Configuring HTTPS Acceleration
Configuring HTTPS acceleration helps protect your VOD resources. HTTPS is enabled by default for domain names allocated by VOD. If you use your own domain name for VOD acceleration, you must manually enable HTTPS. Without HTTPS enabled, previewing and playing media files on the VOD console will not be possible.
Background
Forcible Direction to HTTPS: After configuring an HTTPS certificate, you can optionally enable Forcible Direction to HTTPS. When enabled, the server returns a 302 response to HTTP requests and redirects users to HTTPS.
HTTP 2.0: The HTTP/2 specification was published as RFC 7540 in May 2015. The standardization effort was supported by Chrome, Opera, Firefox, Internet Explorer 11, Safari, Amazon Silk, and Edge browsers.
- HTTPS is a network protocol constructed based on SSL and HTTP for encrypted transmission and identity authentication. It is more secure than HTTP and prevents data from being stolen or tampered with during transmission, ensuring data integrity.
- Key user information is encrypted to prevent session IDs or cookies from being captured by attackers.
- Multiplexing: Multiple HTTP requests can be sent and responses can be received asynchronously via a single TCP connection.
- Binary framing: All HTTP/2 communication is split into smaller messages and frames, each of which is encoded in binary format to replace plaintext transmission in HTTP/1.x.
- Server push: A server can actively push responses into client caches, speeding up web page loading.
- Header compression: HTTP/2 uses the HPACK algorithm designed for header compression. It compresses the message header and creates an index table for the message header. For the same message header, only the index number is sent, reducing the transmission of header data.
Prerequisites
- A domain name has been configured. For details, see Configuring Domain Names.
- The HTTPS certificate has been prepared. If no HTTPS certificate is available, access the SSL Certificate Manager to buy an HTTPS certificate.
- The HTTPS certificate format must meet the requirements. If your certificate is not in PEM format, convert the certificate to the PEM format.
Enabling HTTPS
- Log in to the VOD console.
- In the navigation pane, choose Domain Name Management.
- Locate your domain name and click Configure in the Operation column. On the displayed page, select the HTTPS Settings tab.
- Click Edit on the right of HTTPS Settings. The HTTPS Acceleration dialog box is displayed, as shown in Figure 1.
- Turn on the switch and set HTTPS parameters shown in Figure 2. For details about parameter settings, see Table 1.
Table 1 Certificate settings Parameter
Description
Certificate Source
Source of the HTTPS certificate.
Options:
- Self-owned Certificate
- SCM Certificate
Self-owned certificate settings
Set the certificate name, use a text editor to open the obtained certificate file and private key file, and copy the content to the Certificate Body and Private Key text boxes. Certificates issued by different organizations are different:- If your certificate is issued by the root CA, the certificate is a complete certificate. Copy the certificate content. Figure 3 HTTPS certificate
- If your certificate is issued by an intermediate CA, the certificate file contains multiple certificates. You need to combine all the certificates into a single certificate. For details, see Certificates Issued by Intermediate CAs.
SCM certificate settings
VOD automatically obtains SSL certificates uploaded to the CCM console. You only need to select the desired one from the drop-down list.
- Select whether to enable Forcible Redirection to HTTPS and HTTP2.0.
- Forcible Redirection to HTTPS: If this function is enabled, all requests for accessing media in VOD are forcibly redirected to HTTPS.
- HTTP2.0: If this function is enabled, all requests for accessing media in VOD comply with the HTTP/2 protocol.
- Verify whether HTTPS secure acceleration has taken effect.
If the playback URL begins with https:// and the audio or video plays successfully from that URL, HTTPS secure acceleration has taken effect.
Updating a Certificate
If your certificate is about to expire or has been revoked, you need to synchronize the new certificate to the HTTPS settings. The procedure of updating a certificate is the same as that of enabling HTTPS.
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot

