Acceleration

Learning

<h2 id="What-is-Caching?">What is Caching?</h2>Cache is a hardware or software component that stores data so that future requests for that data can be served faster. When data is repeatedly requested, cache can significantly improve performance and efficiency.In computer science, cache is often used to store frequently accessed data to reduce access time. For example, web browsers like Chrome or Firefox cache web page content so that when users visit the same web page again, the page can be loaded faster. Operating systems also cache data read from the hard drive so that it can be accessed faster the next time.The main goal of cache is to store a copy of the data closer to the data requester (usually in terms of physical distance), thereby reducing the time to access the original data source and improving the efficiency of the program.<h2 id="What-is-Browser-Cache-and-How-it-Works?">What is Browser Cache and How it Works?</h2>Browser cache is a technology that stores web page files locally, these files may include HTML files, CSS style sheets, JavaScript scripts, images, and other multimedia content.When you first visit a webpage, the browser downloads all necessary resources and saves them in the local cache. &nbsp;Then, when you visit the same webpage again, the browser checks whether the resources in the cache are still up-to-date. &nbsp;If they are, the browser will load the resources directly from the cache; &nbsp;if they are not, or if the resources do not exist in the cache, the browser will download new resources from the server. &nbsp;This process is automatic and usually not noticeable to the user.<img src="https://edgeone.ai/media/bd047308-fb76-4124-8e30-f10622185c68.png" alt="browserCache.png"><h3>The Role of Caching</h3>The main functions of browser cache are as follows:Improve loading speed: When a user visits a cached web page, the browser can load files directly from the local hard drive, without having to request these files from the server again. This greatly reduces the loading time and improves the user experience.Reduce the use of network bandwidth: By reducing requests to the server, browser cache can help save network bandwidth. This is especially useful for network connections with traffic restrictions.Reduce server load: Browser cache can reduce the load on the server, as the server does not need to send a full response for each request. This is very important for high-traffic websites.Offline browsing: In some cases, if a user has visited a page and then lost the network connection, browser cache can allow the user to browse the page offline.<h3>Why You Need to Clear Browser Cache?</h3>Get the latest version of the web page: If the content of the website has been updated, but the browser still loads the old content from the cache, then the user may not be able to see the latest web page content. Clearing the cache ensures that the browser gets the latest content from the server.Solve loading or formatting problems: Sometimes, cached files may be corrupted or have errors, which may cause the web page to not load or display correctly. In this case, clearing the browser cache may help solve the problem.Free up storage space: Browser cache takes up space on the computer's hard drive. If your device has limited storage space, regularly clearing the browser cache can help free up some space.Protect privacy<span style="background-color:rgb(243,243,243);color:rgb(36,41,47);font-family:-apple-system, &quot;system-ui&quot;, &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;, Helvetica, &quot;PingFang SC&quot;, &quot;Hiragino Sans GB&quot;, &quot;Microsoft YaHei&quot;, Arial, sans-serif;">: Browser cache may contain some of your private information, such as login status, browsing history, etc. If you do not want others to access this information, clearing the browser cache can help protect your privacy.<h2 id="What-is-CDN-Node-Cache?">What is CDN Node Cache?</h2><a href="https://edgeone.ai/learning/detail/node-cache">CDN node cache</a>, refers to the cache stored on each node server of the <a href="https://edgeone.ai/learning/detail/cdn">CDN (Content Delivery Network)</a>.In the CDN system, the original content is stored on the source server. When a user first requests a certain content, the nearest CDN node (also known as the edge server) will obtain this content from the source server and then store it locally, which is the so-called CDN node cache. When other users request the same content, the CDN node can directly provide the content from the local cache, without having to obtain it from the source server again, which can greatly improve the loading speed of the content, reduce the burden on the source server, and also improve the availability of the content.<img src="https://edgeone.ai/media/b369e6b0-512f-43c8-9c26-96a0775ec0b7.png" alt="缓存服务是如何工作的.png"><h3>What is CDN Cache Hit and What is Cache Miss?</h3>When the content requested by the user has been cached on the CDN's edge server (also known as the node), then this request is considered a "cache hit". In this case, the edge server can directly provide the cached content to the user, without having to obtain the content from the source server. This can greatly improve the loading speed of the content and improve the user experience.On the contrary, if the content requested by the user has not been cached on the CDN's edge server, then this request is considered a "cache miss". In this case, the edge server needs to obtain the content from the source server, and then provide the content to the user. This may increase the loading time of the content, because it needs to obtain the content from the source server.CDN service providers usually strive to optimize their cache policies to improve the cache hit rate, because a high cache hit rate can improve the loading speed of the content, improve the user experience, and also reduce the burden on the source server. <a href="https://edgeone.ai/">EdgeOne</a> can optimize and improve the cache hit rate through the following configuration tuning:<ol><li>Adjust node cache TTL configuration</li><li>Custom Cache Key Cache key that points requests of the same type to a cache file</li><li>URL preheating</li><li>Enable cache pre-refresh</li><li>Reasonable use of change mechanisms</li></ol>Learn more about EdgeOne site <a href="https://edgeone.ai/document/56724">acceleration</a> and <a href="https://edgeone.ai/document/56195">caching configuration</a>.<h2 id="Why-Recommend-Tencent-EdgeOne?">Why Recommend Tencent EdgeOne?</h2><a href="https://edgeone.ai/document/45962">Tencent EdgeOne</a> resources are distributed in more than 100 countries and regions, with a total network bandwidth exceeding 160Tbps. It covers more than 2800 acceleration nodes and more than 50 small and medium-sized operator access points worldwide. Each node's storage capacity ranges from 40TB to 1.5PB, and the bandwidth load can reach 40Gbps to over 200Gbps. The huge network effectively improves the access quality of different regions and different operators, and can well cope with traffic bursts.Please <a href="https://edgeone.ai/contact">contact us</a> for more information.

What is Cache and How it Works?

What is Browser Cache?

What are other forms of DNS Load Balancing?

DNS Load Balancing vs. Hardware Load Balancing

Advantages of Tencent EdgeOne DNS Load Balancing&nbsp;

<h2 id="What-is-DNS-Load-Balancing?">What is DNS Load Balancing?</h2>DNS Load Balancing is a technique that involves using the <a href="https://edgeone.ai/learning/detail/dns">Domain Name System</a> (DNS) to distribute network or application traffic across multiple servers. This method is designed to optimize resource use, maximize throughput, minimize response time, and avoid overloading any single resource.In DNS Load Balancing, when a DNS query is made, the DNS server responds not with a single IP address, but with one out of a list of IP addresses corresponding to several servers that host identical services. The DNS server takes into account several factors when deciding which IP address to return, including the number of current connections to the servers, the geographical location of the client, and the health of the servers.This technique helps to improve the performance and reliability of a network or application by ensuring that no single server becomes a bottleneck. It's a cost-effective solution that's easier to set up and manage compared to other load balancing methods, making it a popular choice for distributing network or application traffic.<span style="color:rgb(34,34,34);font-family:-apple-system, &quot;system-ui&quot;, &quot;Segoe UI&quot;, Roboto, Oxygen, Ubuntu, Cantarell, &quot;Fira Sans&quot;, &quot;Droid Sans&quot;, &quot;Helvetica Neue&quot;, sans-serif;">One of the most common DNS load balancing techniques is called Round-Robin DNS.<h2 id="What-is-Round-Robin-DNS?">What is Round-Robin DNS?</h2>Round-Robin DNS is a simple method of load balancing implemented at the DNS level. It works by rotating a list of IP addresses associated with a single DNS record.When a client makes a request to that domain, the DNS server responds with one of the IP addresses from the list. The next time a request is made, the DNS server responds with the next IP address in the list, and so on. This process continues, cycling through the list of IP addresses, hence the term "round-robin."This method distributes client requests across multiple servers, helping to balance the load and potentially increase the availability and reliability of an application or service.<h2 id="What-are-other-forms-of-DNS-Load-Balancing?">What are other forms of DNS Load Balancing?</h2>In addition to Round Robin, there are several other common methods for DNS load balancing:<ol><li>Weighted Round Robin: In this method, each server is assigned a weight, and servers with higher weights will receive more requests. This method can take into account the performance and load capacity of the servers.</li><li>Least Connections: This method sends new requests to the server with the fewest current connections. This method is very effective when dealing with different session loads.</li><li>Response Time: This method sends requests to the server with the shortest response time, ensuring the fastest response speed.</li><li>Geolocation: This method routes requests to the nearest server based on the client's geographic location to reduce latency.</li><li>Failover: In this method, all requests are first sent to the primary server. If the primary server fails, requests will be sent to a backup server.</li></ol><h2 id="DNS-Load-Balancing-vs.-Hardware-Load-Balancing">DNS Load Balancing vs. Hardware Load Balancing</h2>Hardware load balancing is a technique that uses dedicated hardware devices to distribute network traffic. These devices are often referred to as load balancers. They can distributes traffic across multiple servers depending on the servers’ process power, the connections, usage of resources or randomly.Compared with DNS load balancing and DNS load balancing, hardware load balancers can handle a large amount of network traffic and perform complex traffic distribution algorithms, considering factors like server health, response times, and content-based routing, leading to more efficient traffic distribution. However, they can be expensive and may not be as flexible as dns load balance.In summary, DNS load balancing is a simpler, more cost-effective solution that may be suitable for smaller applications or services. Hardware load balancing, on the other hand, is a more robust and feature-rich solution that can handle larger amounts of traffic, but it comes at a higher cost. The choice between the two will depend on the specific needs and resources of the business or service.<h2 id="Advantages-of-Tencent-EdgeOne-DNS-Load-Balancing&nbsp;" style="margin-left:auto;">Advantages of Tencent EdgeOne DNS Load Balancing&nbsp;</h2><div class="raw-html-embed"><a href="https://edgeone.ai/document/54763" target="_blank">Tencent EdgeOne DNS Load Balancing</a> offers several benefits:</div>&nbsp;<ol><li>Automatic DNS Record Import: Once a domain name is added, the system can automatically import <a href="https://edgeone.ai/learning/detail/dns-records">DNS records</a>.</li><li>Global Load Balancing: EdgeOne can cache static content on edge nodes and use global load balancing technology. This ensures that end-users can access resources from nearby edge nodes, improving speeds and reducing latency.</li><li>Smart Scheduling: The EdgeOne platform employs smart scheduling to effectively avoid risks while increasing speed.</li><li>Infrastructure as Code: EdgeOne supports Terraform API, allowing for infrastructure management as code.</li><li>Content Caching: Content caching at the edge is another major feature. This works in tandem with load balancing to ensure that no single node is overwhelmed by user demands.</li><li>Integration with Tencent Cloud Bot Program: EdgeOne integrates the Tencent Cloud bot program management feature and has a bot behavior library covering many crawler types such as ads, screen capturing tools, search engines.</li></ol>These features collectively optimize content delivery and enable accelerated computing capabilities at the edge of the network. Please note that the actual advantages can vary based on the specific use case and requirements. It's always a good idea to further explore and understand the platform for your specific needs. You are welcome to <a href="https://edgeone.ai/contact">Contact Us</a> for more information.&nbsp;

