service overview - huawei · 2020-04-13 · service overview issue 06 date 2019-05-08 huawei...

29
CDN Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., LTD.

Upload: others

Post on 11-Jun-2020

3 views

Category:

Documents


1 download

TRANSCRIPT

Page 1: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview

Issue 06

Date 2019-05-08

HUAWEI TECHNOLOGIES CO., LTD.

Page 2: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. i

Copyright © Huawei Technologies Co., Ltd. 2020. All rights reserved.

No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.

All other trademarks and trade names mentioned in this document are the property of their respective holders.

Notice

The purchased products, services and features are stipulated by the contract made between Huawei and

the customer. All or part of the products, services and features described in this document may not be

within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,

information, and recommendations in this document are provided "AS IS" without warranties, guarantees or representations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in the

preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base

Bantian, Longgang

Shenzhen 518129

People's Republic of China

Website: https://www.huawei.com

Email: [email protected]

Page 3: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview Contents

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. ii

Contents

1 What Is CDN? ........................................................................................................................... 1

2 Advantages ................................................................................................................................ 4

3 Application Scenarios .............................................................................................................. 6

4 Restrictions.............................................................................................................................. 11

5 Billing ...................................................................................................................................... 13

6 Related Services...................................................................................................................... 18

7 Permissions Management ..................................................................................................... 19

8 Basic Concepts ........................................................................................................................ 24

A Change History ...................................................................................................................... 25

Page 4: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 1 What Is CDN?

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 1

1 What Is CDN?

Content Delivery Network (CDN) is an intelligent virtual network constructed on existing

Internet infrastructure. It delivers network content from origin servers to CDN nodes, so end

users can obtain desired content from nearby nodes. CDN speeds up site response and

improves site availability, breaking through the bottlenecks caused by low bandwidth, heavy

user access traffic, and uneven distribution of network nodes.

Acceleration Principles

When an end user accesses a website that uses HUAWEI CLOUD CDN, the local DNS server

will redirect all the domain name requests to CDN using the CNAME method. Then, based on

a group of preset policies (including content types, geological locations, and network loads),

CDN provides the end user with the IP address of a CDN node that responds the fastest,

enabling the end user to obtain the desired content faster than would have otherwise been

possible. There are two different HTTP request process flows, one where the CDN node

caches the desired content, and one where it does not.

Scenario where the CDN node caches the desired content

Page 5: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 1 What Is CDN?

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 2

Figure 1-1 HTTP request process flow (content cached on the CDN node)

The HTTP request process is as follows:

1. The user enters the domain name of the website to be accessed in the browser and a DNS request is sent to the local DNS server.

2. The DNS request is sent to the authorized DNS server of the website.

3. The DNS server resolves the domain name and finds that the domain name points to www.example.com.c.cdnhwc1.com (CNAME record of the domain name).

4. The request is directed to the CDN service.

5. CDN performs intelligent domain name resolution and provides the end user with the IP

address of a CDN node with the fastest response speed.

6. The user obtains the IP address of the CDN node with the fastest response speed.

7. The end user's browser sends the access request to the CDN node after it receives the IP address of the CDN node.

8. The CDN node returns the required resources to the user.

Scenario where the CDN node does not cache the desired content

Page 6: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 1 What Is CDN?

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 3

Figure 1-2 HTTP request process flow (content not cached on the CDN node)

The HTTP request process is as follows:

1. The user enters the domain name of the website to be accessed in the browser and a DNS

request is sent to the local DNS server.

2. The DNS request is sent to the authorized DNS server of the website.

3. The DNS server resolves the domain name and finds that the domain name points to www.example.com.c.cdnhwc1.com (CNAME record of the domain name).

4. The request is directed to the CDN service.

5. CDN performs intelligent domain name resolution and provides the end user with the IP address of a CDN node with the fastest response speed.

