Before connecting a domain name to Edge Security Acceleration (ESA), it is essential to understand the access conditions and limitations to prevent unnecessary losses.
Item | Description |
Burst bandwidth/QPS throttling rules | If you expect traffic or QPS spikes on ESA-accelerated services, including but not limited to stress tests on bandwidth or QPS, promotional activities, and major releases, you need to contact your account manager or contact us to apply for burst bandwidth at least three business days in advance. For major events including but not limited to the Spring Festival Gala and Double 11 Global Shopping Festival, you need to apply for burst bandwidth at least one month in advance.
|
Potential domain attacks and data transmission abuse | By default, ESA does not provide access control or security protection capabilities. If your domain name is attacked or abused for data transmission, high bandwidth or traffic spikes may occur. In this case, you may receive bills that are higher than expected. High bills generated by attacks or data transmission abuse cannot be waived or refunded. |
Website |
|
Access area | If you set Region to Global (Excluding the Chinese Mainland) for an accelerated domain name, ESA blocks user requests to POPs located in the Chinese mainland. If you set Region to Chinese Mainland for an accelerated domain name, ESA blocks user requests to points of presence (POPs) located outside the Chinese mainland. |
Restrictions on IoT cards | According to the Notice on Printing and Distributing the Trial Implementation Guidelines for the Classification and Security Management of IoT Cards (MIIT Network Security Letter [2020] No. 1173) set forth by the Ministry of Industry and Information Technology (MIIT) of the People's Republic of China, ESA cannot provide acceleration services for devices that use IoT cards in regions in the Chinese mainland. When devices that use IoT cards attempt to access POPs, the devices may fail to establish connections to the IP addresses of the POPs. |
Security violations | Alibaba Cloud reviews the content served on all accelerated domain names. Domain names that cannot be accelerated by ESA include but are not limited to:
Note You are legally responsible for the content hosted on your accelerated domain name. ESA regularly reviews the content served on accelerated domain names. If ESA detects that illicit content is served on a domain name, the system immediately disables or blocks the domain name. If the circumstances are serious, ESA will stop product acceleration service and offline all domain names. |
Files |
|
Length of an individual URL or HTTP request header, and total length of URLs and HTTP request headers | HTTP/2:
HTTP/1.1: For the |
Total size of origin HTTP response headers | The total size of HTTP response headers returned from the origin to POPs cannot exceed 32 KB. Otherwise, the HTTP 502 status code is returned. |
Gzip compression and Brotli compression | You can use the Gzip compression or Brotli compression feature to compress the files only if the size of files on the origin server ranges from 1 KB to 10 MB. Files that are smaller than 1 KB or larger than 10 MB are not compressed. |
Port | ESA POPs provide the following access ports:
By default, only static requests on ports 80, 443, and 8080 can be cached. If you want to cache other special ports, you must enable the Custom Port Cache feature in the Cache Rule section. |
TCP connection timeout between a client and POP | Default: 30 seconds. If a client fails to establish a TCP connection with an POP within 30 seconds, the POP closes the connection. |