DNS Load Balancing

What is DNS Load Balancing?

What are the Differences between HTTP/2, HTTP/3, and HTTPS?

Tencent EdgeOne: Supporting HTTPS and Key Advantages

Network

HTTPS (Hyper Text Transfer Protocol Secure) is a network transmission protocol used for secure and encrypted data transmission between clients and servers. It is the secure version of the HTTP protocol, which uses SSL/TLS protocol on the basis of HTTP to encrypt and authenticate data, ensuring the privacy and integrity of the data during transmission.<h2 id="How-does-HTTPS-Work?">How does HTTPS Work?</h2><h3>HTTPS Communication Process</h3>The communication process of HTTPS is as follows:<img src="https://edgeone.ai/media/83776622-d85f-4a26-9701-d927145c4d29.png" alt="how-https-work.png"><ol><li>Client initiates an HTTPS request.</li><li>Server returns a pre-configured public key certificate to the client.</li><li>Client verifies the public key certificate, including checking the certificate's validity period, whether its purpose matches the requested site, whether it is in the CRL revocation list, and whether the higher-level certificate is valid. This is a recursive process, continuing until the root certificate is verified (either the operating system's built-in root certificate or the client's built-in root certificate). If the verification passes, the process continues; otherwise, a warning message is displayed.</li><li>Client uses a pseudorandom number generator to generate the symmetric key used for encryption, then encrypts this symmetric key with the certificate's public key and sends it to the server.</li><li>Server uses its private key to decrypt the message, obtaining the symmetric key. In this way, both the client and the server hold the same symmetric key.</li><li>Server uses the symmetric key to encrypt the "plaintext content A" and sends it to the client.</li><li>Client uses the symmetric key to decrypt the encrypted response, obtaining the "plaintext content A".</li><li>Client initiates another HTTPS request, encrypts the request's "plaintext content B" using the symmetric key, and then the server decrypts the ciphertext using the symmetric key, obtaining the "plaintext content B".</li></ol><h3>Connections between SSL, TLS, and HTTPS</h3><ol><li>SSL (Secure Sockets Layer) is an encryption protocol used to implement secure communication in networks. The purpose of the SSL protocol is to provide an encryption and authentication layer between the application layer (e.g., HTTP) and the transport layer (e.g., TCP).</li><li>TLS (Transport Layer Security) is the successor version of the SSL protocol, offering higher security and performance. In fact, TLS 1.0 is essentially SSL 3.1, and their differences mainly lie in improvements to encryption algorithms and protocol details.</li><li>The relationship between HTTPS and TLS/SSL is that HTTPS achieves secure communication by using SSL or TLS protocols to encrypt and authenticate the HTTP protocol. When communicating between clients and servers, HTTPS uses SSL or TLS protocols to encrypt data, ensuring the security of the transmission process. Nowadays, due to TLS being an updated and more secure version of SSL, the TLS protocol is more commonly used in practice.</li></ol><h2 id="HTTP-vs-HTTPS">HTTP vs HTTPS</h2>The main difference between HTTP and HTTPS lies in the security of data transmission:<ol><li>Security: HTTP is not secure, while HTTPS is secure. Data transmitted by HTTP is not encrypted, so it can be intercepted and obtained by anyone who intercepts network transmission. HTTPS encrypts data through the SSL/TLS protocol, protects the integrity and privacy of the data, making it not easy to be stolen and tampered with during transmission.</li><li>Port: HTTP uses port 80 by default, while HTTPS uses port 443 by default.</li><li>URL: In the address bar of most browsers, HTTPS websites will display a small lock icon, indicating that the connection is secure. HTTP websites do not have this.</li><li>Certificate: HTTPS needs to use certificates issued by a certification authority (CA). If the certificate is not trusted by the browser, users will see a warning, telling them that the connection may not be secure.</li><li>Performance: Because HTTPS needs to encrypt data, it may be slightly slower than HTTP in processing speed. However, with the advancement of technology, this gap is becoming smaller and smaller.</li><li>SEO Optimization: Search engines like Google favor HTTPS websites in rankings because they are more secure</li></ol><h2 id="What-are-the-Differences-between-HTTP/2,-HTTP/3,-and-HTTPS?">What are the Differences between HTTP/2, HTTP/3, and HTTPS?</h2><a href="https://edgeone.ai/learning/detail/http2">HTTP/2</a> and <a href="https://datatracker.ietf.org/doc/html/rfc9114">HTTP/</a>3 are different versions of the HTTP protocol, while HTTPS is a secure communication protocol for encrypting data.<ol><li>HTTP/2: Introduces features like multiplexing and header compression to enhance performance and efficiency by reusing connections and handling parallel requests.</li><li>HTTP/3: Based on the UDP protocol, it uses the QUIC protocol to transmit data, aiming to facilitate faster connection establishment and improve performance during network interruptions. HTTP/3 operates on QUIC at the transport layer instead of TCP, enabling faster connection establishment and improved performance.</li><li>HTTPS: It is the secure version of the HTTP protocol, ensuring secure data transmission between clients and servers by encrypting and authenticating data using the TLS/SSL protocol. In summary, HTTPS is the secure version of the HTTP protocol, while HTTP/2 and HTTP/3 are different versions of the HTTP protocol, both of which can operate under HTTPS.</li></ol><h2 id="Is-HTTPS-100%-Secure?">Is HTTPS 100% Secure?</h2>Although HTTPS is more secure than HTTP, it cannot guarantee 100% security. HTTPS indeed improves the security of data transmission, preventing data from being intercepted or tampered with by third parties, but there are still some potential security risks and limitations:<ol><li>Certificate issues: If the server's SSL/TLS certificate is not issued by a trusted Certificate Authority (CA), or if the certificate has expired or been tampered with, the HTTPS connection may be vulnerable to attacks.</li><li>Man-in-the-middle attacks: Although HTTPS can prevent most man-in-the-middle attacks, in certain situations, such as when an attacker controls the communication link between the user and the server or forges a valid certificate, the attacker may still be able to intercept and tamper with data.</li><li>Server and client security vulnerabilities: HTTPS mainly protects the security of data during transmission but cannot prevent security vulnerabilities in the server or client itself, such as <a href="https://edgeone.ai/learning/detail/web-attack">SQL injection</a>, <a href="https://edgeone.ai/learning/detail/web-attack">cross-site scripting (XSS) attacks</a>, etc.</li><li>Encryption algorithm and protocol vulnerabilities: Although the TLS protocol is constantly being updated to fix known vulnerabilities and improve security, new vulnerabilities and security issues may continue to emerge. Therefore, it is essential to use the latest encryption algorithms and protocols.</li><li>User behavior: Users may mistakenly trust the wrong websites, such as phishing sites, even if they use HTTPS. Users need to be cautious in verifying the authenticity of websites to avoid leaking personal information.</li></ol><h2 id="Tencent-EdgeOne:-Supporting-HTTPS-and-Key-Advantages">Tencent EdgeOne: Supporting HTTPS and Key Advantages</h2><a href="https://edgeone.ai/products/edgeone">Tencent&nbsp;EdgeOne</a> provides excellent support for HTTPS and offers several advantages when you use this secure protocol:<ol><li><a href="https://edgeone.ai/document/54154#f64cd173-6c19-466d-be4e-135536ff29c1">Supported Certificate Types and Encryption Algorithms</a>: EdgeOne supports various types of certificates and encryption algorithms. International standard certificates utilize RSA and ECC encryption algorithms, while Chinese SM standard certificates employ the SM2 encryption algorithm.</li><li>Free and Paid Certificates: EdgeOne provides both free and paid certificate options. If you're a SME site owner or run a personal blog, you might consider configuring a <a href="https://edgeone.ai/document/54761">free certificate</a> for your domain. This way, you can support HTTPS access without any notable initial costs.</li><li>HTTP to HTTPS Conversion: If you wish to convert your site from <a href="https://edgeone.ai/document/54203">HTTP to HTTPS</a>, EdgeOne allows you to deploy a free certificate to your EdgeOne domain, although this only applies to single-domain certificates. For more sophisticated certificate services, you can purchase <a href="https://edgeone.ai/document/30153">Tencent Cloud SSL Certificates</a>.</li></ol>In summary, implementing HTTPS not only enhances your website's SEO efficiency, but more importantly, it provides a secure platform for your visitors, thereby cultivating trust with your target audience.

