Feature Overview

The referer-based hotlink protection feature allows you to use a referer whitelist or blacklist to configure access control rules based on the Referer field in HTTP request headers. This feature can identify and filter users, preventing unauthorized use of website resources. After you configure a referer whitelist or blacklist, CDN allows or denies requests based on user identities. If a request is allowed, CDN returns the URL of the requested resource. Otherwise, CDN returns the 403 status code.

Procedure

Log in to the CDN console.
Go to Domain Management -> Domain List page.
On the Domain List page, find the target domain name, and click Edit in the Actions column.
Click Access Control .
Click the Referer-based Hotlink Protection tab.
Turn on the Referer-based Hotlink Protection switch to enable the feature. By default, the feature is disabled.
Turn on Allow Empty Referer if needed.
Select Trustlist or blocklist as the type. You can specify up to 400 unique referers for each type. Separate the referers with line breaks. A referer can contain wildcard characters, IP addresses, and port numbers. Example: *.test.com, test.com:80, 127.0.0.1:80, and localhost.
After the configuration is complete, submit and save the information.

Content Delivery Network

Referer blacklist/whitelist