The best practices for CDN compliance management are based on the best practices of Alibaba Cloud CDN and help you check the compliance of the service in terms of access control, cache configuration, performance, and costs. This topic describes the default rules in the best practices for CDN compliance management.
Rule name | Rule description |
Checks whether the Transport Layer Security (TLS) 1.3 protocol is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant. | |
Checks whether a CDN cache and a cache expiration rule are configured for each domain name. If so, the evaluation result is compliant. | |
Checks whether HTTPS encryption is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant. | |
Checks whether the origin server of each domain name accelerated by Alibaba Cloud CDN is set to an Object Storage Service (OSS) domain name and the type of the origin server is set to OSS. If so, the evaluation result is compliant. | |
Chects whether IPv6 is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant. | |
Checks whether Brotli compression is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant. | |
Checks whether ocsp-stapling is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant. | |
Checks whether HTTP-HTTPS force redirection is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant. | |
Checks whether object chunking is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant. | |
Checks whether parameter ignorance is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant. | |
Checks whether GZIP compression is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant. | |
Checks whether URL signing is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant. | |
Checks whether referer-based hotlink protection is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant. |