Multinational Cooperation(MNC)'s Challenges for Go China

Regulatory Compliance

ICP License: To deliver and publish information and data within China, MNC is required to apply Internet Content Provider (ICP) license to ensure regulatory compliance, legal adherence and market access.

Data Localization: Online content and personal data are required to be processed and stored within China localized infrastructure. MNC need to ensure compliances with regulations by working with CDN providers offer data centers and infrastructures within China.

Performance and Reliability when Origin is out of China

Even though most objects cacheable within China, there are cases contents generated outside of China need to be delivered across the China border, causing delays and poor user experience.

Understanding the Different Network Environment in China

Internet Infrastructure: China's internet infrastructure can be complex and congested, leading to performance issues such as slow loading times and network latency. MNCs are expected to work with localized China CDN Providers that have optimized infrastructure and peering agreements with all the 3 carriers in China and different local Chinese ISPs to ensure reliable and fast content delivery.

Regional Variability: Performance may vary across different regions within China due to differences in internet connectivity and infrastructure. To ensure consistent performance across all regions can only be satisfied by leveraging multiple layered deployment for covering most of the regions.

Scalability:There were 1.05 billion internet users in China in January 2023. China's internet penetration rate stood at 73.7 percent of the total population at the start of 2023. Traffic spikes and peak loads keep happening which needs robust infrastructure and capacity planning strategies to scale resources dynamically.

Cybersecurity & ISPs Blocking Apps under Attacks

Cyber Threat Landscape: China experiences frequent Distributed Denial of Service (DDoS) attacks due to its extensive internet infrastructure and large user base. These attackes can disrupt online services with massive malicious traffic at the highest volumes globally. Besides, Cybercrime including data breaches, online fraud and hacking incidents is prevalent in China. Criminal organizations and hackers exploit valnerabilities to steal data, commit financial fraud or compromise systems.

Carriers & ISPs blocking IPs more frequently when under attacks: China Carriers & ISPs often block web applications under attacks so mitigating DDoS on the edge server level doesn't always help. So close relationship with all carriers and ISPs is crucial to help customers troubleshoot issues when their applications are not reacheable.

Energing Technology Risks: Rapid technological advancements in China introduce vulnerabilities, particularly concerning cloud computing, IoT and Mobile Devices, especially there are many versions of local and customized Android devices which contains potential risks.

Regulatory Factors: Compliance with Chinese cybersecurity laws and regulations, such as the Cybersecurity Law and the Personal Information Protection Law, is essential. Failure to comply can result in potential legal consequences, making regulatory compliance a top priority of internet security.

EdgeOne Solution Introduction for the challenges

EdgeOne® is a secure, reliable and high-performance cloud compute service platform provided by Tencent Cloud. Tencent is now the largest Internet company in China, and even Asia. It's providing services for hundreds of millions of people via its flagship products like QQ and WeChat. The platform is an Integrated and Proven Solution to Accelerate and Protect applications at the Edge of the Internet, essentially supporting business critical applications with better Performance, Availability and Security in China and Asia. Below are the highlighting points:

Regulation Compliance Assistance Service in China

A number of Chinese laws and regulations, such as the Data Security Law, Personal Information Protection Law, and Cybersecurity Law of the People's Republic of China, have been promulgated to provide institutional guarantee and legislative support for the construction of China's secure cyberspace. As a result, foreign enterprises need to pay close attention to China's compliance requirements, and they are likely to require the help of professional local compliance services when expanding their business into the Chinese market.

EdgeOne Platform can leverage the Tencent Cloud ecosystem provides following security solutions which aims to help global enterprises comply with Chinese regulations:

Business license service

Tencent Cloud aims to help foreign enterprises meet the requirements of applicable Chinese regulations by offering the following services:

● ICP filing (including ICP filing and PSB filing) for websites free of charge

● Domain name registration

● Application for ICP license

● Application for EDI license

● Application for SP license

Content Compliance Solution (optionally purchasable)

Leveraging over two decades of experience in business security operations and with a focus on AI, Tencent Cloud aims to help foreign enterprises reduce their content compliance risks and safeguard their business operations.

Use Case 1 – Large Scale Download and Delivery in China

Tencent Cloud has been operating in China with intensive resources and massive capacity for years, with a good number of global companies leveraging our platform to deliver quality great web and download performance into China.   Below is a detailed information of the available resources the whole Tencent Cloud has in China.

Here is the regular performance benchmark between the top 2 CDN providers in China, Tencent Cloud EdgeOne keeps the much better one between 60-70ms for covering most of the China cities.

Ease of implementation: simple

Pricing model: traffic (per GB)

Use Case 2 – Dynamic Contents and API performance

For most of the MNCs, the origin infrastrure is likely hosted outside of China. So for dynamic or less cacheable contents, even though requests from within China will land onto Tencent Edge Servers, it is still inevitable for these requests be forwarded to the origin servers across the China network border.

Internet connectivity across the border faces two major challenges and limitations., Latency and packet loss, and bandwidth limitations and throttling, which will introduce network congestion, routing inefficiencies and slower responses for Web applications and API which are non-cachable.

EdgeOne operates an internal backbone network connecting regional centers and with the well selected routes and carrier partners, the forward requests or cache-miss situations can be handled in a much more effective way compared with unmanged public Internet, therefore performance can be greatly improved.

Historical data shows that packet losts can be reduced up to 400% during congestions and average site download performances can be improved up to 100%+ when customer sites are on EdgeOne.

Ease of implementation: simple

Pricing model: dynamic traffic (per GB, slightly higher than static delivery)

Use Case 3 – Site Delivery with Basic Security Features

EdgeOne has security capabilities inheritly built-in, protecting customers properties on the Edge itself without compromising performances. Basic security features include:

● Layer 4 DDoS protection with account level visibility and reports

● Layer 7 Rate Limiting with machine learning and greater visibility & flexibility

EdgeOne can automatically setup the basic traffic thereshold via machine learning and report more flexible data such as query-per-10s, query-per-minutes, and etc, in addition to bursting and average windows predefined. The blocking theresheld can also be set more easily with reporting data in more details.

● OWASP top 10 vulnerabilities protected with managed rules with auto-updates

EdgeOne maintains a set of protection rules and automatically apply to all customers subscribing to our security modules. Even though customers are still able to customize which atomic rules to enable or diable, we recommend customers simply keep it high level on rule group level tuning. Historical data shows that the majority of customer needs can be managed and attacks mitigated through these managed rulesets.

Ease of implementation: mild

Pricing model: security traffic (per GB, slightly higher than static delivery)

Use Case 4 – Web Properties w/o ICP Licenses

Similar to all other providers, EdgeOne also has a solution delivering customer web properties into China from the RIM. However together with our Carrier Partners in China, we are able to provide a much better cross-border performance compared with via public Internet.

Although it's still advisable for our customers to go get an ICP licence for all contents with China users in mind, this can be an interim solution or a backup delivery channel in case ICP licenses got revoked and/or lapsed for whatever reasons.

Ease of implementation: mild

Pricing model: cross-border traffic (per GB, considerably higher than static delivery)