6. The user obtains the IP address of the CDN node with the fastest response speed.

7. The end user's browser sends the access request to the CDN node after it receives the IP address of the CDN node.

8. The CDN node retrieves the required resources from the origin server.

9. The CDN node caches the retrieved resources.

10. The CDN node returns the required resources to the user.

Page 7: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 2 Advantages

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 4

2 Advantages

Abundant Nodes

HUAWEI CLOUD CDN has over 2,000 acceleration nodes in the Chinese mainland and over 500 acceleration nodes outside the Chinese mainland.

The network-wide bandwidth is at least 100 Tbit/s.

Up to now, HUAWEI CLOUD CDN covers more than 130 countries and regions,

connecting to over 1,600 carriers' networks. CDN precisely schedules user requests to

the most appropriate edge nodes, providing efficient and reliable acceleration.

Node distribution outside the Chinese mainland

Security HUAWEI CLOUD CDN provides secure and reliable content delivery services.

Advanced network security functions, such as secure transmission over HTTPS and website anti-leeching, are applied throughout the entire network.

Page 8: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 2 Advantages

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 5

Easy Operation The access mode is simple and fast, and self-service domain name configuration is

provided.

Custom configuration for items including anti-leeching, cache policy, and HTTPS certificates, are all supported.

Customers can analyze statistics, manage logs, and customize cache policies easily.

Robust Reliability

HUAWEI CLOUD CDN supports full service acceleration, including website acceleration, download acceleration, video acceleration, and whole site acceleration.

One-stop acceleration solutions for a range of customers' services improve the overall user experience.

Page 9: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 3 Application Scenarios

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 6

3 Application Scenarios

Website Acceleration

CDN is perfect for websites that require acceleration, including portals, e-commerce

platforms, news apps, and apps used for user generated content (UGC). It provides excellent

acceleration for static content under an acceleration domain name. In addition, it supports

custom cache policies. Users can set the maximum cache age as needed. The files that can be

cached include but are not limited to .zip, .exe, .wmv, .gif, .png, .bmp, .wma, .rar, .jpeg,

and .jpg.

Page 10: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 3 Application Scenarios

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 7

Figure 3-1 Website acceleration

Download Acceleration

CDN is useful for download clients, game clients, app stores, and websites that provide

download services based on HTTP or HTTPS. An increasing number of new services, such as

apps and mobile games, require software updates in real time. Conventional download

services need to provide even more and larger downloads. If origin servers have to handle all

of these requests directly, it places tremendous strain on these servers and results in a

significant bottleneck. With CDN download acceleration, content to be downloaded is

distributed to edge nodes, easing the pressure on origin servers and ensuring high-speed

downloads.

Page 11: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 3 Application Scenarios

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 8

Figure 3-2 Download acceleration

VOD Acceleration

For customers providing on-demand audiovisual services, CDN is a must. Such on-demand

services include online education, video sharing, video-on-demand, and other audiovisual

content. Conventional on-demand audiovisual content puts significant load on the servers and

consumes an enormous amount of bandwidth. When this happens, user experience is

compromised for low-speed services. CDN ensures fast, reliable, secure acceleration for such

services by delivering content to all CDN nodes. Users are then able to obtain that content

from nearby nodes anywhere and anytime.

Page 12: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 3 Application Scenarios

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 9

Figure 3-3 VOD acceleration

Whole Site Acceleration

CDN is a good option for websites that consist of both dynamic and static content and for

sites that involve a large number of ASP, JSP, or PHP requests. CDN's whole site acceleration

accelerates both dynamic and static content. Static content can be accessed from the nearby

node, while dynamic content is retrieved from the origin server through the optimal route. As

CDN contributes to whole site acceleration and real-time optimization, dynamic pages can be

loaded more quickly. Site congestion is reduced and site access is made more reliable.

Page 13: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 3 Application Scenarios

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 10

Figure 3-4 Whole site acceleration

Page 14: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 4 Restrictions

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 11

4 Restrictions

Admission Requirements

Table 4-1 lists requirements for domain names that require CDN acceleration.

Table 4-1 Domain name requirements

Service Area Requirement

Chinese mainland Real-name authentication has been performed on

HUAWEI CLOUD.

The domain name has been licensed by the Ministry of

Industry and Information Technology (MIIT) and the Internet Content Provider (ICP) license is still valid.

