Updated on 2022-08-02 GMT+08:00


Can a Rejected Domain Name Be Modified and Re-added to CDN?

No. The rejection of a domain name usually means that this domain name has not been licensed by China's MIIT. CDN does not support unlicensed domain names. For domain names that are being licensed by China's MIIT, the system will scan them regularly. Once these domain names are licensed, their status will be switched to Enabled automatically.

What Can I Do If the ICP License of an Acceleration Domain Name Expires?

You must apply for a new license from the MIIT.

  • If a new license is obtained before the original one expires, your CDN service is not affected.
  • If a license has expired and no new license has been obtained yet, CDN bans the domain name. After obtaining a new license, you can apply to unban the domain name on the CDN console. For details, see Reviewing a Domain Name.

If the ICP License of an Acceleration Domain Name Expires, Does CDN Still Provide Services?


  1. You should obtain a new ICP license as soon as possible.
  2. Have your domain name reviewed. Then, CDN can be enabled for the domain name. For details about how to review a domain name, see Reviewing a Domain Name.

If a license has expired and no new license has been obtained yet, CDN bans the domain name and the acceleration service for it.

Can a Level-2 Domain Be Accelerated If Only Its Level-1 Domain Name Is Licensed by the MIIT, but Its Level-2 Domain Name Is Resolved Outside the Chinese Mainland?

Yes. If the level-1 domain name has been licensed by the MIIT, the level-2 domain name does not need to be licensed. In addition, a domain name that requires acceleration services only outside the Chinese mainland does not need to be licensed by the MIIT.

Can I Use CDN If My Domain Name Is Not Licensed?

If the service area of your domain name is Chinese mainland, obtain an ICP license from the MIIT before using CDN. If the service area of your domain name is Global (Chinese mainland not included), the ICP license is not required before using CDN. For details, see Domain Name Requirements.

Why Do I Get Request Timed Out When Trying to Ping an Acceleration Domain Name?

For security purposes, ping operations are not allowed. You can run the nslookup command to check whether CDN has taken effect. For details, see Verify Whether the CNAME Record Has Taken Effect.

How Do I Deploy CDN and WAF Together?

Resolve your acceleration domain name to CDN, and then change the origin address of your acceleration domain name to WAF's CNAME value. CDN forwards the traffic to WAF. Then WAF filters out the illegitimate traffic and routes only the legitimate traffic back to your origin server. In this way, WAF protects CDN accelerated traffic.

To prevent other users from adding your domain name to WAF in advance (this will cause interference on your domain protection), you are advised to add a subdomain name and TXT record of WAF at your DNS provider.

For details, see Domain Setup with Both CDN and WAF Deployed.

How Do I Check Whether CDN Has Taken Effect?

The length of time before the CNAME record takes effect depends on the DNS provider. To check whether a CNAME record has taken effect:

Open the command line interface that comes with Windows and run the following command:

nslookup -qt=cname Acceleration domain name

If the CNAME record is displayed, the CNAME record has taken effect. A typical command output is shown in the following figure.

What Are the Differences Between an Acceleration Domain Name and an Origin Domain?

  • Acceleration domain names are provided by you for CDN acceleration. A domain name is an identification string that defines a realm of administrative autonomy, authority, or control within the Internet, such as a website, an email address, or an FTP server.
  • An origin domain is the domain name of your origin server.

Can Multiple Acceleration Domain Names Use the Same Origin Server IP Address?

Yes. Different acceleration domain names can use the same origin IP address.

If a Domain Name Is Not Registered on the Chinese Mainland but Its CDN Service Area Is the Chinese Mainland, Is an ICP License Required for It?

Whether a domain name needs to be licensed does not depend on the region of the domain name provider or the area where the website server is located. All that matters is the service area of your domain name. If the service area includes the Chinese mainland, the domain name must be licensed by the MIIT before being added as an acceleration domain name.

Can an Origin Domain Name Be the Same as an Acceleration Domain Name?


When a user requests content on an acceleration domain name, if the desired content is not cached on CDN nodes, CDN nodes need to retrieve content from the origin server. If the origin domain is the same as the acceleration domain name, the user's request will be repeatedly directed to CDN nodes, and CDN nodes will not be able to retrieve content from the origin server.

Can Wildcards Be Used as Part of an Acceleration Domain Name?

Yes. A wildcard, *, allows multiple secondary domain names to be included by the same value. All these secondary domain names point to the same IP address. If you add *.test.com to CDN as an acceleration domain name and have it resolved to the CNAME provided by CDN, all of the level-2 domain names under *.test.com, such as a.test.com, will enjoy CDN acceleration by default. However, level-3 domain names (such as b.a.test.com) would not.

The following are the rules for adding wildcards to domain names:

  • If you add a wildcard to a domain name for a particular account, you cannot add any of the secondary domain names under that domain name to other accounts.
  • Nested structures are not allowed for domain names that include wildcards. For example, if you have added a domain name like *.a.b.com, you cannot add another like *.c.a.b.com or *.b.com.
  • You will be billed for the acceleration service provided to all of the secondary domain names under a wildcard domain name. If there are multiple secondary domain names, billing will be based on the traffic generated by the domain name with the wildcard, not on each of the secondary domain names.