What's New

1

SCM Authorization

If your certificate has been uploaded to Cloud Certificate Manager (CCM) of Huawei Cloud, you can enable SCM authorization so that you can directly obtain the certificate content when configuring certificates on CDN.

Commercial use

SCM Authorization

1

Monitoring Dashboard

If you have reported metrics related to acceleration domain names to Cloud Eye, you can view them on the monitoring dashboard.

Commercial use

Monitoring Dashboard

1

Client Certificates

You can configure a client certificate to enforce mutual certificate authentication between the clients and CDN PoPs, securing website communication.

Commercial use

Client Certificates

1

Configuring a Shared Cache Group

If different domain names point to the same resources, you can configure a shared cache group and set a primary domain name. Other domain names in the group share the cache of the primary domain name, improving the cache hit ratio.

Commercial use

Configuring a Shared Cache Group

1

Copying Domain Configuration to New Domains

You can copy the configuration of an existing domain name to one or more new domain names. This saves the configuration time, allowing you to quickly add and customize domain names.

Commercial use

Copying Domain Configuration to New Domains

1

Usage Cap

You can set a traffic or bandwidth cap for a domain name. When the usage reaches the cap, CDN acceleration will be disabled for the domain name, reducing high bills caused by traffic theft or attacks.

Commercial use

Usage Cap

1

Access URL Rewrite

Set access URL rewrite rules to redirect user requests to the URLs of cached resources.

Commercial use

Access URL Rewrite

2

Browser Cache TTL

Customize the cache time to live (TTL) of client browsers to reduce the pull rate. When a user requests a resource, if the resource is cached in their browser, the resource is directly returned. Otherwise, the browser will request resource from a CDN PoP.

Commercial use

Browser Cache TTL

1

Origin SNI

If your origin server IP address is bound to multiple domains and CDN visits the origin server using HTTPS, you can set the Server Name Indication (SNI) to specify the domain to be visited by CDN.

Commercial use

Origin SNI

1

Cloud Eye Monitoring

Commercial use

Cloud Eye Monitoring

1

IP Access Frequency

You can restrict the number of queries per seconds (QPS) from a single IP address to a single PoP to defend against CC attacks and malicious theft.

Commercial use

IP Access Frequency

1

Request Rate Limiting

Limit the user request rate within a specific range to reduce costs and the risk of burst bandwidth.

Commercial use

Request Rate Limiting

2

HSTS

HTTP Strict Transport Security (HSTS) is a web security protocol promoted by Internet Engineering Task Force (IETF). HSTS forces clients (such as browsers) to use HTTPS to access your server, improving access security.

Commercial use

HSTS

3

QUIC

CDN supports QUIC of the IETF-v1 (H3) version.

Commercial use

QUIC

1

Exporting statistics

CDN allows you to export statistics from different dimensions (such as domain names and accounts).

Commercial use

Export Tasks

1

Tag Management

Tags help you identify your cloud resources. When you have many cloud resources of the same type, you can use tags to classify them by dimension (for example, use, owner, or environment). You can quickly search for specific cloud resources based on the tags added to them.

Commercial use

Tag Management

1

The SCM certificate can be configured.

CDN automatically obtains SSL certificates uploaded to the CCM console. You only need to select the desired one from the drop-down list.

Commercial use

HTTPS Certificates

2

WebSocket Settings

If you have enabled whole site acceleration in scenarios such as on-screen commenting, collaborative session, market data broadcast, sports live update, online education, and IoT, you can configure WebSocket to implement long-term bidirectional data transmission.

Commercial use

WebSocket Settings

1

Advanced Retrieval

You can configure advanced content retrieval to allow CDN to retrieve content from different origin servers based on different URL paths, improving content retrieval efficiency.

Commercial use

Advanced Retrieval

2

IP addresses with port numbers for referer validation

When configuring referer validation, you can configure IP addresses with port numbers. The maximum port number is 65535.

Commercial use

Configuring Referer Validation

1

Changing the Service Type

If the services of your domain name change and its service type cannot meet your requirements, you can change the service type on the CDN console.

Commercial use

Changing the Service Type

1

Video Seek

Video seek allows you to drag the playback progress bar smoothly when watching a video.

Commercial use

Video Seek

1

Refreshing only updated resources during directory cache refreshing

When refreshing the cache of a directory, you can refresh all files or updated resources in the directory.

Commercial use

Cache Refreshing

1

Configuring Remote Authentication

Huawei Cloud CDN supports remote authentication. When a user requests a resource from a CDN node, CDN forwards the user request to a specific authentication server and determines whether to return the resource to the user based on the result returned by the authentication server.