Access to content stored in customer's own origin servers

has been censored.

Outside the Chinese

mainland

Access to content stored in customer's own origin servers has

been censored.

Global Real-name authentication has been performed on

HUAWEI CLOUD.

The domain name has been licensed by the Ministry of

Industry and Information Technology (MIIT) and the Internet Content Provider (ICP) license is still valid.

Access to content stored in customer's own origin servers

has been censored.

Whether a domain name needs to be licensed does not depend on the region of the domain name provider or the area where the website server is located. All that matters is the service area of the CDN

acceleration service. If the service area includes the Chinese mainland, the domain name must be licensed by the MIIT before being added as a CDN acceleration domain name.

Page 15: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 4 Restrictions

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 12

Content Moderation

Before accessing your own domain name, the system reviews your site content. CDN does not

support the access of websites that violate related laws and regulations, such as containing

sexually-explicit, gambling, and illegal drug content.

Domain Quota Limits

Quotas are enforced for service resources on the platform to prevent unforeseen spikes in

resource usage. Quotas can limit the number or amount of resources available to users. Table

4-2 describes the restrictions on the number of CDN domain names.

If the existing domain name quota cannot meet your service requirements, submit a service

ticket to request a higher quota.

Table 4-2 Domain quota limits

Resource Default Quota

Domain quantity 100

Files to be refreshed 2,000 per day

Directories to be refreshed 100 per day

URLs to be preheated 1,000 per day

Traffic Packages Only real-name authenticated users can buy traffic packages, and a package can be used

only by the current account of the buyer.

You can use traffic packages only when you are billed by traffic. If you change to be

billed by bandwidth, your purchased packages will be frozen until you switch back.

After a traffic package is purchased, it takes effect at 00:00:00 GMT+08:00 on the day of

purchase. Subscriptions cannot be canceled. A traffic package is valid for 1 year. It will

automatically expire when the valid period is due, and the remaining traffic in the

package is obsolete.

Traffic packages can be used only for traffic billing. Traffic consumed by website

acceleration, file download acceleration, and on-demand acceleration can be deducted

from the traffic packages. Note that the traffic consumed by whole site acceleration is

deducted from the traffic package, but the number of acceleration requests for whole site

acceleration is charged separately.

Traffic consumed beyond the package will be charged on a pay-per-use basis. Traffic deducted from a package will not be accumulated for the billing based on tiered prices.

Only traffic generated in the Chinese mainland can be deducted from Chinese mainland

traffic packages. Only traffic generated outside the Chinese mainland can be deducted

from Outside the Chinese mainland traffic packages.

If multiple traffic packages are purchased, the one with the earliest expiration date is used first.

Page 16: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 5 Billing

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 13

5 Billing

Billing Items

CDN prices consist of two parts: basic fee and value-added service fee (optional).

Billing Options

You can choose to be billed by traffic or bandwidth. For details, see Pricing Details.

By default, V0 and V1 customers select the traffic billing option when subscribing to CDN. To be billed by bandwidth, submit a service ticket.

By Traffic

If you choose traffic-based usage:

You can be billed by the traffic used per hour. For details, see Table 5-1.

You can buy a CDN traffic package, which is more economical. For details, see Yearly/Monthly Subscription.

By Bandwidth

Billed by bandwidth has three options: by peak bandwidth, by 95th percentile bandwidth, and

by daily average peak bandwidth. For details, see Table 5-1.

Billed by 95th percentile bandwidth and by daily average peak bandwidth are only available for customers who have a budget of more than $15,000 USD for CDN each month. If you are this type of customers, submit a service ticket or contact customer service to apply for it.

Value-added Service Fee

If you enabled whole site acceleration, besides the basic fee, requests will be billed as well

($0.023 USD for 10,000 requests). For details, see Pricing Details.

Table 5-1 CDN billing

Billed By Billing Rules Billing Cycle Description

By traffic Billing item: traffic

Payment: post

You are charged

on an hourly

You are charged by the traffic

used per hour.

