Origin Protocol Policy Check

Rule Details

**Table 1** Rule details
Parameter	Description
Rule Name	cdn-origin-protocol-no-http
Identifier	Origin Protocol Policy Check
Description	If the protocol used for CDN origin pulls is not HTTPS, the check result is non-compliant.
Tag	cdn
Trigger Type	Configuration change
Filter Type	cdn.domains
Rule Parameters	None

Application Scenarios

If CDN PoPs did not cache the requested resources, the CDN PoPs pull the resources from the origin server and caches them. For details, see CDN Origin Pull Principle. To secure data transmission, you need to set protocol used for origin pulls to HTTPS.

Solution

Modify the origin pull protocol by referring to Origin Protocol.

Rule Logic

If the protocol used for CDN origin pulls is not HTTPS, the check result is non-compliant.
If the protocol used for CDN origin pulls is HTTPS, the check result is compliant.

Parent topic: Content Delivery Network (CDN)

Previous topic: CDN Domains Use HTTPS Certificates

Next topic: TLS Version Check