Commercial use

Configuring Remote Authentication

1

Custom error pages responded to user requests

When an error is reported during user access, an error page is displayed on the user client. You can customize the error page on the CDN console to optimize user experience.

Commercial use

Custom Error Pages

2

Status code cache age

When a CDN node retrieves a resource from the origin server, the origin server returns a response status code. You can set the cache age of the status code on the CDN console. When a client requests the resource again, content retrieval will not be triggered, reducing the retrieval ratio and the pressure on the origin server.

Commercial use

Status Code Cache Age

3

TLS version settings

You can configure TLS versions on the CDN console as required.

Commercial use

TLS Versions

4

Timeout interval for CDN nodes to retrieve content

If the content requested by a user is not cached on CDN nodes, CDN retrieves the content from the origin server. The default timeout interval of a retrieval request is 30s. If the request times out, the request fails. You can adjust the retrieval timeout interval based on the service features and network status of your origin server to ensure normal content retrieval.

Commercial use

Retrieval Timeout Interval

5

Client requests for accessing CDN using IPv6

You can enable IPv6 to allow clients to access CDN nodes using the IPv6 protocol and allow CDN to carry IPv6 client IP addresses to access your origin server.

Commercial use

Configuring IPv6

1

Position of configuring the retrieval host on the console

Original: on the Retrieval Settings tab

New: on the Basic Settings tab

Commercial use

Retrieval Host

2

Standby origin servers for OBS bucket domain names

If the origin server of an acceleration domain name is an OBS bucket, you can add a standby origin server, but the standby origin server cannot be an OBS bucket.

Commercial use

Modifying Origin Server Details

3

Online Certificate Status Protocol (OCSP) stapling

When OCSP stapling is enabled, CDN queries and caches the status of online certificates in advance and returns the status to a browser when establishing a TLS connection with the browser. This means that the browser does not need to query the status from CAs, accelerating the verification.

Commercial use

OCSP Stapling

4

Changing the service area of acceleration domain names

You can change the service area of an acceleration domain name on the console.

Commercial use

Changing the Service Area

1

Brotli compression

Brotli compression can be configured on the CDN console to save you a lot of bandwidth by reducing file size and speed up file transfer. The performance of Brotli compression is 15% to 25% higher than that of gzip compression.

Commercial use

Smart Compression

1

Retrieval request URL rewrite

If the URLs of content retrieval requests do not match the origin server URLs, content retrieval fails. You can rewrite retrieval request URLs to those that match the origin server, improving the content retrieval hit ratio.

Commercial use

Rewriting Retrieval Request URLs

1

Basic domain configuration export

You can export the basic configuration of all domain names to an Excel file on the Domains page of the CDN console.

Commercial use

Domain Name Management

2

Domain names with ports for referer validation

Domain names with ports can be added to referer whitelists/blacklists. The maximum port number is 65535.

Commercial use

Configuring Referer Validation

3

IPv6 address access control

IPv6 addresses can be added to IP address whitelists/blacklists.

Commercial use

Configuring an ACL

1

Statistics adjustment

The statistics function and the position of reports on the CDN console were adjusted.

Commercial use

Statistical Analysis

2

User-Agent blacklists/whitelists

You can configure a User-Agent blacklist or whitelist for your domain name to identify and filter visitors for higher security.

Commercial use

Configuring a User-Agent Blacklist or Whitelist

1

URL signing

You can sign URLs for authentication on the CDN console.

Commercial use

Configuring URL Signing

2

Origin server verification

You need to verify your origin server added to CDN for the first time.

Commercial use

Origin Server Verification

1

Adding domain names for whole site acceleration on the console

You can add domain names for whole site acceleration on the CDN console.

Commercial use

Adding a Domain Name

1

Custom retrieval request headers

You can customize retrieval request headers.

Commercial use

Retrieval Request Headers

1

Origin cache control

You can configure origin cache control on the CDN console.

• If Cache-Control: max-age is configured for the origin server, you can enable origin cache control. In this case, Cache-Control: max-age determines how long content can be cached.

Commercial use

Origin Cache Control

2

Homepage caching

You can configure to cache the homepage (root directory) and its maximum cache age on the console.

Commercial use

Cache Rules

3

Gzip compression

You can configure gzip compression on the CDN console.

• If gzip compression is enabled, CDN automatically compresses your static files.
• Gzip compression can save you a lot of bandwidth by reducing file size and speeding up file transfer.

Commercial use

Gzip Compression

4

Custom ports

You can set custom origin ports on the CDN console.