Page 17: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 5 Billing

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 14

Billed By Billing Rules Billing Cycle Description

payment

Rule: You are

charged based on

traffic tiers. A

calendar month is a

traffic accumulation cycle.

The conversion

rule: 1 GB = 1024 MB

basis. The usage

for each hour is

usually billed

within four hours

after the billing

cycle ends

(subject to the system).

This mode suits you if your

domain name traffic curve

fluctuates greatly, bandwidth

usage is always less than

30%, and the bandwidth has a peak.

NOTE

Bandwidth usage = Traffic used per day (GB)/(Peak bandwidth (Mbit/s) x 10.54). The number 10.54 indicates that a bandwidth of 1 Mbit/s at 100% usage approximately generates daily traffic of 10.54 GB.

By peak

bandwidth

Billing item: peak

bandwidth

Payment: post payment

Rule: You are

charged based on

peak bandwidth tiers.

The conversion rule

is as follows:

1 Mbit/s = 1,000 kbit/s

You are charged

on a daily basis.

The usage for

each day

(00:00:00 to

23:59:59) will be

billed on the following day.

The system measures and

records a bandwidth value

every 5 minutes, so 288

values are recorded every day.

The highest measurement per

day is used as the billable

bandwidth.

This mode applies to users

whose domain name's daily

bandwidth usage is always

greater than 30% and the traffic curve is stable.

By 95th

percentile bandwidth

Billing item: peak

bandwidth

Payment: post payment

Rule: You are

charged by peak

bandwidth at the contract price.

The conversion rule is as follows:

1 Mbit/s = 1,000 kbit/s

You are charged

on a monthly

basis. The usage

for each month

will be billed in

the following

month.

In a calendar month, the

bandwidth is measured and

recorded every 5 minutes on

each valid day. At the end of

the month, the records are

sorted from the highest to the

lowest, and the top 5% of the

recorded bandwidth values are

thrown away. Then the

highest bandwidth value in

the remaining records is the

billable bandwidth of the month.

NOTE

Valid day: The system counts a day as a valid day only when the consumed traffic is greater than 0 bytes on that day.

Measuring point: The system measures the bandwidth every 5 minutes so that there are 288 measuring points on each day.

By average

daily peak

Billing item: peak bandwidth

You are charged

on a monthly

By the end of a calendar

month, the system calculates

Page 18: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 5 Billing

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 15

Billed By Billing Rules Billing Cycle Description

bandwidth Payment: post payment

Rule: You are

charged at the

contract price based

on the average

daily peak

bandwidth.

The conversion rule is as follows:

1 Mbit/s = 1,000 kbit/s

basis. The usage

for each month

will be billed in

the following month.

the average bandwidth based

on the peak bandwidth of each

valid day in this month. The

average value is the billable

bandwidth of the month and

the bill is generated based on

the contract price.

NOTE

Valid day: The system counts a day as a valid day only when the consumed traffic is greater than 0 bytes on that day.

Daily peak bandwidth: The system measures and records a bandwidth value every 5 minutes, so 288 values are

recorded every day. The highest measurement per day is the peak bandwidth.

Whole site

acceleration

Billing items:

bandwidth and number of requests

Payment: post payment

Rule: Fees are

accumulated on the

current day (one

calendar day is an

accumulation cycle.).

The conversion rule is as follows:

1 Mbit/s = 1,000 kbit/s

You are charged

on a daily basis.

The usage for

each day

(00:00:00 to

23:59:59) will be

billed on the

following day.

You are charged based on

bandwidth usage and the number of requests every day.

Yearly/Monthly Subscription

If you want to be billed by traffic, you can buy traffic packages. Once you purchase a traffic

package, the system deducts the package fee from your account.

Go to buy a traffic package. For details about the prices of CDN traffic packages, see Pricing

Details.

Notes

Only real-name authenticated users can buy traffic packages, and a package can be used only by the current account of the buyer.

A traffic package takes effect once purchased, and cannot be unsubscribed. A traffic

package is valid for 1 year. It will automatically expire when the valid period is due, and the remaining traffic in the package is obsolete.

