Requesting CDN

Available in Classic and VPC

This document describes how to request a CDN service on NAVER Cloud Platform’s console.

Requesting CDN

To request a new Global CDN service, do the following:

1. Click the environment you are using in the Region menu and Platform menu of NAVER Cloud Platform console.
2. Click Services > Content Delivery > Global CDN.
3. Click [Request CDN].
4. Proceed with the following steps in order.
   • 1. Setting up service
   • 2. Setting up original server
   • 3. Setting up caching
   • 4. Setting up viewer transfer
   • 5. Checking result

1. Setting up service

Set the attributes of the CDN service, including the service name, protocol and domain. The setting items are as follows:

2. Setting up original server

Set the location of the original content, and set the communication attributes between the original server and the CDN cache server. The setting items are as follows:

Certificate authority

If you are using HTTPS, you need to validate the certificate of the original server to prevent "man-in-the-middle(MITM)" attacks. Certificates issued by the following certificate authorities (CA) are valid.

3. Setting up caching

Set the caching attributes of the Global CDN, including caching options and caching expiry time. The setting items are as follows:

4. Setting up viewer transfer

Set the attributes for content transfer from the CDN cache server to the user. The setting items are as follows:

Creating security token

If you wish to use security tokens, refer to the following documents to create tokens.

• You can create tokens using the SDK provided for each available language.
  • Python: https://github.com/akamai/EdgeAuth-Token-Python
  • Java: https://github.com/akamai/EdgeAuth-Token-Java
  • Ruby: https://github.com/akamai/EdgeAuth-Token-Ruby
  • NodeJS: https://github.com/akamai/EdgeAuth-Token-Node
  • Golang: https://github.com/mobilerider/EdgeAuth-Token-Golang
  • C#: https://github.com/BookBeat/EdgeAuth-Token-CSharp
• The following are the parameters needed to create a token:
  • Token name: all tokens are named "token"
  • Start(st)/End times(exp): start and end times of the token’s validity period
  • Key: verification password issued automatically when you create a security token
  • ACL (Access Control List): URI to grant access to with the token. You can use the wildcard (*) to grant access to specific paths.
• <example>

  • Creating security token on Java

    • Sample code for token creation

    package com.akamai.edgeauth;
    
    public class ExampleEdgeAuth {
       public static void main(String[] args) {
       String hostname = "example.cdn.ntruss.com";   // service domain name
       String ET_ENCRYPTION_KEY = "b2b1";            // Key for creating a token
       String tokenName = "token";                   // Token name is fixed as "token."
       long duration = 3600L;                        // 3600 seconds = 1 hour
    
       try {
             EdgeAuth ea = new EdgeAuthBuilder()
                   .key(ET_ENCRYPTION_KEY)
                   .startTime(EdgeAuth.NOW)
                   .windowSeconds(duration)
                   .tokenName(tokenName)
                   .escapeEarly(false)
                   .build();
    
             String acl = "/sample.pdf*"; //*/
             String file_url = "/sample.pdf";
             String token = ea.generateACLToken(acl);
             String url = String.format("http://%s%s?%s=%s", hostname, file_url, tokenName, token);
    
             System.out.println(url);
    
       } catch (EdgeAuthException e) {
             e.printStackTrace();
       }
       }
    }
    

    • Request URL created after executing the code

    http://example.cdn.ntruss.com/sample.pdf?token=st=1592202370~exp=1592205970~acl=/sample.pdf*~hmac=d422a548ae769bbaddc1d27f03fe6e096a4ba492928f3eb9c09824f93d78f507
    

  • Creating security token on Python

    • Sample code for token creation

    $ python cms_edgeauth.py -k b2b1 -n token -s now -w 3600 -a /sample.pdf* enter the input command as shown in the example
    => The following result is output:
    token=st=1592204787~exp=1592208387~acl=/sample.pdf*~hmac=79872098f16596c8c40ebab649ae2aac8cce3e3bece204b641c99b6cfac42779
    

    • Request URL created after executing the code

    http://example.cdn.ntruss.com/sample.pdf?token=st=1592204787~exp=1592208387~acl=/sample.pdf*~hmac=79872098f16596c8c40ebab649ae2aac8cce3e3bece204b641c99b6cfac42779
    

5. Checking result

Check the settings and then click [Request CDN] at the bottom of the screen.

• The requested CDN is added to the list, showing the status Requested.
• It takes at least 2 hours for the CDN to be configured in all global bases, and once configuration is complete, the status changes to Operating.

Setting client DNS for using CDN

If you have selected a privately owned domain as the service domain when requesting CDN, you need to connect the CDN service domain displayed after requesting the CDN service to the DNS in operation to be able to use the service.
Register the CDN service domain using the CNAME record on the DNS system in operation or through the hosting provider.

On the server, you can use the dig or nslookup command to check if the CNAME record is set properly.

• <example> If the client’s domain is "sample.example.com" and the CDN service domain is "example.gcdn.ntruss.com"

  sample.navercdn.com 600 IN  CNAME   example.gcdn.ntruss.com.