Shulou(Shulou.com)06/02 Report--

1 、 CDN

Is the most commonly used acceleration feature in the website. Through the distributed server layout, the business content of the website is cached to local cloud servers for visitors to visit nearby. So using the website business of CDN, the opening speed is very fast.

The limitation is that normal CDN acceleration only accelerates static content, such as images, documents, and so on.

2 、 SCDN

SCDN (Secure Content Delivery Network), that is, CDN service with security protection capability, provides stable acceleration while intelligently predicting attack behavior, switching DDoS attack requests to high defense IP to complete cleaning through an intelligent scheduling system, while real user requests normally obtain resources from acceleration nodes. The distributed architecture of acceleration nodes also has the ability to prevent CC attacks, which truly achieves both acceleration and security.

Traditional CDN acceleration services can not resist large-scale DDoS and CC attacks. Using high defense IP alone to protect the origin server cannot accelerate at the same time. However, business scenarios such as games, finance, government and enterprise security, e-commerce, medical fields, which are vulnerable and must take into account acceleration, require secure CDN services with both high defense capability and stable and efficient full-link acceleration. Aliyun SCDN is based on Aliyun CDN's high-quality edge acceleration resources and deeply integrates Aliyundun's professional attack and defense strategy to provide an one-stop security and accelerated overall solution. You can quickly access Aliyun SCDN through getting started.

Architecture diagram

Intelligently anticipate attacks and automatically switch malicious requests to high-defense IP without human operation to achieve data cleaning and protection of origin servers. The request of the real user normally gets the resource from the acceleration node. Achieve intelligent acceleration and security:

Function

Anti-DDoS, anti-CC, anti-brush

DDoS cleaning: massive DDoS cleaning capability, perfect defense against SYN Flood, ACK Flood, ICMP Flood, UDP Flood, NTP Flood, SSDP Flood, DNS Flood, HTTP Flood

Anti-CC attacks: the distributed architecture of acceleration nodes has natural anti-CC capabilities.

Anti-brushing: CDN users are often maliciously brushed traffic resulting in economic losses. SCDN nodes can prevent brushes by intelligently identifying abnormal frequent visits to strange IP and restricting their access.

Intelligent scheduling: based on the computing power and deep learning algorithm of Aliyun Feitian platform, intelligently predict DDoS attacks, smoothly switch high defense IP, and do not affect online business.

Independent node: the SCDN node is physically isolated from the ordinary CDN node. It is a completely separate security acceleration node with deeply integrated security functions, which can provide high defense capability of a single node while providing stable and efficient edge acceleration.

Exclusive IP: every user who accesses SCDN has a unique IP on each SCDN node to achieve security risk isolation.

Independent SDNS scheduling: single user enjoys SDNS independent scheduling domain, DNS attacks between users do not affect each other, and has millions of QPS DNS Flood protection.

Stable acceleration

Global node: Aliyun SCDN, which is based on Aliyun CDN, has 2000 + domestic nodes, a single node bandwidth of 40Gbpsi, and a network bandwidth output capacity that exceeds that of 120Tbps.

Precision caching: intelligent object heat algorithm, multi-level and hierarchical cache hot resources to achieve accurate acceleration of resources

Cache: high-performance cache Cache system design, balanced use of CPU multi-core processing power, efficient and rational use and control of memory, maximize SSD IOPS and throughput

High-speed read and write: each node has high-speed read and write solid-state disk SSD storage, combined with SSD acceleration, greatly reduce user access waiting time and improve availability

Intelligent compression: intelligently compress the content transmitted by users and speed up the distribution effect

Page optimization: remove page spaces, line breaks, TAB, comments and other redundant content, reduce the page size, combine multiple JavaScript/CSS files into one request, thus reducing the number of requests

Refresh warm-up: provides the ability to refresh the cache and preheat resources to the node in advance

Precise scheduling

Million-level scheduling: Ariyun's independently developed intelligent scheduling system, which supports million-level domain name scheduling on a single machine.

Controllable and expandable: better controllability, protocol expansibility, and further reduce costs

Multi-level scheduling: multi-level scheduling strategy is supported. Node failure will not make users unavailable.

Multi-system linkage: form multi-system linkage with other products of Aliyun, coordinate with security defense system, refresh system, content management system, etc., to achieve the optimal performance of each module.

Traffic prediction: data real-time scheduling, support node-level traffic prediction, improve scheduling quality and accuracy

access control

Hotlink protection: supports referer blacklist and whitelist to identify and filter visitors, thus restricting access to resources

Authentication: supports advanced hotlink protection, sets authentication Key to encrypt URL, and protects users' origin server resources

Blacklist and whitelist: supports IP blacklist and whitelist, with controllable access

Full-link HTTPS

Full-link security: provides full-link HTTPS security acceleration scheme to support certificate upload and management

HTTP2: full support for HTTP/2

Monitoring and logging

Multi-dimensional monitoring: provides panoramic information monitoring, including access traffic statistics, access analysis, hit rate, ISP, DDoS and CC attack information, pv/uv, QPS, top access information monitoring, etc.

