All Products
Search
Document Center

Cloud Config:CDN compliance management best practices

Last Updated:Apr 08, 2024

The best practices for CDN compliance management are based on the best practices of Alibaba Cloud CDN and help you check the compliance of the service in terms of access control, cache configuration, performance, and costs. This topic describes the default rules in the best practices for CDN compliance management.

Rule name

Rule description

cdn-domain-tls13-enabled

Checks whether the Transport Layer Security (TLS) 1.3 protocol is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant.

cdn-domain-enabled-cache

Checks whether a CDN cache and a cache expiration rule are configured for each domain name. If so, the evaluation result is compliant.

cdn-domain-https-enabled

Checks whether HTTPS encryption is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant.

cdn-domain-oss-source-check

Checks whether the origin server of each domain name accelerated by Alibaba Cloud CDN is set to an Object Storage Service (OSS) domain name and the type of the origin server is set to OSS. If so, the evaluation result is compliant.

cdn-domain-ipv6-enabled

Chects whether IPv6 is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant.

cdn-domain-brotli-enabled

Checks whether Brotli compression is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant.

cdn-domain-ocsp-stapling-enabled

Checks whether ocsp-stapling is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant.

cdn-domain-https-force-enabled

Checks whether HTTP-HTTPS force redirection is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant.

cdn-domain-range-enabled

Checks whether object chunking is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant.

cdn-domain-ignore-args-enabled

Checks whether parameter ignorance is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant.

cdn-domain-gzip-enabled

Checks whether GZIP compression is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant.

cdn-domain-aliauth-enabled

Checks whether URL signing is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant.

cdn-domain-referer-enabled

Checks whether referer-based hotlink protection is enabled for each domain name accelerated by Alibaba Cloud CDN. If so, the evaluation result is compliant.