All Products
Search
Document Center

ApsaraVideo VOD:Use domain-based access control

Last Updated:Jun 23, 2026

ApsaraVideo VOD allows you to configure Referer-based hotlink protection, User-Agent blacklist or whitelist, IP address blacklist or whitelist, URL signing, and remote authentication for accelerated domain names to control access to your resources.

Configure Referer-based hotlink protection

You can configure a Referer blacklist or whitelist to allow or block requests based on the Referer header. For more information, see Configure a Referer whitelist or blacklist to enable hotlink protection.

Configure a User-Agent blacklist or whitelist

The User-Agent header identifies the client that initiates a request. You can configure a User-Agent blacklist or whitelist to allow or block requests from specific clients. For more information, see Configure a User-Agent blacklist or whitelist.

Configure an IP address blacklist or whitelist

You can configure an IP address blacklist or whitelist to allow or block requests from specific IP addresses. For more information, see IP address blacklist or whitelist.

Configure URL signing

URL signing generates a signed URL that carries an encrypted string and a timestamp. The system authenticates each request against the signed URL and rejects requests that fail authentication. For more information, see Configure URL signing.

Configure remote authentication

Remote authentication works like URL signing but delegates the verification to a self-managed authentication server instead of the points of presence (POPs). When POPs receive client requests, the requests are forwarded to your authentication server for validation. For more information, see Remote authentication.

References

Add a domain name for CDN