.a.com.

You need to enter URLs of content under a specific subdomain name for cache purge, for example, http://1.a.com/abc.jpg, instead of http://*.a.com/abc.jpg.

Security

Item	Description
Content moderation	CDN does not allow websites that violate related laws and regulations, including but not limited to: Websites that contain pornographic content or content related to gambling, illegal drugs, frauds, or infringement Gaming websites that run on illegal private servers Websites of legend games and card games Websites that provide pirated games, software, and videos P2P lending websites Unofficial lottery websites Unlicensed hospital and pharmaceutical websites Inaccessible websites or websites that do not contain any substantial information Cryptocurrency websites, including but not limited to cryptocurrency mining and transaction websites Over-the-wall applications that use unofficial channels to connect to networks, including but not limited to setting up and using illegal channels for international networking, engaging in international networking businesses without permission, or performing international networking without approval For more information about prohibited behaviors and content, see the Acceptable Use Policy. NOTE: If your domain name content violates related laws and regulations, you shall bear the related risks. If any violation is found on your domain name, the domain name will be banned permanently. If any pornographic content or content related to gambling, illegal drugs, or frauds is found on your domain name, the domain name and other domain names that use the same origin server will be deleted from CDN and can no longer be connected to CDN. Acceleration domain name quota of the account will be reduced to 0.
Burst bandwidth limiting rule	According to the CDN Service Statement signed between you and Huawei Cloud, if your bandwidth spikes during events such as feature launches, holidays, and promotions when using the CDN service, inform Huawei Cloud CDN through a service ticket at least three working days in advance to avoid service loss.

Item

Description

Content moderation

CDN does not allow websites that violate related laws and regulations, including but not limited to:

Websites that contain pornographic content or content related to gambling, illegal drugs, frauds, or infringement
Gaming websites that run on illegal private servers
Websites of legend games and card games
Websites that provide pirated games, software, and videos
P2P lending websites
Unofficial lottery websites
Unlicensed hospital and pharmaceutical websites
Inaccessible websites or websites that do not contain any substantial information
Cryptocurrency websites, including but not limited to cryptocurrency mining and transaction websites
Over-the-wall applications that use unofficial channels to connect to networks, including but not limited to setting up and using illegal channels for international networking, engaging in international networking businesses without permission, or performing international networking without approval

For more information about prohibited behaviors and content, see the Acceptable Use Policy.

NOTE:

If your domain name content violates related laws and regulations, you shall bear the related risks.
If any violation is found on your domain name, the domain name will be banned permanently.
If any pornographic content or content related to gambling, illegal drugs, or frauds is found on your domain name, the domain name and other domain names that use the same origin server will be deleted from CDN and can no longer be connected to CDN. Acceleration domain name quota of the account will be reduced to 0.

Burst bandwidth limiting rule

According to the CDN Service Statement signed between you and Huawei Cloud, if your bandwidth spikes during events such as feature launches, holidays, and promotions when using the CDN service, inform Huawei Cloud CDN through a service ticket at least three working days in advance to avoid service loss.

