Feature Overview

By default, most content delivered by CDN is open to the public, which can be obtained by directly using a request URL. To prevent website resources from malicious downloads and unauthorized use and avoid bandwidth waste, you can configure URL authentication in eSurfing Cloud CDN. After URL authentication is configured, CDN verifies encrypted strings and timestamps, thus protecting website resources.

Application Scenarios

When you need to limit user access to website resources, protecting the resources against malicious downloads and unauthorized use.

Additional Considerations

For the URL authentication feature to take effect, you must enable the feature on both client and CDN, which means that the tokens for authentication should be carried in the request URL from client side.
After URL authentication is enabled, if clients carry the tokens via query strings in the request URL. We recommend that you set your cache policy to ignoring the query strings parameters when caching. Otherwise, the requests with different token values will be passed to origin and may cause traffic spikes on origin or origin overload. Please refer to Cache key settings.
If your authentication URL contains Chinese characters or special characters, encode the URL before you use it.

Procedures

Log in to the CDN console.
Go to Domain Management -> Domain List page.
On the Domain List page, find the target domain name, and click Edit in the Actions column.
Click Access Control .
Click URL Authentication tab.
Turn on URL Authentication switch, it is off by default.
Select type and input corresponding information.
Click save and submit.

eSurfing Cloud CDN provides three kinds of authentication method, please refer to the following pages for details:

Content Delivery Network

URL authentication configuration