What is HTTPS and How it Works?

What is HTTPS?

Serverless

Serverless represents a <a href="https://en.wikipedia.org/wiki/Cloud-native_computing">cloud-native</a> development paradigm that empowers developers to create and operate applications without the burden of server management.Despite the term "serverless", servers are indeed involved, but they are encapsulated from the application development process. Developers can concentrate on crafting business logic without the need to provision, configure, or maintain server infrastructure. The necessary server services are supplied by the cloud vendor, enabling developers to stay focused on their core competencies.Serverless offerings are designed to be consumption-based, using an event-driven execution model that scales seamlessly in response to demand. Consequently, when serverless functions are not in use, they do not generate any costs, providing a cost-effective solution for variable workloads.<h2 id="How-does-Serverless-Work?">How does Serverless Work?</h2>Serverless products are usually divided into two categories: Functions as a Service (FaaS) and Backend as a Service (BaaS):<ol><li><a href="https://en.wikipedia.org/wiki/Function_as_a_service">FaaS</a> is an event-driven computing execution model in which developers write logic, deploy it in containers that are fully managed by the platform, and then execute it on demand.</li><li><a href="https://en.wikipedia.org/wiki/Backend_as_a_service">BaaS</a> is responsible for managing the underlying infrastructure and middleware environment, and provides a series of back-end services and API interfaces for direct access and use by client programs, such as authentication, data storage, and message push.</li></ol>When developers refer to serverless, they are actually talking about the FaaS model. Under FaaS, developers still write custom server-side logic, but it runs in a container that is fully managed by the cloud service provider.The core of how serverless works is to transform the traditional one-time construction model into an ongoing subscription service model. By dividing the application into multiple independent and composable Serverless functions, dynamic application and management of resources are achieved, and the front-end and back-end are connected using an event-driven approach: specifically, when a Serverless function is triggered (Such as API request), the cloud service platform will automatically allocate the required computing resources and network resources for execution; when this function is executed, the platform will reclaim the relevant resources for other function calls; if the function needs to be executed within a period of time If it continues to run, the management platform will also allocate resources to it regularly according to predetermined strategies.<h2 id="Serverless-Technical-Features">Serverless Technical Features</h2><h3>1. Serverless Advantages</h3><ol><li>Reduced costs: Since serverless architecture is fully managed by cloud service providers, you don't need to purchase and maintain server hardware or operating systems. Moreover, you only pay for the actual computing resources used, rather than pre-allocated resources, which can significantly reduce your costs.</li><li>Automatic scaling: Serverless architecture can automatically scale your application's processing capacity to meet the growing user load demands. This means you don't have to worry about application performance bottlenecks and manually adjusting server resources.</li><li>High scalability: Serverless applications are highly scalable because they rely on multiple independent, parallel-running functions. Each function can be scaled independently to support higher loads and throughput.</li><li>Serverless security: Cloud service providers are responsible for maintaining and updating security measures for serverless applications, such as firewalls, encryption, and access control. This allows you to focus more on writing code without worrying about application security.</li><li>Fast development and deployment: Serverless architecture supports rapid development and deployment. You can easily build and deploy applications using various pre-built templates and APIs. Additionally, serverless applications can be automatically deployed and updated, meaning you can quickly iterate and release new features without manual intervention.</li></ol><h3>2. Serverless Disadvantages</h3>Although serverless architecture has many advantages, it also has some drawbacks. One major drawback is that, since the application is fully managed by the cloud service provider, you may be subject to the provider's limitations and constraints. Additionally, the performance of serverless applications may be subject to some restrictions, such as cold start issues and request limits. Therefore, when considering using serverless architecture, you need to carefully consider the application's requirements and performance needs.<h2 id="Serverless-Applicable-Scenarios">Serverless Applicable Scenarios</h2><ol><li>Web applications: Serverless architecture can support various static and dynamic web applications. For example, various request actions of <a href="https://www.redhat.com/en/topics/api/what-is-a-rest-api">RESTful&nbsp;API</a> can be mapped to FaaS functions. Through the automatic elastic expansion function of FaaS, serverless web applications can quickly host high-traffic sites.</li><li>Multimedia processing: Video and picture websites need to process and convert the pictures and video information uploaded by users. However, this multimedia conversion work is not performed all the time. It only needs to be performed when certain events occur, such as when users upload or edit pictures and videos. Through the event-driven mechanism of Serverless, users can trigger processing logic when specific events occur, thereby saving the cost of computing resources during idle periods and ultimately reducing operation and maintenance costs.</li><li>Internet of Things:&nbsp; <a href="https://en.wikipedia.org/wiki/Internet_of_things">Internet&nbsp;of&nbsp;Things&nbsp;(IoT)</a> applications need to interface with a large number of different devices. Different devices need to continuously collect and transmit data to the server. Serverless architecture can help Internet of Things applications interface with different data inputs. source.</li><li>Data and event stream processing: Serverless can be used to analyze and process some continuous event streams and data streams in real time, filter, transform and analyze events and data in real time, thereby triggering the next step of processing. For example, real-time analysis of logs or social media information from various systems is performed, and key information that meets specific characteristics is recorded and alerted.</li><li>System integration: The functional architecture of Serverless applications is very suitable for system integration. Users do not need to develop and operate a complete application for some simple integration logic as in the past. Users can focus more on the required integration logic and only write and integrate relevant code logic instead of a complete application. The decentralized architecture of function applications makes the addition and change of integrated logic more flexible.</li></ol><h2 id="Tencent-Edge-Functions" style="margin-left:0pt;">Tencent Edge Functions</h2><a href="https://edgeone.ai/products/function">Tencent&nbsp;Edge&nbsp;Functions</a> offers a serverless code execution platform for the edge nodes of Tencent EdgeOne, enabling you to deploy your applications via Tencent EdgeOne's global network. By embracing serverless architecture, you can concentrate more on development and enhancing the user experience.&nbsp;<img src="https://edgeone.ai/media/33631240-d73a-4465-afa4-ce299be1cc11.png" alt="e8a224f5b37311eeae9a525400c26da5.png">Here are the benefits of utilizing Tencent Edge Functions:<ol><li>Ultra-low Latency: By executing your code on Tencent EdgeOne edge nodes strategically located worldwide, requests are intelligently routed to the closest edge node. This proximity triggers an edge function to swiftly process the request and deliver the results back to the user, ensuring a seamless and responsive experience.</li><li>Elastic expansion: In the event of a sudden surge in client requests on a particular node, the requests are intelligently redispatched to other Tencent EdgeOne global edge nodes with ample computing resources, prioritizing proximity to ensure optimal performance.</li><li>Reduced Costs: Distributing code to the edge minimizes the need for back-to-origin requests, thereby conserving origin egress traffic and reducing expenses associated with origin server usage.</li><li>Rapid Deployment: Deploying code to global edge nodes is executed in mere seconds, allowing for agile and efficient alignment with business requirements.</li><li>Superior Performance: Achieving a <a href="https://en.wikipedia.org/wiki/Cold_start_(computing)">cold&nbsp;start</a> speed of up to 0.5ms, high-precision and low-loss CPU isolation ensures 50us-level CPU timing accuracy and time-slice scheduling with minimal performance degradation of less than 0.1%.</li><li>Streamlined Development: Utilizing JavaScript and the standard <a href="https://edgeone.ai/document/52683">Web&nbsp;Service&nbsp;Worker&nbsp;API</a>, Tencent EdgeOne offers a wealth of scenario templates to expedite business development. Additionally, the <a href="https://en.wikipedia.org/wiki/Command-line_interface">CLI&nbsp;(Command&nbsp;Line&nbsp;Interface)</a> and local developer tools facilitate efficient function engineering management.</li></ol>For more detailed information, please visit <a href="https://edgeone.ai/">our&nbsp;official&nbsp;website</a> and explore at your leisure. We are always <a href="https://edgeone.ai/contact">here</a> to address any of your needs or inquiries.

What is Serverless and How it Works?

What is Serverless?

