The region-based blacklist feature of Alibaba Cloud CDN identifies the source region of client requests based on the geographic location of the client's IP address. This lets you block access from specific regions or allow access only from specific regions. This helps resolve issues that are caused by high volumes of malicious requests from certain areas. This topic describes how to configure a region-based blacklist or whitelist.
Enable region-based blocking
Log on to the Alibaba Cloud CDN console.
In the navigation pane on the left, click Domain Names.
On the Domain Names page, find the domain name that you want to manage and click Manage in the Actions column.
In the navigation pane for the domain name, click Security Settings.
On the Region Blacklist tab, click Create Rule.
In the Blocking Settings dialog box, select Rule Condition, Blocking Type, Rule Condition, and Regions.
Parameter
Description
Rule Condition
Rule conditions identify various parameters in a user request to determine whether a configuration applies to the request.
Do not use: Do not use rule conditions.
To add or edit rule conditions, manage them in the Rules Engine.
Blocking Type
Blacklist
Requests from regions in the blacklist cannot access any resources under the accelerated domain name.
Whitelist
Only requests from regions in the whitelist can access resources under the accelerated domain name. Requests from all other regions are blocked.
The blacklist and whitelist are mutually exclusive. Only one can be active at a time.
Regions
Specify the regions for the blacklist or whitelist.
Click OK.
Disable region-based blocking
To disable region-based blocking, click Clear. After you delete the configuration, Alibaba Cloud CDN no longer controls access requests based on the specified regions.
Configuration example
Block requests from Andorra that use the HTTP protocol to access the /image path.
In the rules engine, configure a rule to match requests for resources in the /image path that use the HTTP protocol.
On the region-based blocking tab, configure a blocking rule to block requests from Andorra that match the condition.
Rule Condition: Select the rule that you created in Step 1.
Blocking Type: Select Blacklist.
Region Settings: Select Andorra.
Result: If a request matches the rule, a
403 Forbiddenerror is returned with the messagedenied by region block.