Configure HTTPS
Last Updated：2020-10-20
Overview
HTTPS configuration realizes encrypted transmission and identity authentication. When the CDN HTTPS configuration is enabled for BOS official extensive domain names, Baidu AI Cloud automatically issues a certificate for you.
Preconditions
- To configure an accelerated domain name for HTTPS, you have to upload a certificate. For certificate details, please see Certificate Management.
- If you use HTTPS acceleration, the CDN between the user and cloud uses HTTPS protocol to communicate, and the user can select to use HTTPS or HTTP when setting between CDN and origin server. When HTTPS is used for origin, the origin server shall support port 443; if the HTTP protocol is used, the origin server shall support port 80.
Operation Steps
- Log into the CDN Management Console, and enter the “Overseas CDN " page.
- Click Domain Name Management on the left navigation bar.
- Enter the domain name management page, and click the Management of the target domain name operation column.
- Enter “CDN Domain Name Details” page, and select HTTPS Configuration tag on the top navigation bar of the page.
- Enter the HTTPS configuration page, in the module of HTTPS Configuration.
- Select “Start” to complete the relevant parameter configurations.
| Parameter | Description |
|---|---|
| Select certificates | For certificate details, please see Certificate management. |
| Convert HTTP to HTTPS request | After such feature is enabled, CDN node will redirect the request to HTTPS after receiving the HTTPS request, and if it is not enabled, CDN will return the request to the origin server for processing. Currently, it only supports 301 for redirection. |
| HTTP/2 | “HTTP/2” is enabled by default, and the user can select “Off”; HTTP/2 is the new version of HTTP, which can improve the page loading speed of the browser, and reduce network delay. |
| Forward-to-origin protocol | If the origin protocol is HTTP type, it forwards to port 80, and if the origin protocol is HTTPS type, it forwards to port 443. Please make sure that ports are in service. When the origin server is BOS, it supports HTTP and HTTPS protocol for forwarding to origin. |
- Click “OK ". You can see that the HTTPS setting is successful in the HTTPS Configuration module, and the page prompts “Configuration was updated successfully, and it takes effect in about 5 minutes.”