Nowadays, enhancing customer experience is paramount to driving engagement and achieving business success. One crucial aspect that significantly impacts customer satisfaction is the speed at which a website loads.Studies have revealed that <a href="https://developers.google.com/web/fundamentals/performance/why-performance-matters/">40% of users</a> abandon a website if it takes longer than three seconds to load, while even a mere one-second delay in page response can lead to a 7% reduction in conversions. It's clear that every second counts!In the web's pursuit of fast loading times, we have a number of different technologies to help us. One approach is to minimize the underlying code your site will use without affecting how it functions. "Compression" algorithms are one way to achieve this, most modern web browsers understand or “accept” content encoded in one of three algorithms:<ul style="list-style-type:disc;"><li>Deflate</li><li>Gzip</li><li>Brotli</li></ul>To learn how to speed up your website, please checkout <a href="https://edgeone.ai/blog/details/accelerate">here</a>.<h2 id="What-is-GZIP-Compression?">What is GZIP Compression?</h2>GZIP, developed by Jean-loup Gailly and Mark Adler, is a widely used compression format and software application. The initial beta release was made in 1992. The first actual version, version 1.0, was released in early 1993. It was originally created as a versatile compression library and drew inspiration from the DEFLATE compression algorithm.GZIP offers 9 levels of file compression, ranging from level 1 for smaller file savings and faster compression speed to level 10 for maximum file savings at a slower compression speed. It is commonly able to achieve compression ratios of up to 80%. It is particularly effective for compressing data like text files, JavaScript or CSS codes, and other types of HTTP content.<h2 id="GZIP-Compression-Algorithm">GZIP Compression Algorithm</h2>GZIP is a lossless compression algorithm that builds upon the deflate algorithm, which combines LZ77 and Huffman coding techniques. As a lossless compression method, it ensures that the decompressed data remains identical to the original.Let's dive into how GZIP works in practice:<ul style="list-style-type:disc;"><li>When a server receives a web page request, it checks the request header for GZIP compression support.</li><li>If GZIP compression is supported, the server generates compressed markup for the page.</li><li>GZIP converts markup into a compressed data stream for efficient delivery to end users.</li><li>The user's browser decompresses the received stream, restoring the original markup.</li></ul>In short, GZIP identifies repetitive patterns, replaces them with shorter representations, and assigns variable-length codes based on frequency.This compression method significantly reduces file sizes, enhancing data transmission efficiency.<h2 id="Comparing-the-Effects-of-Using-GZIP">Comparing the Effects of Using GZIP</h2>For example, after bundling with webpack or rollup, the resulting JavaScript file may be quite large. Although we can use `chunk` to separate the files, the overall size may still be significant. Let's see the effect of GZIP compression:<img src="https://edgeone.ai/media/e89813b3-2cff-4562-bbc0-be5e5489b6c7.png" alt="Before Gzip’s Compression.png"><img src="https://edgeone.ai/media/f080c407-0315-422a-a80f-eed290e0e407.png" alt="After Gzip’s Compression.png">Comparing the compressed sizes of three files before and after compression:<img src="https://edgeone.ai/media/fe7a57c3-f9d1-4ad3-afe8-521760ad8259.png" alt="企业微信截图_efec7c4d-9766-4165-ba78-134ad51d9f89.png"><h2 id="What-is-Brotli-Compresion?">What is Brotli Compresion?</h2>Brotli, initially developed by Google for woff2 usage and later expanded for broader applications, is an exceptionally efficient compression algorithm. It achieves compression ratios comparable to the most effective general-purpose compression methods currently availableBrotli introduces 11 compression quality levels, ranging from 1 to 11. Increasing the quality level improves the compression ratio, but it's worth noting that higher levels may affect the compression speedBrotli has gained widespread adoption and is supported by all modern web browsers. Approximately 97.28% of users currently utilize browsers that support Brotli.<img src="https://edgeone.ai/media/e0c670c3-4a25-4095-85a1-bf5d54f3884d.png" alt="caiuse.png">You can examine the accept-encoding request header to check if your browser supports Brotli. When Gzip and Brotli compression algorithms are enabled at the same time, Brotli compression level has higher priority than Gzip. It looks like this:<pre><code class="language-plaintext">Accept-Encoding: br,gzip</code></pre><h2 id="Brotli-Compression-Algorithm">Brotli Compression Algorithm</h2>Brotli is an open source compression algorithm launched by Google, which is more efficient than the common Gzip. It compresses data through a variant of the LZ77 algorithm, Huffman encoding, and second-order text modeling, helping us to compress various file sizes in web pages more efficiently. , improve loading speed.It uses a dictionary of common words and vocabulary in English, Spanish, Chinese, Hindi, Russian, and Arabic, combined with machine language, especially common terms in HTML and JavaScript, to compress data than gzip, bzip2, LZMA, etc. Further compression is performed on the basis of the algorithm, which reduces the capacity of the data content and makes the web page load faster.Let's dive into how Brotli works in practice:<ul style="list-style-type:disc;"><li>First, Brotli looks for repeated patterns in the data and replaces them with shorter codes. This helps to eliminate redundancy and make the file more compact.</li><li>Second, Brotli uses a method called Huffman coding. It assigns shorter codes to the most common words and longer codes to the less common ones. By doing this, Brotli can represent frequently used words with fewer bits, reducing the file size.</li><li>Another trick that Brotli employs is called context modeling. It analyzes the context or surroundings of the data to make smarter predictions. By understanding the patterns and relationships between the data, Brotli can make more accurate guesses about what comes next. This helps in compressing the file more efficiently.</li></ul>Overall, Brotli's combination of advanced techniques, comprehensive static dictionary, and transformative mechanisms make it a highly effective compression algorithm. It delivers impressive compression ratios and file size reduction, outperforming other algorithms like GZIP, bzip2, and LZMA.<h2 id="Brotli-vs-GZIP">Brotli vs GZIP</h2>From a usage perspective, Based on HTTP Archive data from January 2024, Brotli is actually used more than gzip for JavaScript and CSS!<img src="https://edgeone.ai/media/036771d1-182c-4b0e-8bed-6c557d6a9f26.jpeg" alt="compression_usage.jpeg">Use the <a href="https://tools.paulcalvano.com/compression-tester/">Paul Calvano's Tool</a> to test the compression performance of gzip and brotli.<h3>Brotli's Advantages Over GZIP</h3>Brotli offers an advantage over GZIP by utilizing a dictionary, allowing it to send keys instead of full keywords. Because of this, Brotli achieves significant file size reductions compared to GZIP compression.These improvements in file size contribute to more efficient data transmission and storage in web environments.Reducing the number of transferred bytes not only improves page load times but also helps lower the costs associated with CDN.<h3>GZIP's Advantages Over Brotli</h3>While Brotli offers impressive compression capabilities, GZIP still possesses certain advantages in specific scenarios. Here are a few advantages of GZIP over Brotli:<ul style="list-style-type:disc;"><li>Compatibility: GZIP has been widely used since the 1990s and is supported by virtually all browsers and web servers. It has become a standard compression format, ensuring widespread compatibility across various platforms.</li><li>Established Ecosystem: GZIP has a well-established ecosystem with abundant tools and libraries available for implementation. Its long-standing presence in the industry makes integrating and working within different software environments easier.</li><li>Compression Speed: GZIP generally has faster compression speeds compared to Brotli. It can quickly compress files, making it suitable for scenarios where speed is a priority.</li><li>Lower Server Load: <a href="https://edgeone.ai/document/46359">EdgeOne's Smart Compression</a> is performed at their edge network, not on your origin server. This means that the compression is done on EdgeOne's servers, not yours. Therefore, using Brotli compression through EdgeOne does not use up your server's resources. This is one of the advantages of using a Content Delivery Network (CDN) like EdgeOne, as it offloads tasks like compression from your server to theirs, freeing up resources on your server.</li><li>Support for Streaming: GZIP is well-suited for streaming scenarios, where data is compressed and delivered in real time. Its compatibility and support for streaming applications make it a preferred choice in certain use cases.</li></ul>Learn more about <a href="https://edgeone.ai/document/46359">smart compression</a>, or sign up for <a href="https://edgeone.ai/register?s_url=https://edgeone.ai">EdgeOne</a>.