Commercial use

Modifying Origin Server Details

1

HTTPS TLSv1.3 support

TLSv1.3 delivers better security, performance, and privacy and faster HTTPS connections.

Commercial use

TLS Versions

1

Content consistency check

During transmission, CDN checks content consistency and reports alarms if any inconsistencies are found to ensure content security.

Commercial use

Data Protection Technologies

1

Auto-propagation of popular content

When a sports event or hit TV series goes online, the most requested content is propagated from a single node to all nodes to ensure fast and stable acceleration.

Commercial use

Progressive Knowledge

1

Bandwidth throttling

CDN collects bandwidth usage data and takes actions such as blocking, single request rate limiting, and custom behaviors to effectively limit bandwidth usage and further save money for customers.

Commercial use

Progressive Knowledge

1

CC attack monitoring

You can create custom rules to detect CC attacks and block them so that your content distribution would be secure.

Commercial use

How Does CDN Respond to CC Attacks?

1

Service termination policy can be customized.

About the Feature:

If a domain name meets conditions for service termination, CDN will ban the domain name and stop providing acceleration services for it. You cannot perform any configuration operations on the domain name after it is banned. You can customize the service termination policy on CDN Console. Either Redirect to origin server or Disable domain name can be selected.

Service termination scenarios:

HUAWEI CLOUD will terminate the CDN service of a domain name in several scenarios.

• As required by the Ministry of Industry and Information Technology (MIIT), HUAWEI CLOUD can only provide services for licensed domain names. If the ICP license of a domain name expires, its CDN service is terminated.

• HUAWEI CLOUD CDN periodically reviews your domain name content. If a domain name violates regulations, specifically, contains sexually-explicit, illegal drug, gambling, or extremist content, its CDN service is terminated.

• If a domain name is under attack and the attacks affect other CDN users or pose risks to CDN, its CDN service is terminated.

• If your account is in arrears and is not topped up within the specified time, HUAWEI CLOUD will terminate CDN services for all domain names in your account.

Commercial use

Service Termination Policy

1

A new CDN domain name configuration page goes online.

About the New Page:

Compared with the old version, the new version has the following advantages:

• The appearance is more pleasing to the eye.

• Configuration items are re-classified to improve GUI usability.

• The configuration parameters are easy to find.

Commercial use

Domain Name Settings

1

The new overview page of the CDN goes online.

About the New Page:

The new version of the overview page has gone online. The following modules are added to the new version:

• Traffic package use

• Request hit ratio and total number of requests

• Related help links

Commercial use

Basic CDN Functions

1

OBS private bucket retrieval is supported.

About the Feature:

If a user has OBS private buckets, the user can enable the private bucket retrieval function and set OBS private buckets as the target origin for content retrieval.

Notes:

• Before setting private bucket retrieval, you need to authorize OBS access to CDN. After successful authorization, CDN has the permission to access your OBS private buckets.

• If it is inappropriate to use your OBS private buckets as origins of an acceleration domain name, do not authorize or enable private bucket retrieval.

• If your domain name is vulnerable to attacks, use security protection measures to remove potential risks. Otherwise, do not authorize or enable private bucket retrieval.

Commercial use

OBS Private Bucket Retrieval

2

Values of HTTP headers can be customized.

HUAWEI CLOUD CDN supports customization for six HTTP response headers: Content-Disposition, Content-Language, Access-Control-Allow-Origin, Access-Control-Allow-Methods, Access-Control-Max-Age, and Access-Control-Expose-Headers. You can configure values for such headers on the HTTP header page.

Commercial use

HTTP Header Settings (Cross-origin Requests)

1

302 redirect retrieval is provided.

You can enable 302 redirect retrieval by one click. For an origin server where 302 redirect is implemented, when a CDN node sends a content retrieval request to the origin server, a 302 redirect status code is returned. If 302 redirect retrieval is enabled, a CDN node retrieves content from the redirected address and caches the content. When another user requests for the same content, the node cache is directly hit.

Commercial use

Redirect Retrieval

2

The log combination tool goes online.

About the Tool:

You can use the log combination tool to combine logs of a specific day in the last 14 days and download the logs. Then you can analyze the access to your service resources in detail.

Restrictions:

Before using the log combination tool, you must obtain access keys.

Commercial use

Log Management

3

Configuring the IP address blacklist is supported.

You can configure an IP address blacklist to filter out requests from specific IP addresses. Both IP addresses and network segments can be added to the blacklist.

Commercial use

Configuring an ACL

4

The traffic package management page is added.