Log download: support access to full log download

Self-service management

Console: provides a self-service console with a smooth experience, which can self-help to complete the access to accelerated services and various functional configurations.

API: provides a standard API interface for more efficient and flexible configuration of various functions.

What's the difference between CDN and SCDN?

What's the difference between CDN and SCDN? The difference is that this SCDN is a CDN with cloud shield protection. SCDN is safer and more advantageous.

SCDN function

Cloud shield security protection injected into edge node

Taking into account acceleration at the same time, users enjoy IP effective risk isolation, provide DNS protection, massive DDoS cleaning, anti-CC attack protection capabilities, all-round 7-24 automatic and accurate security guarantee

Exclusive IP: each user and each node enjoy an independent IP, which isolates risks from each other and makes the business more secure.

DNS protection: SDNS independent scheduling domain, DNS attacks between users do not affect each other, millions of QPS DNS Flood protection

Massive DDoS cleaning capability: massive DDoS cleaning capability, which can perfectly defend against SYN Flood, ACK Flood, ICMP Flood, UDP Flood, NTP Flood, SSDP Flood, DNS Flood, HTTP Flood, CC attacks

CC attack protection: provides deep learning defense strategy, compatible with rule-based defense strategy, and supports custom rules

Content acceleration of multiple business types

Support a variety of content acceleration scenarios, such as small picture files, website dynamic and static resources, large file downloads, etc., through the object heat algorithm, hierarchical cache hot resources, so that your resource content is delivered quickly, stably, efficiently and completely around the world.

Intelligent scheduling: fast and automatic scheduling for daily acceleration / mass attack scenarios, and attack traffic can be cleaned at edge nodes

High-performance cache: balanced use of CPU multicore processing power, efficient and rational use and control of memory, maximizing SSD IOPS and throughput

Ultra-high read and write capacity: each node has high-speed read and write solid state disk SSD storage, combined with SSD acceleration, greatly reduce user access waiting time and improve availability

Flexible customization of cache expiration time: customize cache expiration time rules for specified resource content, and support specified path / test/... Or the file name suffix such as * .html

Full-link secure data transmission

Provide enterprise-class reliable HTTPS acceleration service, support custom anti-theft brushing function, ensure stable online business, and effectively prevent business risks caused by hijacking, tampering and data disclosure.

Enterprise-level reliable HTTPS acceleration: client access, interconnection between nodes, and origin-pull requests all support HTTPS encryption technology. You only need to upload the accelerated domain name certificate / private key after enabling the security acceleration mode, and you can view, disable, enable and edit the certificate.

Refer hotlink protection: identify and filter the identity of visitors by configuring the referer blacklist and whitelist to restrict access to resources

Authentication configuration: advanced hotlink protection. Set authentication Key to encrypt URL to protect users' origin server resources.

IP blacklist: the IP that is blacklisted, indicating that this IP cannot access the current accelerated domain name

3 、 DCDN

Full site acceleration (DCDN) is a cloud product with technology upgrade based on CDN acceleration. Intelligently distinguish between dynamic content and static content accessed. If it is static content, it will be accelerated directly with Ali Cloud CDN, and dynamic content will be pulled back to the origin quickly through routing decision optimization, protocol optimization and so on.

Compared with ordinary CDN acceleration, which only accelerates static content, such as images and documents, Aliyun full site acceleration (DCDN) can intelligently accelerate both dynamic and static content. Please look at the functional comparison of the table.

Comparison item CDN full-site acceleration resource type only supports static content acceleration supports static content and dynamic content while accelerating mode server static content is cached on Aliyun CDN node for users to access static content nearby to use CDN acceleration. Dynamic content uses intelligent routing, protocol optimization and other dynamic acceleration technologies to quickly access the server origin server to pull the origin server adaptation recommendation to separate the dynamic and static content of the server origin server Static content uses CDN acceleration, dynamic content does not use CDN, and there is no need to modify the resources on the server origin server. Site-wide acceleration will intelligently distinguish dynamic and static content and accelerate separately.

To sum up, among the four cloud products of Aliyun SLB CDN SCDN DCDN, CDN acceleration is a must for the website, and the other three products are selected on demand. SLB is suitable for medium and large businesses. Multiple ECS CVMs and cloud databases are configured to be used together. DCDN is site-wide acceleration, which can intelligently accelerate dynamic and static content. SCDN is designed to resist large-scale malicious DDoS and CC attacks on the basis of CDN acceleration. The above is the difference between these four products and how to choose, please know.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.