Brotli vs GZIP

Brotli vs GZIP Compression Algorithm

The importance of image formats for website acceleration is significant as they can help reduce file size, maintain image quality, and support transparency and animation effects. These factors are crucial for improving website performance, optimizing user experience, and saving server bandwidth. Understanding the characteristics and development history of different image formats can aid website developers in making wise decisions in optimizing website loading speed and user experience.<img src="https://edgeone.ai/media/a6ef1de6-cabb-4bdd-b013-9c615692fdb2.png" alt="muti-format-unit.png"><h2 id="Common-Image-File-Types">Common Image File Types</h2><ol><li>WebP: Excellent choice for both images and animated images. WebP offers much better compression than PNG or JPEG with support for higher color depths, animated frames, transparency etc. AVIF offers slightly better compression, but is not quite as well-supported in browsers and does not support progressive rendering. Support: Chrome, Edge, Firefox, Opera, Safari</li><li>AVIF: Good choice for both images and animated images due to high performance and royalty free image format. It offers much better compression than PNG or JPEG with support for higher color depths, animated frames, transparency, etc. Note that when using AVIF, you should include fallbacks to formats with better browser support (i.e. using the &lt;picture&gt; element). Support: Chrome, Edge, Firefox (still images only: animated images not implemented), Opera, Safari.</li><li>JPEG: Good choice for lossy compression of still images (currently the most popular). Prefer PNG when more precise reproduction of the image is required, or WebP/AVIF if both better reproduction and higher compression are required. Support: Chrome, Edge, Firefox, IE, Opera, Safari.</li><li>PNG: PNG is preferred over JPEG for more precise reproduction of source images, or when transparency is needed. WebP/AVIF provide even better compression and reproduction, but browser support is more limited. Support: Chrome, Edge, Firefox, IE, Opera, Safari.</li><li>GIF: Good choice for simple images and animations. Prefer PNG for lossless and indexed still images, and consider WebP, AVIF or APNG for animation sequences. Support: Chrome, Edge, Firefox, IE, Opera, Safari.</li></ol><h2 id="Why-use-WebP-or-AVIF?">Why use WebP or AVIF?</h2>Both WebP and AVIF are modern image formats that play a crucial role in website acceleration. Compared to traditional JPEG and PNG formats, WebP and AVIF offer higher compression rates and better image quality, ultimately reducing file size, improving website loading speed, and providing a better browsing experience for users.<ol><li>File Size: Both WebP and AVIF formats can significantly reduce file size while maintaining image quality. According to Google's data, WebP images can reduce file size by 25%-34% compared to JPEG images. AVIF format, being more advanced than WebP, offers even better compression, further reducing file size.</li><li>Image Quality: Both WebP and AVIF formats can maintain high image quality during compression. In particular, AVIF format uses more advanced encoding technology, providing clearer and more delicate image effects at the same file size.</li><li>Loading Speed: Due to the reduced file size, both WebP and AVIF formats can significantly improve a website's loading speed. Loading speed is crucial for user experience, as many users may abandon a site if the waiting time is too long. Fast-loading websites can increase user satisfaction, reduce bounce rates, and ultimately improve conversion rates.</li><li>SEO Optimization: Website loading speed is also an essential factor in search engine optimization (SEO). Fast-loading websites may achieve higher rankings in search engine results, attracting more traffic.</li><li>Bandwidth Savings: For website owners, using both WebP and AVIF formats can save bandwidth resources. Reducing file size means servers need to transfer less data, lowering operational costs.</li></ol><h2 id="AVIF-vs-WebP">AVIF vs WebP</h2>AVIF and WebP are both modern image formats that offer higher compression rates and better image quality compared to traditional JPEG and PNG formats. However, there are some differences and advantages between them:<img src="https://edgeone.ai/media/211a526d-0b99-43dd-9750-b2fde1dacc4e.png" alt="comparing.png"><h3>Advantages of AVIF</h3><ol><li>Higher compression efficiency: AVIF uses image encoding technology based on the AV1 video codec, which allows it to provide better image quality at smaller file sizes compared to WebP. This means that AVIF images may have smaller file sizes than WebP images at equivalent quality.</li><li>Better color representation: AVIF supports 10-bit and 12-bit color depth, while WebP only supports 8-bit color depth. This allows AVIF to provide richer color representation and smoother color transitions.</li><li>HDR support: AVIF supports High Dynamic Range (HDR) images, offering higher contrast and a wider color range. WebP does not support HDR.</li></ol><h3>Advantages of WebP</h3><ol><li>Wider browser compatibility: WebP format is more widely supported in mainstream browsers, including Chrome, Firefox, Edge, and Opera. Although AVIF format is gradually gaining support, it is not yet fully widespread.</li><li>Mature ecosystem: As WebP has been around for a longer time, many image processing tools, content management systems (CMS), and development libraries already support the WebP format. AVIF, as a relatively new format, is still developing its ecosystem.</li></ol>In summary, AVIF has advantages in compression efficiency, color representation, and HDR support, while WebP excels in browser compatibility and ecosystem maturity. When choosing an image format, you can consider which format to use based on specific needs and compatibility. Additionally, you can use multiple formats and combine the features of modern browsers to provide the best image experience for different browsers.<h2 id="Image-Format-Conversion">Image Format Conversion</h2>Converting images to WebP or AVIF formats can be achieved using various tools and methods:<ol><li>Command-line tools: For WebP, you can use Google's "cwebp" tool, while for AVIF, you can use "libavif" or "avifenc". These tools allow you to convert images in batch mode, adjust quality settings, and resize images.</li><li>Image editing software: Programs like Adobe Photoshop, GIMP, and ImageMagick support WebP and AVIF formats, allowing you to convert and edit images using familiar interfaces.</li><li>Online converters: Websites like Squoosh. app, Convertio, and CloudConvert offer user-friendly interfaces for converting images to WebP and AVIF formats without the need to install any software.</li><li>Plugins and libraries: For popular content management systems (CMS) like WordPress, plugins such as WebP Express and EWWW Image Optimizer can automatically convert and serve images in WebP or AVIF formats. Additionally, various JavaScript libraries and frameworks can help with image format conversion in web applications.</li><li>Content Delivery Networks (CDNs): Some CDNs, like <a href="https://edgeone.ai/">Tencent&nbsp;EdgeOne - Next&nbsp;generation&nbsp;CDN</a>. It's <a href="https://edgeone.ai/document/54771">Image&nbsp;processing</a> to resize and convert images. The process of processing, caching and responding is taken place on EdgeOne servers. Your own origin only needs to store the original images, thus reducing image management costs on your side. EdgeOne can also compress images to improve page load speed without sacrificing visual impact. Images can be converted between various formats, such as converting WebP to JPG, WebP to GIF, AVIF to JPG, and AVIF to WebP, among others.</li></ol>By understanding and utilizing WebP and AVIF formats in website performance optimization, you can significantly improve image acceleration, enhance user experience, and boost organic traffic. Converting images to these modern formats is a crucial step in achieving these benefits.