Page 19: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 5 Billing

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 16

Traffic packages can be used only for traffic billing. Traffic consumed by website

acceleration, file download acceleration, and on-demand acceleration can be deducted

from the traffic packages. Note that the traffic consumed by whole site acceleration is

deducted from the traffic package, but the number of acceleration requests for whole site

acceleration is charged separately.

Traffic consumed beyond the package will be charged on a pay-per-use basis. Traffic deducted from a package will not be accumulated for the billing based on tiered pricing.

Only traffic generated in the Chinese mainland can be deducted from Chinese mainland

traffic packages. Only traffic generated outside the Chinese mainland can be deducted from Outside the Chinese mainland traffic packages.

If multiple traffic packages are purchased, the one with the earliest expiration date is

used first.

You can use traffic packages only when you are billed by traffic. If you change to be billed by bandwidth, your purchased packages will be frozen until you switch back.

Changing Billing Option

You can switch among the preset billing options. Rules for changing billing options are listed

as follows:

If you change to be billed from by traffic or bandwidth to another one, the change will

take effect at 00:00:00 (GMT+08:00) on the night of the day you submitted the change.

If you change to be billed from by 95th percentile bandwidth or average daily peak

bandwidth to another one, the change will take effect from 00:00:00 (GMT+08:00) on the first day of the next month.

V2 and above customers can change between by traffic and by bandwidth on the CDN

console.

V0 and V1 customers need to submit a service ticket for any change of billing option.

Procedure

1. Log in to CDN Console.

2. In the navigation pane, choose Overview.

3. In the upper right corner, view the current billing option. See Figure 5-1.

Figure 5-1 Billing option

4. Select the target billing option and click OK.

Renewal

You can renew a resource package on the Renewals page. For details, see How Do I Renew

an Existing Resource Package?.

Page 20: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 5 Billing

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 17

Expiration and Overdue Payment

If your account is in arrears, a retention period will be granted based on the customer tier. For

details about how to handle service suspension due to arrears, see Service Suspension and

Resource Release.

You can view the outstanding amount of your account in Billing Center and top up the

account to offset the outstanding amount.

Page 21: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 6 Related Services

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 18

6 Related Services

Table 6-1 Related services

Interactive Function Related Service Reference

An OBS bucket can function

as the origin server of a CDN acceleration domain name.

Object Storage Service (OBS) Accessing CDN

(Pay-per-Use)

IAM provides:

User and permission

management

− IAM user and user group management

− Fine-grained policy management

Agency management

Before setting private

bucket retrieval, you need

to go to IAM Console and

authorize OBS access to

CDN. Once the

appropriate permissions

have been granted, CDN

can access your OBS

private buckets.

Identity and Access Management

(IAM)

Permissions

Management

OBS Private

Bucket Retrieval

CTS records operations on

CDN resources for future

query, audit, and backtracking.

Cloud Trace Service (CTS) Auditing

Page 22: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 7 Permissions Management

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 19

7 Permissions Management

If you need to assign different permissions to employees in your enterprise to access your

CDN resources, IAM is a good choice for fine-grained permissions management. IAM

provides identity authentication, permissions management, and access control, helping you

securely access your HUAWEI CLOUD resources.

With IAM, you can use your HUAWEI CLOUD account to create IAM users, and assign

permissions to the users to control their access to specific resources. For example, some

software developers in your enterprise need to use CDN resources but should not be allowed

to delete the resources or perform any other high-risk operations. In this scenario, you can

create IAM users for the software developers and grant them only the permissions required

for using CDN resources.

If your HUAWEI CLOUD account does not need individual IAM users for permissions

management, skip this section.

IAM can be used free of charge. You pay only for the resources in your account. For more

information about IAM, see IAM Service Overview.

CDN Permissions

By default, new IAM users do not have permissions assigned. You need to add a user to one

or more groups, and attach permissions policies or roles to these groups. Users inherit

permissions from the groups to which they are added and can perform specified operations on

cloud services based on the permissions.

CDN is a global service deployed and accessed without specifying any physical region. CDN

permissions are assigned to users in the global project, and users do not need to switch regions

when accessing CDN.

You can grant users permissions by using roles and policies.