Origin Server Specifications and Constraints

Item	Description
Origin server	Maximum number of origins per domain: 50 IP address If an IP address is used as the origin address, CDN PoPs access the IP address directly to pull origin content. IPv4 is supported, but IPv6 is not supported. Domain name Start with a letter or digit, use only letters, digits, hyphens (-), and periods (.), and enter up to 255 characters. An origin domain cannot be the same as an acceleration domain name. You can also enter the domain name of an object storage bucket. NOTE: If you want to use an object storage bucket from a non-Huawei Cloud service provider as your origin server, select Domain name as the origin server type and enter the domain name of the object storage bucket. Private buckets cannot be used as origin servers. If you use an object storage bucket as your origin server, the object storage service will charge the CDN origin pull traffic based on its billing standards. OBS bucket: You can select an OBS bucket under your account or enter the domain name of an OBS bucket. OBS charges the CDN origin pull traffic based on the billing standard for outgoing Internet traffic. If you set a bucket of OBS 3.0 or a later version as the origin server, you can purchase OBS pull traffic packages to deduct origin pull traffic. For details, see OBS Billing for CDN Acceleration. If your OBS private bucket is unsuitable as an origin for your domain name, do not set the private bucket as the origin server. If you enter a domain name of an OBS bucket, the entered domain name must end with .myhuaweicloud.com or .myhuaweicloud.cn. If you use an OBS private bucket, enable OBS authorization and select the Private bucket option. Otherwise, origin pull will fail. To use a custom OBS private bucket as the origin server, configure a policy for the private bucket. For details, see Configuring a Policy for a Custom OBS Private Bucket. If you have enabled static website hosting for your OBS bucket, select the Static website hosting checkbox when adding a domain name. In this way, a full list of files in the bucket will not be displayed when users access the bucket. When back-to-source by mirroring is configured on OBS and range requests are enabled on CDN, if the mirror origin server does not comply with the RFC Range Requests standard, the response to range requests is not 206 and CDN fails to pull content. In this case, submit a service ticket.

Item

Description

Origin server

Maximum number of origins per domain: 50
IP address
- If an IP address is used as the origin address, CDN PoPs access the IP address directly to pull origin content.
- IPv4 is supported, but IPv6 is not supported.
Domain name
- Start with a letter or digit, use only letters, digits, hyphens (-), and periods (.), and enter up to 255 characters.
- An origin domain cannot be the same as an acceleration domain name.
- You can also enter the domain name of an object storage bucket.
NOTE:
- If you want to use an object storage bucket from a non-Huawei Cloud service provider as your origin server, select Domain name as the origin server type and enter the domain name of the object storage bucket.
- Private buckets cannot be used as origin servers.
- If you use an object storage bucket as your origin server, the object storage service will charge the CDN origin pull traffic based on its billing standards.
OBS bucket: You can select an OBS bucket under your account or enter the domain name of an OBS bucket. OBS charges the CDN origin pull traffic based on the billing standard for outgoing Internet traffic. If you set a bucket of OBS 3.0 or a later version as the origin server, you can purchase OBS pull traffic packages to deduct origin pull traffic. For details, see OBS Billing for CDN Acceleration.
- If your OBS private bucket is unsuitable as an origin for your domain name, do not set the private bucket as the origin server.
- If you enter a domain name of an OBS bucket, the entered domain name must end with .myhuaweicloud.com or .myhuaweicloud.cn.
- If you use an OBS private bucket, enable OBS authorization and select the Private bucket option. Otherwise, origin pull will fail.
- To use a custom OBS private bucket as the origin server, configure a policy for the private bucket. For details, see Configuring a Policy for a Custom OBS Private Bucket.
- If you have enabled static website hosting for your OBS bucket, select the Static website hosting checkbox when adding a domain name. In this way, a full list of files in the bucket will not be displayed when users access the bucket.
- When back-to-source by mirroring is configured on OBS and range requests are enabled on CDN, if the mirror origin server does not comply with the RFC Range Requests standard, the response to range requests is not 206 and CDN fails to pull content. In this case, submit a service ticket.

Quotas

Item	Description
Domain name quota	Quotas are enforced for service resources on the platform to prevent unforeseen spikes in resource usage. Quotas limit the number or amount of resources available to users. If an existing quota cannot meet your service requirements, submit a service ticket to increase it. Domain names: 100 Cache purge (file): 2,000 records/day. Cache purge (directory): 100 records/day. Cache prefetch: 1,000 records/day. If an existing quota cannot meet your service requirements, submit a service ticket to increase it. Ensure you meet these prerequisites: If the average daily peak bandwidth of your domain name is greater than 50 Mbit/s and there is no service risk, you can submit a service ticket to increase the domain name quota. If the daily peak bandwidth of your domain name is greater than 200 Mbit/s, you can submit a service ticket to increase the purge/prefetch quota. Huawei Cloud CDN will assess and adjust the quota based on your service needs.