If you are billed by traffic, you can save money by buying a traffic package on the Traffic Packages page. On that page, you can track your usage by reviewing the used and remaining traffic in your current traffic package.

Commercial use

Package Management

5

Range-based retrieval speeds up large file response.

About the Feature:

In Range-based retrieval, the origin server sends data of a specified range to a CDN node based on the range information in the HTTP request header. Range information specifies the positions of the first and last bytes for the data to be returned. For example, Range: bytes=0-100 indicates that the first 101 bytes of the file are required. Range-based retrieval shortens the distribution time of large files, improves retrieval efficiency, and reduces content retrieval consumption.

Restrictions:

To enable Range-based retrieval, the origin server must support Range requests. Otherwise, content retrieval may fail.

Commercial use

Range-based Retrieval

1

The tool for querying node IP address homing goes online.

If the content shown on the access page of the acceleration domain name is abnormal, you can use the node IP address checking tool to check whether the specified IP address is the IP address of a HUAWEI CLOUD CDN node. In this way, you can know whether the abnormality is caused by the carrier network or other reasons. If the check result shows that the IP address is not that of a HUAWEI CLOUD CDN node, the problem may lie in the carrier network. In this case, contact your carrier. If the IP address belongs to a HUAWEI CLOUD CDN node, contact HUAWEI CLOUD customer service.

Commercial use

Checking Node IP Addresses

1

HUAWEI CLOUD CDN supports whole site acceleration.

Application Scenarios:

CDN is a good option for websites that consist of both dynamic and static content and for sites that involve a large number of ASP, JSP, or PHP requests. CDN's whole site acceleration accelerates both dynamic and static content. Static content can be accessed from nearby nodes, while dynamic content is retrieved from the origin server through the optimal route. As CDN contributes to whole site acceleration and real-time optimization, dynamic pages can be loaded more quickly by bypassing congested routes.

Restrictions:

Online configuration is not available yet. Submit a service ticket if you want to use this service.

Commercial use

Application Scenarios

1

Acceleration outside the Chinese mainland is available.

About the Feature:

The acceleration area of HUAWEI CLOUD CDN is expanded. Service areas include Chinese mainland, Global (Chinese mainland not included), and Global. You can choose the service area that suits you best.

Restrictions:

Only the Chinese mainland service area can be configured for your domain names. If your domain name needs to be accelerated outside the Chinese mainland or globally, submit a service ticket. To add a domain name whose service area is Chinese mainland or Global, you must complete real-name authentication with HUAWEI CLOUD. Real-name authentication is not required if the service area is Global (Chinese mainland not included).

Commercial use

Adding a Domain Name

1

HTTP/2 support

About the Feature:

HTTP/2 is the latest version of the Hypertext Transfer Protocol (HTTP). HTTP/2 greatly optimizes the performance based on HTTP/1.1 and is compatible with HTTP/1.1 semantics. Mainstream browsers, such as Chrome, Firefox, Safari, and Internet Explorer 11, support HTTP/2. However, if you use HUAWEI CLOUD CDN, you can enable HTTP/2 on the CDN console without any reconstruction on your origin server.

Restrictions:

Addresses in the format of http://url can use only the HTTP/1.x protocol, and those in the format of https://url support HTTP/2. The prerequisite for enabling HTTP/2 acceleration is that your domain name has been configured with HTTPS secure acceleration.

Commercial use

HTTP/2

2

Access statistics for multi-dimensional analysis

About the Feature:

Statistics on hot URLs and detailed statistics by region or carrier help you know the following information:

• Statistics on the top 100 URLs in terms of traffic usage and the number of requests for your accelerated domain name

• Statistics on the traffic/bandwidth consumption and the number of requests for your accelerated domain name, measured by region or carrier

Restrictions:

• You can query statistics over the past 90 days.

• The maximum time span of a query is 31 days.

Commercial use

Statistics Description

1

Domain name-related statistical charts are available.

About the Feature:

Charts about usage statistics, access statistics, and origin server statistics are provided to help you learn about the following information:

• The traffic and bandwidth consumed by the accelerated domain name

• Statistics related to access to your service resources

• Statistics on content retrieval when a customer accesses your accelerated domain name

Restrictions:

• You can query statistics over the past 90 days.

• The maximum time span of a query is 31 days.

Commercial use

Statistics Description

1

CDN service is rolled out.

Product Introduction:

Content Delivery Network (CDN) accelerates content delivery to edge nodes so that your websites load faster.

Application Scenarios:

• Website

• File download

• On-demand service

Commercial use

Progressive Knowledge