Roles: A type of coarse-grained authorization mechanism that defines permissions

related to user responsibilities. This mechanism provides only a limited number of

service-level roles for authorization. When using roles to grant permissions, you need to

also assign other roles on which the permissions depend to take effect. However, roles are not an ideal choice for fine-grained authorization and secure access control.

Policies: A type of fine-grained authorization mechanism that defines permissions

required to perform operations on specific cloud resources under certain conditions. This

mechanism allows for more flexible policy-based authorization, meeting requirements

for secure access control. For example, you can grant ECS users only the permissions for

Page 23: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 7 Permissions Management

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 20

managing a certain type of ECSs. Most policies define permissions based on APIs. For

the API actions supported by CDN, see IAM Policies and Supported Actions.

A policy is a set of permissions defined in JSON format. By default, new IAM users do not

have any permissions assigned. You need to add a user to one or more groups, and assign

permissions policies to these groups. The user then inherits permissions from the groups it is a

member of. This process is called authorization. After authorization, the user can perform

specified operations on CDN based on the permissions. IAM provides system policies that

define the common permissions for different services, such as administrator and read-only

permissions. You can directly use these system policies to assign permissions.

CDN is a global service deployed and accessed without specifying any physical region. CDN

permissions are assigned to users in the global project, and users do not need to switch regions

when accessing CDN.

Table 7-1 lists all the system policies supported by CDN.

Table 7-1 System-defined policies supported by CDN

Policy Name Description Policy Type

CDN Administrator Operation permission: All

operations on CDN.

Function scope: Global-level

service

System-defined policy

CDN

DomainReadOnlyAccess

Operation permission:

Read-only permissions on

CDN acceleration domain names.

Function scope: Global-level

service

System-defined policy

CDN

StatisticsReadOnlyAccess

Operation permission:

Read-only permissions on CDN statistics.

Function scope: Global-level service

System-defined policy

CDN

LogsReadOnlyAccess

Operation permission:

Read-only permissions on

CDN logs.

Function scope: Global-level service

System-defined policy

CDN

DomainConfigureAccess

Operation permission:

Configuring CDN acceleration domain names.

Function scope: Global-level

service

System-defined policy

CDN

RefreshAndPreheatAccess

Operation permission:

Configuring CDN cache refreshing and preheating.

Function scope: Global-level

System-defined policy

Page 24: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 7 Permissions Management

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 21

Policy Name Description Policy Type

service

Table 7-2 lists the common operations supported by each system-defined policy or role of

CDN. Select the policies or roles as required.

Table 7-2 Common operations supported by each system-defined policy or role of CDN

Operation

CDN Administrator

CDN DomainReadOnlyAccess

CDN StatisticsReadOnlyAccess

CDN LogsReadOnlyAccess

CDN DomainConfigureAccess

CDN RefreshAndPreheatAccess

Queryin

g

accelerat

ion

domain

names

√ √ x x x x

Creating

accelerat

ion

domain

names

√ x x x √ x

Deleting

accelerat

ion

domain

names

√ x x x √ x

Queryin

g origin

information

v √ x x x x

Queryin

g

HTTPS

configurations

√ √ x x x x

Queryin

g cache

rules

√ √ x x x x

Queryin

g IP

blacklists

√ x x x x x

Modifyi √ x x x √ x

Page 25: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 7 Permissions Management

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 22

Operation

CDN Administrator

CDN DomainReadOnlyAccess

CDN StatisticsReadOnlyAccess

CDN LogsReadOnlyAccess

CDN DomainConfigureAccess

CDN RefreshAndPreheatAccess

ng origin

server

informat

ion

Configur

ing HTTPS

√ x x x √ x

Configur

ing

cache

rules

√ x v x x x

Enabling

the

refreshin

g

function

√ x v x x √

Enabling

the

preheati

ng

function

√ x v x x √

Queryin

g the

total

network

traffic

√ x √ x x x

Queryin

g details

of

network

traffic

√ x √ x x x

Queryin

g details

of

network

bandwidth

√ x √ x x x

Queryin

g

consump

tion

summary

√ x √ x x x

Page 26: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 7 Permissions Management