Item

Description

Domain name quota

Quotas are enforced for service resources on the platform to prevent unforeseen spikes in resource usage. Quotas limit the number or amount of resources available to users. If an existing quota cannot meet your service requirements, submit a service ticket to increase it.

Domain names: 100
Cache purge (file): 2,000 records/day.
Cache purge (directory): 100 records/day.
Cache prefetch: 1,000 records/day.

If an existing quota cannot meet your service requirements, submit a service ticket to increase it. Ensure you meet these prerequisites:

If the average daily peak bandwidth of your domain name is greater than 50 Mbit/s and there is no service risk, you can submit a service ticket to increase the domain name quota.
If the daily peak bandwidth of your domain name is greater than 200 Mbit/s, you can submit a service ticket to increase the purge/prefetch quota. Huawei Cloud CDN will assess and adjust the quota based on your service needs.

Access Control

Item	Description
Request method	GET, PUT, POST, and DELETE
HTTPS access	If a client does not transfer the Server Name Indication (SNI) information when setting up an SSL handshake with a CDN PoP, the PoP cannot ensure a successful handshake.
URL length, HTTP request header length, and total length of the URL and all HTTP request headers	HTTP/1.1: The large_client_header_buffers parameter of CDN is set to number=4 and size=64 KB. That is, a single HTTP request header or URL must stay under 64 KB. Otherwise, a 414 error is returned. The combined length of a URL and all HTTP request headers cannot exceed 256 KB, or a 400 error is returned. HTTP/2: By default, the Nginx parameter http2_max_field_size is set to 64 KB. That is, a single HTTP request header or URL must stay under 64 KB. Otherwise, the TCP connection will be disconnected. By default, the Nginx parameter http2_max_header_size is set to 256 KB. That is, the combined length of a URL and all HTTP request headers cannot exceed 256 KB. Otherwise, the TCP connection will be disconnected.

Item

Description

Request method

GET, PUT, POST, and DELETE

HTTPS access

If a client does not transfer the Server Name Indication (SNI) information when setting up an SSL handshake with a CDN PoP, the PoP cannot ensure a successful handshake.

URL length, HTTP request header length, and total length of the URL and all HTTP request headers

HTTP/1.1: The large_client_header_buffers parameter of CDN is set to number=4 and size=64 KB. That is, a single HTTP request header or URL must stay under 64 KB. Otherwise, a 414 error is returned. The combined length of a URL and all HTTP request headers cannot exceed 256 KB, or a 400 error is returned.

HTTP/2:

By default, the Nginx parameter http2_max_field_size is set to 64 KB. That is, a single HTTP request header or URL must stay under 64 KB. Otherwise, the TCP connection will be disconnected.
By default, the Nginx parameter http2_max_header_size is set to 256 KB. That is, the combined length of a URL and all HTTP request headers cannot exceed 256 KB. Otherwise, the TCP connection will be disconnected.

Other Constraints

Item	Description
Origin pull	The default timeout interval of origin pull is 30s. The total size of HTTP response headers returned by the origin server to CDN PoPs cannot exceed 16 KB. Otherwise, a 502 error is returned.
File	File upload: You can upload a file with up to 300 MB to CDN.
Internet of Things (IoT) subscriber identity module (SIM) access	According to the Notice on Printing and Distributing the Trial Implementation Guidelines for the Security Classification Management of IoT SIM Cards (MIIT Network Security Letter [2020] No. 1173) issued by the MIIT of China, Huawei Cloud CDN cannot provide acceleration services for devices using IoT SIMs in the Chinese mainland. When such devices attempt to access Huawei Cloud CDN, they may fail to connect to PoP IP addresses.
CNAME	CNAME in Huawei Cloud CDN can only be used for scheduling and resolution of Huawei Cloud CDN. If a CNAME is maliciously used, Huawei Cloud has the right to delete the corresponding domain name and account.