Overview

The access control configuration module introduces the features that can be used in eSurfing Cloud CDN to limit user access.

Features

These features help meet various customer requirements for hotlink protection and control the overall acceleration bandwidth to reduce costs.

Feature	Description
Referer blacklist/whitelist	Referer-based hotlink protection allows you to configure access control rules based on the Referer field in HTTP request headers. This feature can be used to identify and filter user sources, preventing unauthorized use of website resources.
IP backlist/whitelist	A client IP address is the IP address used to establish a connection from a client to a CDN point of presence (POP). CDN can use this feature to identify client IP addresses for filtering user requests and deny or allow access from specific IP addresses. This feature can be used to solve various issues, such as malicious access and attacks from stolen IP addresses.
UA blacklist/whitelist	User-Agent is an HTTP request header, which indicates the terminal identifier of a user. CDN can identify terminals based on the User-Agent field in HTTP request headers. This way, CDN can limit user behaviors and deny or allow access from users of a specific type, thus achieving hotlink protection, attack prevention, and prevention of malicious access from stolen IP addresses.
URL authentication	To prevent website resources from malicious downloads and unauthorized use and avoid bandwidth waste, you can configure URL authentication. After URL authentication is configured, CDN verifies encrypted strings and timestamps, thus protecting website resources.
Remote authentication	After synchronous remote authentication is configured, a CDN POP can forward a user request to a preset authentication server after it receives the request. If the user request passes the authentication, the POP returns the requested content to the user. This feature can ensure that user authentication rules are defined on the origin server.
Bandwidth limits	This feature allows you to set a bandwidth cap to control the total bandwidth usage, thereby preventing additional fees due to bandwidth spikes.

Content Delivery Network

Access Control Overview