If your accelerated domain name is configured with multiple origin servers, the origin protocol is set to HTTPS, and each origin server hosts a different domain name for its web service, you can set different Server Name Indication (SNI) values for each origin server. This ensures that each origin server returns the correct HTTPS certificate to Alibaba Cloud CDN points of presence (POPs) based on the SNI in the request, enabling successful SSL connections.
Differences between a specified and the default origin SNI
A specified origin SNI lets you set a different origin SNI for each origin server.
A default origin SNI means that the same SNI is used for all origin servers.
If you configure both a specified origin SNI and a default origin SNI, the specified origin SNI takes precedence.
Procedure
Log on to the CDN console.
In the navigation pane on the left, click Domain Names.
On the Domain Names page, find the domain name and click Manage in the Actions column.
On the Origin Fetch tab, find the Specify Origin SNI section and click Add.
Configuration
Description
Origin Address
The address of the origin server for which you want to specify an SNI.
SNI HOST
Follow Origin Address:
Effect: The SNI value is the same as the origin server address.
Use case: The origin server address is a domain name, and the origin server requires the SNI to match the origin domain name.
Follow Origin Host:
Effect: The SNI value is the same as the origin HOST.
Use case: The origin server requires the SNI to match the origin host.
Custom:
Effect: Lets you set any SNI value.
Use case: The origin server requires the SNI to match a value that is not the origin domain name or the origin host.
Keep-Alive
Enable: When a POP sends requests to the origin server, each SNI uses a separate persistent connection. This avoids SNI conflicts on shared connections.
Disable: The POP uses a single persistent connection for all requests to the origin server, with only one SNI value.
Click OK.