- Print
- PDF
Creating Global Edge
- Print
- PDF
Available in Classic and VPC
This section describes how to create a Global Edge on the NAVER Cloud Platform console.
To create a Global Edge, you first create a profile and then create an edge that belongs to it, and there are 2 ways to create an edge: Quick Start and Self Integration.
- Quick Start: create an edge with a simple setup.
- Self Integration: create a customized edge by configuring the details of the edge yourself.
Create profile
To create a profile, follow these steps:
- Click the environment you are using in the Region menu and the Platform menu on the NAVER Cloud Platform console.
- Click Services > Content Delivery > Global Edge in order.
- Click [Create profile] on the management page.
- Enter the profile name on the Create profile page.
- You can use letters, numbers, hyphens (-), and underscores (_) within a range of 3 to 35 characters
- Click the [Complete] button.
- This directs you to the management page with the created profile selected.
Create an edge with Quick Start
To create an edge using Quick Start, follow these steps:
To create an edge using Quick Start, your content origin must be stored in Object Storage of NAVER Cloud Platform.
- Click the environment you are using in the Region menu and the Platform menu on the NAVER Cloud Platform console.
- Click Services > Content Delivery > Global Edge in order.
- Select the profile to create an edge from the Profile dropdown list at the top of the page.
- Click the [Create Edge] button.
- Once the Edge settings page appears, select Quick Start, and then click the [Next] button.
- Proceed with the following steps in order:
1. Deployment configuration
Configure the default settings for the edge that you want to deploy.
- Edge name: enter the edge name
- You can use letters, numbers, hyphens (-), and underscores (_) within a range of 3 to 35 characters
- Service Protocol HTTPS: select whether to use HTTPS as the protocol when making content calls (Recommended). When using HTTPS, the requested information is transmitted from the server to the browser in an encrypted state.
- Service domain: set the domain that you will use to access the service by clicking on a link or entering the URL in the browser
- Use NAVER Cloud Platform domain: use the automatically created domain in the type of "random number.edge.naverncp.com" in NAVER Cloud Platform
- Use customer's domain: use a domain other than NAVER Cloud Platform domain. You must enter the domain to use.
- If you selected Service Protocol HTTPS, click the [Register certificate] button and register your SSL certificate.
- Service region: configure the edge server region to enable caching and transfer of content
- If you select Korea or Japan, content caching and delivery can only be done through the edge servers located in the selected country
- If you select Global (performance first), content caching and transfer can be done through edge servers located around the world over NAVER Cloud and partner networks
- If you select Global (availability first), content caching and transfer can be done through edge servers located around the world over partner networks
2. Origin configuration
Specify the location where the original content is stored.
- Select NCP Object Storage Region: select the Region of Object Storage storing content
- Select NCP Object Storage bucket: select the bucket of Object Storage storing content
3. Caching
Configure how you want to control the cache.
- Default Caching (30 days): caches all objects, and sets the Time-to-Live (TTL) of the cache to 30 days
Other cache settings and optimization settings are automatically applied as follows:
- Cache settings
- Negative TTL(s): ON
- Remove Vary Header: ON
- Cache Key Hostname: Incoming Host Header
- Cache key Ignore Query String: ignore all
- Optimization setting
- Compressed transfer: ON
- Large file transfer: ON
4. Creation completed
After reviewing the settings, click the [Complete edge creation] button at the top of the page.
- The created edge will be automatically added to the list and deployed.
- It may take several minutes to tens of minutes for an edge to be deployed.
Create an edge with Self Integration
To create an edge using Self Integration, follow these steps:
- Click the environment you are using in the Region menu and the Platform menu on the NAVER Cloud Platform console.
- Click Services > Content Delivery > Global Edge in order.
- Select the profile to create an edge from the Profile dropdown list at the top of the page.
- Click the [Create Edge] button.
- Once the Edge settings page appears, select Self Integration, and then click the [Next] button.
- Enter the edge name, and then click the [Next] button.
- You can use letters, numbers, hyphens (-), and underscores (_) within a range of 3 to 35 characters
- Click each setting listed on the left side of the page to configure the detailed settings manually.
When you complete one setting and move on to another, the setting values you entered will be automatically saved.
Deployment settings
Configure the default settings for the edge that you want to deploy.
Service settings
The service configuration items are as follows:
Item | Description |
---|---|
Service protocol | Define protocol to be used for calling content
|
Service region | Configure the region of the edge server that will allow content caching and transfer
|
Service domain | Set the domain for the client to access
|
Global Edge Logging
Global Edge Logging allows you to log request information for each object and store it in Object Storage.
