Request CDN

Available in Classic and VPC

You can request a CDN service from the NAVER Cloud Platform’s console.

Request CDN

To request a new Global CDN service, do the following:

1. From NAVER Cloud Platform console, navigate to > Services > Content Delivery > Global CDN.
2. Click [Request CDN].
3. Proceed with the following steps in order:
   • 1. Service settings
   • 2. Origin settings
   • 3. Caching settings
   • 4. Viewer transfer settings
   • 5. Check results

1. Service settings

Set the attributes of the CDN service, including the service name, protocol and domain. The setting items are as follows:

2. Origin settings

Set the location of the content origin, and set the communication attributes between the origin server and the CDN cache server. The setting items are as follows:

Certificate Authority

If you are using HTTPS, you need to validate the certificate of the origin server to prevent "man-in-the-middle(MITM)" attacks. Certificates issued by the following certificate authorities (CA) are valid:

3. Caching settings

Set the caching attributes of the Global CDN, including caching options and caching expiry time. The setting items are as follows:

4. Viewer transfer settings

Set the attributes for content transfer from the CDN cache server to the user. The setting items are as follows:

Create security token

If you wish to use Security token, see the following documents to create tokens:

• You can create tokens using the SDK provided for each available language.
  • Python: https://github.com/akamai/EdgeAuth-Token-Python
  • Java: https://github.com/akamai/EdgeAuth-Token-Java
  • Ruby: https://github.com/akamai/EdgeAuth-Token-Ruby
  • NodeJS: https://github.com/akamai/EdgeAuth-Token-Node
  • Golang: https://github.com/mobilerider/EdgeAuth-Token-Golang
  • C#: https://github.com/BookBeat/EdgeAuth-Token-CSharp
• The following are the parameters needed to create a token:
  • Token name: All tokens are named "token."
  • Start(st)/End times(exp): Start and end times of the token’s validity period.
  • Key: Verification password issued automatically when you create a Security token.
  • ACL (Access Control List): URI to grant access to with the token. You can use the wildcard (*) to grant access to specific paths.
• Example:
  • Create security token on Java
    • Sample code for token creation

    package com.akamai.edgeauth;
    
    public class ExampleEdgeAuth {
       public static void main(String[] args) {
       String hostname = "example.cdn.ntruss.com";   // Service domain name
       String ET_ENCRYPTION_KEY = "b2b1";            // Key for creating a token
       String tokenName = "token";                   // Token name is fixed as "token"
       long duration = 3600L;                        // 3600 seconds = 1 hour
    
       try {
             EdgeAuth ea = new EdgeAuthBuilder()
                   .key(ET_ENCRYPTION_KEY)
                   .startTime(EdgeAuth.NOW)
                   .windowSeconds(duration)
                   .tokenName(tokenName)
                   .escapeEarly(false)
                   .build();
    
             String acl = "/sample.pdf*"; //*/
             String file_url = "/sample.pdf";
             String token = ea.generateACLToken(acl);
             String url = String.format("http://%s%s?%s=%s", hostname, file_url, tokenName, token);
    
             System.out.println(url);
    
       } catch (EdgeAuthException e) {
             e.printStackTrace();
       }
       }
    }
    

    • Request URL created after executing the code

    http://example.cdn.ntruss.com/sample.pdf?token=st=1592202370~exp=1592205970~acl=/sample.pdf*~hmac=d422a548ae769bbaddc1d27f03fe6e096a4ba492928f3eb9c09824f93d78f507
    

  • Create security token on Python
    • Sample code for token creation

    $ python cms_edgeauth.py -k b2b1 -n token -s now -w 3600 -a /sample.pdf* enter the input commands as shown in the example
    => The following result is output:
    token=st=1592204787~exp=1592208387~acl=/sample.pdf*~hmac=79872098f16596c8c40ebab649ae2aac8cce3e3bece204b641c99b6cfac42779
    

    • Request URL created after executing the code

    http://example.cdn.ntruss.com/sample.pdf?token=st=1592204787~exp=1592208387~acl=/sample.pdf*~hmac=79872098f16596c8c40ebab649ae2aac8cce3e3bece204b641c99b6cfac42779
    

5. Check results

Check the settings and then click [Request CDN] at the bottom of the screen.

• The requested CDN is added to the list, showing the status Requested.
• It takes at least 2 hours for the CDN to be configured in all global bases, and once configuration is complete, the status changes to Operating.

Client DNS settings for using CDN

If you have selected a privately owned domain as the service domain when requesting CDN, you need to connect the CDN service domain displayed after requesting the CDN service to the DNS in operation to be able to use the service.
Register the CDN service domain using the CNAME record on the DNS system in operation or through the hosting provider.

On the server, you can use the dig or nslookup command to check if the CNAME record is set properly.

• Example: if the client’s domain is "sample.example.com" and the CDN service domain is "example.gcdn.ntruss.com"

  sample.navercdn.com 600 IN  CNAME   example.gcdn.ntruss.com.