WebP vs AVIF

WebP vs AVIF: Modern Image Formats

5 DNS Services Involved in Loading a Webpage

Advantages of Tencent EdgeOne DNS Services

<h2 id="What-is-DNS?" id="What-is-DNS?">What is DNS?</h2>The meaning of DNS is Domain Name System, is a critical component of the internet infrastructure that translates human-friendly domain names into IP addresses, which are machine-readable. This system allows users to access websites using easy-to-remember domain names instead of complex numerical IP addresses. DNS operates much like a phone book for the internet, where upon entering a domain name, such as www.example.com, the DNS system translates this into the corresponding IP address, such as 192.0.2.1. This process is crucial for facilitating communication between different devices over the internet.<h2 id="5-DNS-Services-Involved-in-Loading-a-Webpage" id="5-DNS-Services-Involved-in-Loading-a-Webpage">5 DNS Services Involved in Loading a Webpage</h2>There are several types of DNS services, each serving a unique purpose:<ol><li>DNS Resolver: This is the first stop in the DNS lookup process. It receives the query from the client and then interacts with other DNS servers to find the correct IP address.</li><li>Recursive DNS Servers: These servers take DNS queries from DNS resolvers and search for the answer. If they don't have the answer, they query other servers, including root, TLD, and authoritative DNS servers.</li><li>Root DNS Servers: These servers direct queries to the appropriate Top-Level Domain (TLD) servers.</li><li>TLD DNS Servers: These servers store information about domains based on their extensions, such as .com, .org, .net, etc.</li><li>Authoritative DNS Servers: These servers store DNS record information, including the IP address for a specific domain name.</li></ol><h2 id="How-Does-DNS-Work?" id="How-Does-DNS-Work?">How Does DNS Work?</h2>Imagine you're in a city where you don't know your way around, and you need to find a specific address. You'd probably use a map or a GPS system. The DNS works similarly for the internet. When you type a website address into your browser, the DNS system starts a search for the corresponding IP address.This process, known as a DNS lookup, involves several steps:<ol><li>The user enters a URL into a web browser.</li><li>The query first checks the local cache of the operating system; if the domain name is found, the process ends here, and the IP address is returned.</li><li>If the domain name is not in the local cache, the query is sent to the DNS resolver configured in the system settings, which is usually a local DNS server provided by the internet service provider (ISP).</li><li>The local DNS server checks its cache to see if it has a record of the IP address for the domain name. If it does, it returns the IP address to the DNS resolver, and the process ends.</li><li>If the local DNS server doesn't have the information cached, it acts as a recursive DNS server and sends a query to the root DNS server.</li><li>The root server responds with a pointer to the TLD (Top-Level Domain) server.</li><li>The local DNS server then sends a query to the TLD server, which responds with a pointer to the authoritative DNS server.</li><li>The local DNS server sends a query to the authoritative server, which responds with the IP address for the domain name.</li><li>The local DNS server sends the IP address back to the DNS resolver, caching the record for future queries.</li><li>The DNS resolver provides the IP address to the web browser, which then requests the web page from the web server associated with that IP address.</li><li>The web server sends the web page back to the web browser for the user to view.</li></ol><h2 id="What-are-the-Types-of-DNS-Queries?" id="What-are-the-Types-of-DNS-Queries?">What are the Types of DNS Queries?</h2>In a typical DNS lookup three types of queries occur. By using a combination of these queries, an optimized process for DNS resolution can result in a reduction of distance traveled.<ol><li>Recursive Query: In a recursive query, the DNS client requires the DNS server to respond with either the requested resource record or an error message if the DNS server cannot find the record. If the DNS server does not have the information in its cache, it will query other DNS servers on behalf of the client until it finds the information or confirms that the information does not exist.</li><li>Iterative Query: In an iterative query, the DNS client allows the DNS server to return the best answer it can give based on its current cache. If the queried DNS server does not have the exact match, it will return a referral to other DNS servers. The client then queries these other servers.</li><li>Non-Recursive Query: Non-recursive queries are typically used by DNS servers to communicate with each other. The DNS client (usually another DNS server) will ask the server for a record and the server will respond with the record or say it does not have it. Unlike recursive queries, the server will not go out of its way to find the record.</li></ol><h2 id="Why-is-the-DNS-Server-not-Responding?" id="Why-is-the-DNS-Server-not-Responding?">Why is the DNS Server not Responding?</h2>You may get a message that says "DNS server isn't responding" after entering a domain name in the URL bar of your browser.&nbsp;This means there was an attempt to communicate with the DNS server, but the server failed to return a result. Here are a few possible causes:<ol><li>Network Issues: The most common reason is network connectivity issues. This could be due to problems with your Internet Service Provider (ISP), your local network, or your personal device's connection.</li><li>Server Downtime: The DNS server itself might be temporarily down or overloaded with requests. This can happen if the server is experiencing high traffic or undergoing maintenance.</li><li>Incorrect DNS Settings: If the DNS settings on your device or router are incorrect, it could prevent the DNS server from responding. This could be due to incorrect DNS addresses or other configuration errors.</li><li>DNS Cache Issues: Sometimes, the information stored in your DNS cache might be outdated or corrupt, which can cause issues.</li></ol><h2 id="What-is-DNS-Propagation?" id="What-is-DNS-Propagation?">What is DNS Propagation?</h2>DNS propagation is a crucial concept in the world of networking and the internet. It refers to the time taken for all the servers across the globe to update their records with new DNS (Domain Name System) information. When a change is made to a domain's DNS records, such as modifying the IP address of a website or migrating to a new host, this information needs to be updated on all DNS servers worldwide. This process is what we refer to as DNS propagation.The duration of DNS propagation can vary significantly, typically ranging from a few minutes to 48 hours or more. This variation is due to the different update frequencies of Internet Service Providers (ISPs). Some ISPs refresh their DNS records more frequently than others, leading to quicker updates for some users.During the propagation period, some users might still be directed to your old site or IP address until their ISP updates their DNS records. This is why you might experience some downtime or inconsistencies when you make significant changes to your DNS records.One of the key factors influencing DNS propagation time is the TTL (Time To Live) setting in your DNS records. TTL is a value that determines how long a DNS record is kept in the cache of DNS servers and user's computers. A lower TTL means the record will expire sooner, prompting servers to fetch the updated information more quickly. Therefore, if you're planning to change DNS records, you can reduce the TTL value ahead of time to potentially decrease propagation time.However, even with a low TTL, you may still encounter issues if old DNS information is stored in your local DNS cache. This is where the concept of 'flush DNS' comes into play. Flush DNS is the process of clearing out old DNS information from your local cache, forcing your computer to retrieve the latest DNS information.<h2 id="What-is-Reverse-DNS-Lookup?" id="What-is-Reverse-DNS-Lookup?">What is Reverse DNS Lookup?</h2>Reverse DNS lookup, also known as rDNS lookup, is a process that finds the hostname associated with a specific IP address. It's the opposite of the more common forward DNS lookup, which locates an IP address based on a hostname.In a forward DNS lookup, your computer consults a DNS server to find the IP address for a specific domain name or hostname. For instance, if you enter "www.example.com" into your web browser, your computer will perform a forward DNS lookup to find the IP address associated with that domain name.In a reverse DNS lookup, the process is flipped. Your computer starts with an IP address and uses a DNS server to find the associated hostname. This is often used for troubleshooting, verifying the authenticity of devices, and in certain security scenarios.To perform a reverse DNS lookup, you can use various online tools or command-line utilities. For example, on a Unix-based system like Linux or macOS, you can use the "dig" command with the "-x" option followed by the IP address. On Windows, you can use the "nslookup" command followed by the IP address.It's important to note that not all IP addresses will have a corresponding hostname, as not all IP owners choose to set up reverse DNS records.<h2 id="What-is-DNS-Filtering?" id="What-is-DNS-Filtering?">What is DNS Filtering?</h2>DNS filtering is a technique used to control or restrict access to certain websites or online content. It works by blocking or allowing data packets based on the domain names they are associated with.Here's how it works: When you type a URL into your web browser, your computer uses the Domain Name System (DNS) to translate that URL into an IP address that it can understand. This process is known as a DNS lookup.DNS filtering takes place during this lookup process. When a request is made to a DNS server to resolve a domain name, the DNS filter checks the request against a database of blocked or allowed websites. If the website is on the blocked list, the DNS server will return an 'error' or redirect to a different page, effectively blocking access to the website. If the website is not on the blocked list, the DNS server will resolve the domain name as usual, allowing access.DNS filtering is commonly used in businesses and schools to prevent access to inappropriate or harmful content. It can also be used to block access to known malicious websites, helping to protect users from phishing attacks and malware.<h2 id="Advantages-of-Tencent-EdgeOne-DNS-Services" id="Advantages-of-Tencent-EdgeOne-DNS-Services">Advantages of Tencent EdgeOne DNS Services</h2><a href="https://edgeone.ai/document">Tencent EdgeOne DNS services</a>, brings several advantages to the table:<ol><li>Global Coverage: EdgeOne DNS service has a globally distributed network of nodes, ensuring that users can quickly resolve to the nearest server, providing faster access speeds no matter where they are.</li><li>High Availability: EdgeOne DNS service is designed for high availability. Even if a node encounters an issue, it can automatically switch to other nodes to ensure service stability.</li><li>DDoS Protection: EdgeOne DNS service provides DDoS protection capabilities, effectively defending against large-scale DDoS attacks and protecting your website from such threats.</li><li>Intelligent Resolution: EdgeOne DNS service supports intelligent resolution. It can automatically resolve to the optimal server based on factors such as the user's geographical location and network conditions, providing a better user experience.</li><li>Ease of Use: EdgeOne DNS service provides an easy-to-use management interface. You can conveniently manage your DNS records without needing specialized technical knowledge.</li><li>Security: EdgeOne DNS service provides various security measures, including DNSSEC (DNS Security Extensions), to protect your DNS records from being tampered with.</li></ol>These advantages make Tencent EdgeOne DNS service an efficient, reliable, and secure DNS solution. You are welcome to <a href="https://edgeone.ai/contact">Contact Us</a> for more information.

What is DNS?