Detailed items are as follows:
Item | Description |
---|---|
Select region | Select the Region of Object Storage to save log files |
Select bucket | Select the bucket of Object Storage to save log files |
Bucket prefix | Enter the detailed path to save the log |
Origin settings
Configure the origin of the content to be cached.
Origin settings
The source configuration items are as follows:
Item | Description |
---|---|
Origin domain | Enter the domain of the original content for the edge server to refer to
|
Forward Host Header | Configure the host header to be used when forwarding client requests to the origin server. If the origin domain is Object Storage, you can set only Origin host name.
|
Origin protocol settings | Configure the port of the origin server that the edge server will connect to. Select between HTTP and HTTPS, and enter the port number.
|
Origin path | Enter the detailed path of the original content located within the origin server |
Origin Shield | Configure an origin shield to protect the origin server from overload due to a large mid-tier cache. Click the toggle button to turn on the function and select the Region closest to the origin as the Region to use. |
When selecting API Gateway as the origin, we recommend setting the Forward Host Header to Origin host name and the Origin Protocol to HTTPS 443.
Supports integration with API Gateway and Load Balancer services in the VPC environment.
Origin failover
Origin failover is a function that forwards requests to a backup origin server according to the code when the origin server fails to respond.
Click the [Create] button to set up forwarding rules. Detailed items are as follows:
Item | Description |
---|---|
Rule Name | Enter the name of the forwarding rule |
Rule Configuration | Rule configuration
|
Cache settings
Configure how you want to control the cache.
Default Caching
The default cache settings for all objects are as follows:
Item | Description |
---|---|
Cache options | Set the cache operation
|
Serve Stale object | Designate the work to conduct when the object cache life is expired (when the original content is unavailable)
|
Maxage | Specify the maximum retention period for the cache
|
Negative TTL(s)
Using Negative TTL(s) caches error responses from the origin server, reducing the load on the origin server.
When you click the toggle button to turn on the function, it is applied by default for 10 seconds to 4xx and 5xx HTTP code responses.
Bypass Query String
By using bypass query string, requested URLs that contain specific strings are not cached and are bypassed to the origin server. To configure settings, follow these steps:
- Click the Bypass Query String toggle button to turn on the function.
- Enter the string that will be used as the bypass criterion in the query string enter field and click the empty space around the enter field to recognize the string.
- Repeat this process to enter multiple strings.
- Click the [Save] button after entering all the desired strings.
- After saving, you can click the [Edit] button to edit the strings if necessary.
Cache Key Hostname
When configuring cache keys, you can select the host name to use. Detailed items are as follows:
Item | Description |
---|---|
Incoming Host Header | Include the service domain in the cache key |
Origin Hostname | Include the origin server's host name in the cache key |
Cache key Ignore Query String
By default, query strings are not used in the cache key, but you can control object types by changing whether or not the strings are included or by allowing only specific strings to be used. Detailed items are as follows:
Item | Description |
---|---|
Ignore all | Exclude all query strings from the cache key |
Allow all | Include all query strings in the cache key |
Allow specific strings | Include only specific query strings in the cache key. Enter the specific query string in the input field and save it. |
Ignore case sensitivity in cache keys
Generally, origins are considered to be case-sensitive with respect to the URL's path and file name.
When caching requests, the edge server determines how to handle the case sensitivity of URLs.
Some origin servers, like those using Microsoft IIS, do not differentiate between uppercase and lowercase. If the origin does not distinguish between uppercase and lowercase, activate this function.
Remove Vary Header
If the response from the origin server contains a Vary header instead of Accept-Encoding, the edge server will not cache the response.
If you turn on the function by clicking the toggle button, the origin server will respond with a Vary header, but the Vary header will be removed to allow the object to be cached when the actual content is the same.
Edge Auth
To prevent unauthorized sharing of content, you can generate a one-time token and configure it to respond to authenticated requests only. To configure settings, follow these steps:
- Click the Edge Auth toggle button to enable the function.
- Select your preferred authentication method between Signed URL and JWT.
- Signed URL: embed authentication information in the URL, allowing all clients to access it
- JWT: generate a JSON token with authentication information and place it in the HTTP header to identify the client
- Media Vault: embed authentication information in the URL, allowing all clients to access it (service region: available only in Global (performance first) and Global (availability first))
- Enter the desired name in the Token name input field and click the [Create] button in the token key field.