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 23

Operation

CDN Administrator

CDN DomainReadOnlyAccess

CDN StatisticsReadOnlyAccess

CDN LogsReadOnlyAccess

CDN DomainConfigureAccess

CDN RefreshAndPreheatAccess

Queryin

g carrier

consumption

√ x √ x x x

Queryin

g logs

√ x x √ x x

The CDN DomainConfigureAccess and CDN RefreshAndPreheatAccess permissions cannot be configured separately. To configure the two permissions, you need to configure the CDN DomainReadOnlyAccess permission. Otherwise, all domain names are invisible, and domain configuration and refreshing and preheating configurations cannot be performed.

Helpful Links IAM Service Overview

Creating a User and Granting CDN Permissions

Permissions Policies and Supported Actions

Page 27: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview 8 Basic Concepts

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 24

8 Basic Concepts

Acceleration Domain Name

Acceleration domain names are provided by users for CDN acceleration. A domain name

is an identification string that defines a realm of administrative autonomy, authority, or control within the Internet, such as a website, an email address, or an FTP server.

CNAME Record

A Canonical Name record (CNAME record) is a type of resource record in the domain

name system used to specify that multiple domain names are mapped to the same domain name (the CNAME).

CNAME Domain Name

On the CDN Console, after an acceleration domain name is added, the system will assign

a CNAME domain name (in the form of *.c.cdnhwc1.com) to the acceleration domain

name. Then, users need to configure a CNAME record at the domain name service

provider, specifying that the CNAME domain name (*.c.cdnhwc1.com) is an alias for

the user's own domain name. Therefore, after the CNAME record takes effect, the

domain name resolution will be directed to CDN, and all the requests for the user's domain name will be transferred to CDN nodes.

Origin Server

An origin server is the customer's service server, which is the source of the data accelerated for delivery.

DNS

A domain name server (DNS) is a functional entity in the TCP/IP network. With

deployment of the DNS, subscribers can access related servers using corresponding

domain names. In the TCP/IP network, a domain name is mapped to an IP address.

Domain names are easier to remember. However, servers use IP addresses to

communicate in the network. Therefore the DNS is used to convert domain names to

corresponding IP addresses.

Edge Node

Edge nodes are also known as CDN nodes or cache nodes, to which end users need the

fewest intermediate steps to connect. Compared with other nodes, edge nodes provide end users with faster response and connection.

Page 28: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview A Change History

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 25

A Change History

Release Date Description

2020-04-10 This issue is the eighth official release.

This release incorporates the following changes:

Added section "Billing."

Optimized some descriptions.

2019-09-26 This issue is the seventh official release.

This release incorporates the following changes:

Added section "Restrictions."

Add descriptions about live streaming acceleration in section "Application Scenarios."

2019-05-08 This issue is the sixth official release.

The modification is as follows:

Changed "Product Description" to "What Is CDN?"

Optimized the description of "Advantages."

2019-03-14 This issue is the fifth official release.

The modification is as follows:

Combined sections "Accessing CDN" and "Permissions."

Deleted section "Pricing."

2019-02-28 This issue is the fourth official release.

The modification is as follows:

Optimized the CDN acceleration principle.

Optimized the content in section "Overview."

Optimized the chapter structure and added the "Advantages" section.

Optimized the "Related Services" section.

2018-11-30 This issue is the third official release.

The modification is as follows:

The section "Limitations and Constraints" is moved to the

Page 29: Service Overview - Huawei · 2020-04-13 · Service Overview Issue 06 Date 2019-05-08 HUAWEI TECHNOLOGIES CO., ... from nearby nodes anywhere and anytime. CDN Service Overview 3 Application

CDN

Service Overview A Change History

Issue 06 (2019-05-08) Copyright © Huawei Technologies Co., Ltd. 26

Release Date Description

CDN User Guide.

2018-09-21 This issue is the second official release.

The modification is as follows:

Updated section "Product Description."

Updated section "Related Services."

Updated section "Constraints and Limitations."

2018-05-05 This issue is the first official release.