ACL

The ACL, compared to the Firewall, allows for more granular adjustments based on conditions. This feature is not enabled by default. If you have a need for it, please contact customer service to have it activated.

How to Set Up the Advanced Firewall?

• After having customer service assist in enabling it

• Sites → Sites Settings → Advanced Firewall

  

Operation Instructions

• Add Advanced Firewall Configuration Set > Custom Condition Name

  

• Clicking on the name will take you to the settings fields.

  

Advanced Firewall Field Descriptions

• Rule Name: Customizable

• Priority: The higher the number, the higher the system's adoption priority

• Condition Field Descriptions:

  • Cookie

  • Geolocation

    • Can restrict or allow access from specific continents or countries' IPs

  • IP, e.g., 1.1.1.1

  • Referrer Domain, i.e., referer, a field in the HTTP request header indicating from where the current page was linked

  • Request Method

    • GET, POST, PUT, DELETE, PATCH

  • URI Path

    • e.g., https://aaa.com/321.jpg

  • URI String

  • User Agent: e.g.,

    • Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0

  • Headers: Can block based on various Headers, including:

    • Content-Type

    • X-XSS-Protection

    • X-Frame-Options

    • Cache-Control

    • Cookie

    • Origin

    • Referer

  • Access Frequency: Can set a frequency limit of 30 visits within 60 seconds, with operators being >, <, >=, <=

• Actions After Matching:

  • ALLOW: Allows access if conditions are met

  • DENY: Denies access

  • DROP: Drops the packet

  • DROP+Blacklist: Drops the packet and adds the IP to the blacklist

  • 301 Redirect: Redirects matching access to a specified URL

• After setting the conditions, apply them in the domain settings and click "Confirm" to take effect

  

  

---

Advanced WAF (Beta)

WAF (Web Application Firewall), as a security protection system for CDNs, can effectively defend against various web attack methods. This includes preventing malicious SQL injection attacks, cross-site scripting (XSS) attacks, blocking the upload of backdoor programs, and preventing unauthorized access to sensitive resources, thereby ensuring the stability and security of websites.

How to Set Up Advanced WAF?

• Sites → Sites Settings → ACL → Advanced WAF (Beta) → Click "Create Advanced WAF Configuration Set"

  

• Customize the name you need, then choose the protection you want to apply.

  
• aaaaa