- The token will be generated and displayed.
- Every time you click the [Create] button, the key value of the token changes.
Rule builder
Configure how to create detailed cache rules and control content.
Detailed cache rules
You can set rules for caching objects on the edge server.
You can click the [Add cache rules] button to add up to 10 rules. Detailed items are as follows:
Item | Description |
---|---|
Rule Name | Enter the name of the cache rule |
Rule Configuration | Rule configuration
|
You can also click the [Advanced settings] button to set more detailed rules.
Item | Description |
---|---|
Rule-based origin routing | Provide origin branching based on URL prefix. If the request meets the IF conditions, route the origin to the specified location.
|
Browser cache | Designate the caching operation to send to client from Edge server
|
Cache Key Query Parameters | When configuring cache key, set if query strings are included or not and control caching operations
|
Access Deny | Block access for IF conditions |
URL Redirect | If the IF conditions are met, set to respond by redirection without connecting to the origin server
|
URL Rewrite | If the IF conditions are met, automatically edit the URL of the request
|
When you save the cache rule, a list of rules is generated.
- You can easily view the saved contents in the list.
- The priority is automatically applied in the order in which they are saved. To change the priority, click
,
or drag
.
- To edit the saved rule, click
to edit and click the [Save] button.
- To delete the saved rule, click
.
You cannot apply both URL Redirect and URL Rewrite settings at the same time.
The following rules are applied to The Redirect Destination path and Rewrite settings:
Enter value |
---|
a-zA-Z0-9_:.,/?!()[]@<>=-+*&`|~^% |
Managed rules
When using CDN services, you can configure frequently used functions. Detailed items are as follows:
Item | Description |
---|---|
CORS | Add a cross-origin resource sharing (CORS) header to the properties of protected resources called from other domains |
HTTP/2 | Enable HTTP/2, an open network protocol for transferring web content. Loading time and resource consumption of web properties are reduced. |
True-Client-IP Header | Add the client IP address to the header when forwarding requests to the origin server. You can establish policies based on the client IP using a header on the origin server. |
HSTS | Use the HTTPS protocol instead of HTTP for all browser connections to enhance security |
HTTP Header Modification
You can set it to override HTTP headers that are sent when making a request to the origin server or when responding to a client. To configure settings, follow these steps:
- Click the [Modify HTTP Header] button.
- Select the type of header to override.
- Modify Origin Request Header: override the HTTP header transferred when forwarding requests to the origin server
- Modify Client Response Header: override the HTTP header transferred when responding from the server to the client
- Enter the rule.
- Rule Name: enter the rule name
- Rule Configuration: rules detailed settings
- Action: select the action to perform from add, edit, and delete
- Header Name: enter the HTTP header to be targeted by the action
- Value: if you selected add or edit, enter the header value to apply
- Click the [Save] button.
- The rules are saved and a list is created.
- To edit the saved rule, click
to edit and click the [Save] button.
- To delete the saved rule, click
.
The following rules are applied to the header name and value settings of Ncloud Global Edge:
Header name | Header value |
---|---|
a-zA-Z0-9_- | a-zA-Z0-9_:.,/?!()[]@<>=-+*&`|~^% |
Optimization
Configure ways to improve performance when transferring content to users.
Zip transfer
Using zip transfer enables content to be transferred faster by applying zip when transferring content to client browsers or devices that support GZIP or BROTLI zip.
By clicking on the toggle button to turn on the function, you can specify the GZIP or BROTLI header in the Accept-Encoding to zip the content.
- Zip transfer support extension: css, js, json, xml, html, ttf, otf, woff, woff2, and eot
Large file transfer
Using large file transfer allows content to be transferred in pieces instead of a single file when requesting content from the origin server, improving origin offloading.
When you turn on the function by clicking on the toggle button, optimization for large file transfers will be applied.
Access control
Adjust the range of access to the edge.
You can create a whitelist or blacklist and add 3 types of access control conditions.
- Whitelist: allow access for requests that match the conditions
- Blacklist: reject access for requests that match the conditions
Item | Description |
---|---|
IP / CIDR | Control access based on the client's IP or CIDR
|
Geo | Control access based on the country where the client is located
|
Referer Header | Control access based on the referrer in the HTTP request header
|
Complete settings
After reviewing the settings, click the [Complete settings] button at the top of the page.
- The created edge will be automatically added to the list and deployed.
- It may take several minutes to tens of minutes for an edge to be deployed.
- To preview the settings, click the [Preview settings] button.