Network Performance Management vs Network Performance Monitoring

Monitor Network Performance Using a Browser

Common Website Network Optimization Solutions

Tencent EdgeOne's Site Acceleration and Network Optimization

Common network optimization issues for websites include slow page loading speed, long server response times, high bandwidth consumption due to large images or multimedia files, lack of caching strategies, poor front-end coding practices, and absence of responsive design.<h2 id="What-is-Website-Network-Optimization?">What is Website Network Optimization?</h2>Site Network Optimization refers to improving the overall efficiency of a website by enhancing its performance, speed, security, and user experience. This includes optimizing the site's loading speed, improving response times, reducing page sizes, and enhancing server response times. The significance of site Network Optimization lies in increasing user satisfaction, boosting website traffic and conversion rates, improving search engine rankings, reducing bounce rates, and ultimately enhancing the competitiveness of the website.<h2 id="Why-is-Network-Optimization-Important?" style="margin-left:auto;">Why is Network Optimization Important?</h2>Network Optimization primarily involves connectivity, speed, user experience, productivity, and cost-effectiveness. Optimized networks ensure smooth and reliable connections, guaranteeing data transmission at the highest possible speeds to reduce latency and enhance operational efficiency. Optimization techniques ensure that users can access and utilize network resources while minimizing latency, reducing packet loss, and effectively managing network traffic, thereby reducing interruptions or slowdowns, increasing user satisfaction, fostering loyalty, and promoting positive engagement with network-dependent services.<h2 id="Performance-Metrics-for-Website-Network">Performance Metrics for Website Network</h2><ol><li>Latency: Measures the time it takes for data to travel from sender to receiver. Lower latency usually indicates faster network responsiveness.</li><li>Bandwidth: Measures the network's capacity to transmit data, typically expressed in data volume per second (bits per second).</li><li>Packet Loss: Measures the percentage of data packets lost during transmission, often used to assess the stability of a network connection.</li><li>Throughput: Represents the amount of data transmitted through the network in a unit of time, often used to evaluate the actual transmission capacity of the network.</li><li>Connection Time: Measures the time required to establish a connection, typically referring to the time it takes to establish a connection with a server for a website.</li><li>Availability: Measures the proportion of time that a network or service is available for use, often expressed as a percentage.</li></ol>These metrics help assess Network Performance and can be used to identify issues, optimize network configurations, and improve user experience.<h2 id="What-is-Network-Performance-Management?">What is Network Performance Management?</h2>Network Performance Management involves monitoring and optimizing the performance of a computer network. It includes activities like measuring network bandwidth, analyzing traffic patterns, identifying and resolving congestion points, ensuring quality of service, and maintaining overall network health. This is typically achieved through the use of specialized software and hardware tools to monitor, analyze, and optimize Network Performance. Contains the following methods:&nbsp;<ol><li>Collect Good Data: Network monitoring tools simplify this process by examining data related to packet loss, network traffic analysis, network node failures, SNMP performance, or bandwidth usage. The relevant information is then conveyed to your team for evaluation, or analyzed through machine learning, artificial intelligence, or AIOps.</li><li>Analyzing Performance Metrics: Amidst the various components involved in keeping the network running, network monitoring can yield numerous performance metrics, providing insights into the health of your IT stack. Identifying metrics from multi-layered networks that can offer the most comprehensive view can enhance awareness of performance areas that are more prone to issues. Leveraging this data, your IT team can devise a set of network management policies to mitigate issues and enhance productivity and user experience.</li><li>Automated Data Collection: At times, it takes a while to recognize patterns of performance issues. Effective network monitoring tools record all performance issues, including associated information about when they occurred. Being able to refer back to past logs of concern enables your team to assess areas that require deeper investigation or closer monitoring.</li><li>Identifying Security Issues: Poor network performance is often a result of security threats such as malware, which can quickly become a disaster for your network and the entire business. The time, cost, and reputation damage involved in security vulnerabilities can be excruciating. Implementing a network monitoring system capable of detecting malware, insecure network devices, and other network vulnerabilities enables your team to devise protocols to prevent and manage weaknesses before end users or confidential data are affected."Network performance management vs network performance monitoring</li></ol><h2 id="Network-Performance-Management-vs-Network-Performance-Monitoring">Network Performance Management vs Network Performance Monitoring</h2>Network Performance Monitoring is part of Network Performance Management, involving the process of collecting, measuring, and diagnosing metrics for each component of a network. Monitoring requires observation and review. Management occurs after evaluating the collected information; it consists of a set of policies, procedures, workflows, and responsibilities used to improve or maintain optimal performance. Network Performance Monitoring involves observation and collection, while Network Performance Management involves making decisions based on the findings obtained from the review. Effective network performance management always involves Network Performance Monitoring. Identifying the root cause of issues is crucial for mitigating their impact and preventing future events. These two concepts work in concert, but each employs its own techniques, yielding unique results.<h2 id="Monitor-Network-Performance-Using-a-Browser">Monitor Network Performance Using a Browser</h2>To monitor Network Performance using a web browser, you can utilize the browser's built-in developer tools. In most browsers, press F12 or right-click on the page and select "Inspect." Then navigate to the "Network" tab, where you can view the loading times, sizes, and response times of various resources (such as CSS, JavaScript, images, etc.) required to load the page. Additionally, you can analyze the header information of HTTP requests and responses and check caching status. Chrome also provides a "Performance" tab for recording performance data during page loading and for conducting more in-depth performance analysis. Other browsers like Firefox and Edge also have similar developer tools.<img src="https://edgeone.ai/media/6db91efc-c75c-43ba-9b91-dd93b37c4232.png" alt="企业微信截图_fdf16cf0-c73f-4a28-a5d1-6e7509ff08ed.png"><h2 id="Common-Website-Network-Optimization-Solutions">Common Website Network Optimization Solutions</h2><h3><a href="https://edgeone.ai/learning/detail/http2">HTTP/2</a></h3>HTTP/2 achieves Network Optimization through:<ol><li>Multiplexing: Allowing multiple requests to be sent in parallel over a single TCP connection, avoiding the head-of-line blocking issue present in HTTP/1.x.</li><li>&nbsp;Header compression: Reducing the amount of data transmitted by compressing header information, thus improving transmission efficiency.</li><li>Server push: Allowing servers to proactively send resources to clients before they are requested, reducing client request latency.</li><li>&nbsp;Prioritization: Allowing clients to specify the priority of requests, ensuring that important resources are loaded first.</li><li>&nbsp;Parallel handling of data streams: Allowing multiple data streams to be processed in parallel on a single TCP connection, improving data transmission efficiency.</li></ol><h3>HTTP/3</h3>HTTP/3 achieves Network Optimization through the following methods:<ol><li>Using the QUIC transport protocol: The QUIC protocol reduces connection establishment latency and improves data transmission efficiency.</li><li>Based on UDP instead of TCP: The use of the UDP protocol reduces the number of handshakes during transmission, lowering connection establishment latency.</li><li>Improved traffic control and congestion control: HTTP/3 employs more effective traffic control and congestion control mechanisms to optimize Network Performance.</li></ol><h3><a href="https://edgeone.ai/learning/detail/websocket">WebSocket</a></h3><ol><li>Reduced overhead: WebSockets use a single, persistent connection, reducing the overhead of repeatedly establishing new connections.</li><li>Real-time communication: By enabling two-way communication between the client and server, WebSockets allow for real-time data transfer and updates, eliminating the need for constant polling.</li><li>Efficient data exchange: WebSockets facilitate efficient data exchange, enabling the transfer of smaller packets and reducing overall latency, thereby optimizing Network Performance.</li></ol><h3><a href="https://edgeone.ai/learning/detail/cdn">CDN</a></h3>Content Delivery Network (CDN) acceleration is a method of improving the performance and speed of content delivery to users by utilizing a network of distributed servers. These servers, known as edge servers, are strategically located in various geographical locations to reduce the physical distance between the user and the content, thereby minimizing latency and improving load times. CDN acceleration also helps to offload traffic from the origin server, reduce bandwidth costs, and enhance the overall user experience by delivering content more efficiently. It is particularly useful for delivering web pages, video streams, large downloads, and other content that benefits from being delivered closer to the end-user.<h3><a href="https://edgeone.ai/learning/detail/brotli-vs-gzip-compression">Gzip</a></h3>Gzip compression is a compression algorithm used to reduce the size of files, commonly employed within the HTTP protocol to significantly decrease the amount of data transmitted, thereby speeding up page load times.<h3><a href="https://edgeone.ai/learning/detail/dns">DNS</a></h3>DNS is a domain name resolution system that translates domain names (such as example.com) into IP addresses. It is an integral part of the page loading process. Website owners should opt for DNS services that can provide resolution results quickly and reliably, rather than relying on the web host's DNS.In addition to the above-mentioned Network Optimization methods, there are many other site optimization techniques, such as browser HTTP caching, image compression, website preloading, JavaScript optimization, CSS optimization, and other solutions, all of which can help us improve website performance at various stages.<h2 id="Tencent-EdgeOne's-Site-Acceleration-and-Network-Optimization">Tencent EdgeOne's Site Acceleration and Network Optimization</h2>Tencent <a href="https://edgeone.ai/">EdgeOne</a> offers a host of features that cater to Network Optimization for an improved user experience. Here's a detailed look at its offerings:<ol><li>Dynamic Network Path Adjustment: <a href="https://edgeone.ai/document/46182">Smart acceleration</a> adjusts and optimizes network paths in real-time. EdgeOne continuously detects node network latency, selects the best access path via intelligent algorithms, and dynamically alters resource allocation and utilization according to the real-time network conditions. This enhances user experience and maintains continuity of the business operations.</li><li>&nbsp;L4 Proxy Service: When you need selective features like <a href="https://edgeone.ai/document/54506">L4 proxy</a> TCP/UDP security acceleration, EdgeOne provides domainless access. This allows you to activate related services quickly without connecting to a site domain name.</li><li>Protocol Support: EdgeOne embraces advanced technologies like <a href="https://edgeone.ai/document/46171">HTTP/2</a>, <a href="https://edgeone.ai/document/55930">HTTP/3</a>, <a href="https://edgeone.ai/document/46971">WebSocket</a>, and <a href="https://edgeone.ai/document/49503">IPv6</a> to enhance Network Performance and improve user experience significantly.</li></ol>In summary, EdgeOne is focus on Network Optimization via intelligent acceleration technologies ensures high-quality performance, flexibility in security acceleration services, and improved user satisfaction - all of which contribute to the competitiveness of your website, application, or other online services.

Website Network Optimization

What is Network Optimization?

What Security Protections does Tencent EdgeOne Provide?

