:Basic security features

If you want to protect your accelerated domain name against Distributed Denial of Service (DDoS) or HTTP flood attacks, we recommend that you use Dynamic Content Delivery Network (DCDN). For more information, see DCDN. Alibaba Cloud CDN provides the following basic security features:

• Hotlink protection

  The Referer header field in a HTTP request can be used to trace and identify the source of the HTTP request. You can configure hotlink protection based on the Referer field to filter requests. In the Alibaba Cloud CDN console, you can configure a Referer whitelist or blacklist to specify whether requests that contain empty Referer header fields are allowed. Hotlink protection filters source host addresses by URL. You can specify source addresses in the Referer whitelist or blacklist. The Referer whitelist and blacklist are mutually exclusive. You can use them to implement access control. For more information, see Configure a Referer whitelist or blacklist to enable hotlink protection.

• IP blacklist

  You can configure an IP address blacklist to restrict requests from specific IP addresses. For more information, see Configure an IP address blacklist or whitelist.

• URL signing

  The URL signing feature protects origin servers from unauthorized access. You can configure a rule for signing specific URLs with the key information provided in the specified signing type. This feature can be used to authenticate requests that attempt to access classified files. Clients have to calculate a temporary signature for each request. We recommend that you do not enable this feature for the delivery of unclassified files. Compared with the use of unsigned URLs, it takes more time to retrieve resources from origin servers. For more information, see Configure URL signing.