Security

In today's digital world, security protection has become a crucial aspect of our daily lives, whether it's in the digital realm or our physical environment. This means protecting sensitive information from being accessed by unauthorized individuals. This could include personal details, financial information, or confidential business data. Breaches of privacy can lead to identity theft, financial fraud, and a loss of trust in digital systems. The importance of effective security measures cannot be overstated, as they safeguard our personal information, assets, and even our personal safety.<h2 id="What-are-the-Common-Network-Security?">What are the Common Network Security?</h2>Cyberthreats encompass a wide array of attack vectors. The most dangerous advanced threats today include ransomware, phishing campaigns, zero-day attacks, vulnerability exploitation, DDoS attacks, injection, and malware. From transmission layer security to email security, VPN security, web application security, WAF security, zero trust security, SSL security, and overall network security solutions, each aspect plays a crucial role in safeguarding our digital environment.<h3>1. Transmission Layer Security (TLS)</h3><h4>What is a TLS handshake?</h4>TLS or Transport Layer Security is an important aspect of your website. It protects user data from security threats such as malware and Denial of Service (DoS) attacks. Having TLS ensures that only authorized users can access the data through encryption. For example, using TLS encryption for an online store will protect customers' transactions by converting their sensitive data into passwords. This way, third parties will not be able to read the data.<span style="color:rgb(36,41,47);font-family:-apple-system, &quot;system-ui&quot;, &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;, Helvetica, &quot;PingFang SC&quot;, &quot;Hiragino Sans GB&quot;, &quot;Microsoft YaHei&quot;, Arial, sans-serif;">Here are some key reasons highlighting the importance of TLS: Data Confidentiality, Data Integrity, Authentication, Trust and User Confidence, Compliance Requirements, Mitigating Network Attacks, Secure Remote Access.<h3><img src="https://edgeone.ai/media/91dd3f0e-9888-4967-9e5b-9e7cdac0b03d.png" alt="TLS.png"></h3><h3>2. Email Security</h3>Email security involves various techniques for keeping sensitive information in email communication and accounts secure against unauthorized access, loss, or compromise. This includes spam filters, phishing detection, and encryption.<h4>Why is Email Security important?</h4><span style="color:rgb(36,41,47);font-family:-apple-system, &quot;system-ui&quot;, &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;, Helvetica, &quot;PingFang SC&quot;, &quot;Hiragino Sans GB&quot;, &quot;Microsoft YaHei&quot;, Arial, sans-serif;">Here are some key reasons highlighting the importance of Email security: Privacy Protection, Data Leakage Prevention, Prevention of Malware Propagation, Defense against Phishing Attacks, Compliance Requirements, Reputation and Trust, Safeguarding Business Interests.<ul><li><span style="color:rgb(36,41,47);font-family:-apple-system, &quot;system-ui&quot;, &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;, Helvetica, &quot;PingFang SC&quot;, &quot;Hiragino Sans GB&quot;, &quot;Microsoft YaHei&quot;, Arial, sans-serif;">Protect confidentiality: Emails often contain sensitive information, such as personal or financial data or business secrets, so this information must be protected from unauthorized access. Without proper email security, this information can easily be intercepted and leaked.</li><li><span style="color:rgb(36,41,47);font-family:-apple-system, &quot;system-ui&quot;, &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;, Helvetica, &quot;PingFang SC&quot;, &quot;Hiragino Sans GB&quot;, &quot;Microsoft YaHei&quot;, Arial, sans-serif;">Maintain email integrity: Email messages can be tampered with during transmission, making it possible for someone to modify the content of the message without the sender or recipient's knowledge. Ensuring email integrity ensures that information is not tampered with during transmission.</li><li><span style="color:rgb(36,41,47);font-family:-apple-system, &quot;system-ui&quot;, &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;, Helvetica, &quot;PingFang SC&quot;, &quot;Hiragino Sans GB&quot;, &quot;Microsoft YaHei&quot;, Arial, sans-serif;">Ensure availability: Email security is also important to ensure the availability and availability of your email system. Email systems can be targeted by attackers, and without appropriate security measures, systems can be disrupted, resulting in downtime, lost productivity, and potential data loss.</li><li><span style="color:rgb(36,41,47);font-family:-apple-system, &quot;system-ui&quot;, &quot;Segoe UI&quot;, &quot;Helvetica Neue&quot;, Helvetica, &quot;PingFang SC&quot;, &quot;Hiragino Sans GB&quot;, &quot;Microsoft YaHei&quot;, Arial, sans-serif;">Maintain compliance standards: Many industries and organizations are subject to various regulations and compliance standards that require them to protect sensitive information. Implementing email security measures can help meet these compliance requirements and avoid costly fines and penalties.</li></ul><h3>3. VPN Security</h3>A Virtual Private Network (VPN) extends a private network across a public network, enabling users to send and receive data securely across shared or public networks as if their devices were directly connected to the private network.<h3>4. Web Application Security</h3>This refers to the protection of websites and online services against different security threats that exploit vulnerabilities in an application's code. Common targets for web application attacks include content management systems (CMS), databases, and software interfaces.<h4>What are common web application security risks?</h4><ul style="list-style-type:disc;"><li>Cross-Site Scripting (XSS): Attackers inject malicious scripts into web pages, allowing them to execute in users' browsers and steal sensitive information or perform other malicious actions.</li><li>Cross-Site Request Forgery (CSRF): Attackers exploit users' authenticated sessions to send unauthorized requests without their knowledge, leading to actions such as changing passwords or initiating unauthorized transactions.</li><li>SQL Injection: Attackers inject malicious SQL code into user input, bypassing application validation and filtering mechanisms to gain unauthorized access to or manipulate sensitive data in the database.</li><li>Unauthenticated and Unauthorized Access: Applications fail to properly authenticate and authorize users, allowing unauthorized individuals to access sensitive data or perform privileged operations.</li><li>File Upload Vulnerabilities: Applications do not properly validate and filter user-uploaded files, enabling attackers to upload malicious files and execute arbitrary code or gain system-level access.</li><li>Insecure Session Management: Applications fail to properly manage user sessions, such as improper use of session identifiers or failure to destroy sessions in a timely manner, leading to session hijacking or session fixation attacks.</li><li>Sensitive Data Leakage: Applications fail to adequately protect stored sensitive data, such as user passwords or credit card information, resulting in data breaches that compromise user privacy and security.</li><li>Insecure Third-Party Components and Libraries: Applications utilize third-party components and libraries with known security vulnerabilities, allowing attackers to exploit these vulnerabilities to compromise the application or access user data.</li><li>Improper Error Handling and Information Disclosure: Applications leak sensitive information during error handling, such as database error messages or stack traces, providing valuable information to attackers.</li><li>Insufficient Access Controls: Applications fail to implement proper access control mechanisms, allowing unauthorized users to access sensitive functionality or data.</li></ul><h3>5. WAF Security</h3>A Web Application Firewall (WAF) is a specific form of application firewall that filters, monitors, and blocks HTTP traffic to and from a web application. It provides protection from various attacks such as cross-site scripting (XSS) and SQL injection.<h3>6. Zero Trust Security</h3>This security model assumes no trust for any entity inside or outside the network. It requires strict identity verification for every person and device trying to access resources on a private network, regardless of whether they are sitting within or outside of the network perimeter.<h3>7. SSL Security</h3>Secure Sockets Layer (SSL) is a standard security technology for establishing an encrypted link between a server and a client. It ensures that all data passed between the web server and browsers remain private and integral.<h2 id="What-Security-Protections-does-Tencent-EdgeOne-Provide?">What Security Protections does Tencent EdgeOne Provide?</h2>Tencent Cloud EdgeOne protects your websites, apps, APIs by intelligent identification to block various attacks, mitigates DDoS threats, and employs AI and bot policy engines to analyze web, bot, and CC attacks.<h3 style="margin-left:0px;">1. DDoS Protection(DDoS protection at the network layer)</h3>A Distributed Denial of Service (DDoS) attack refers to an attacker remotely controlling a large number of zombie hosts through the network to send a large amount of attack requests to one or more targets, blocking the target server's network bandwidth or exhausting the target server's system resources, making it unable to respond to normal service requests.<a href="https://edgeone.ai/document/56398">DDoS protection</a> can effectively ensure the availability and continuity,monitoring network traffic in real-time, and immediately cleaning up traffic-based DDoS attacks when detected.<h3 style="margin-left:0px;">2. Web Protection</h3><a href="https://edgeone.ai/document/55934">Web Protection</a> can control and mitigate various risks, with typical scenarios including:<ul style="list-style-type:disc;"><li>Vulnerability attack protection: For sites involving customer data or sensitive business data, you can enable managed rules to intercept injection attacks, cross-site scripting attacks, remote code execution attacks, and malicious attack requests from third-party component vulnerabilities.</li><li>Access control: Distinguish between valid and unauthorized requests to prevent sensitive business exposure to unauthorized visitors. This includes external site link control, partner access control, and attack client filtering.</li><li>Mitigating resource occupation: Limit the access frequency of each visitor to avoid excessive resource occupation, which may cause service availability decline.</li><li>Mitigating service abuse: Limit session or business dimension abuse, including batch registration, batch login, excessive use of API, and other malicious usage scenarios. Strengthen the usage quota of a single session (such as users, instances, etc.) to ensure that users use service resources within a reasonable limit.</li></ul><h3 style="margin-left:0px;">3. Bot Management</h3><a href="https://edgeone.ai/document/56969">Bot management</a> is a service that maintains the quality of your website traffic. Among your website visitors, there may be a portion of visits that are not initiated by real users, but by automated programs, which we usually call bots. Although some bots (e.g., search engine crawlers) are beneficial to the website, they may also cause the following issues:<ul style="list-style-type:disc;"><li>Abnormal website traffic or performance degradation: A large amount of bot traffic may consume a lot of server resources, affecting the access experience of real users. In this case, bot management helps to identify and control these bots, optimizing website performance and improving user experience.</li><li>Abnormal data statistics: This may be caused by bots simulating user behavior. Bot management can more accurately distinguish between real user and bot behavior, allowing you to obtain more realistic data.</li><li>Website content or user information leakage or abuse: Bots may try to crawl and copy website content or obtain user personal information. Bot management can effectively block unauthorized access, protecting the security of website content and user information.</li></ul>EdgeOne provides many of the security services listed above, includes <a href="https://edgeone.ai/document/56398">DDoS Protection,</a> <a href="https://edgeone.ai/document/55934">Web Protection</a>, <a href="https://edgeone.ai/document/56969">Bot management</a>, <a href="https://edgeone.ai/document/56390">Rules Template</a>, <a href="https://edgeone.ai/document/57246">IP and IP Segment Grouping</a>, <a href="https://edgeone.ai/document/48535">Origin Protection</a>, Custom Response Page, <a href="https://edgeone.ai/document/47822">Alarm Notification</a>, and more.<h2 id="Why-Customers-Choose-Tencent-EdgeOne?" style="margin-left:0px;">Why Customers Choose Tencent EdgeOne?</h2><a href="https://edgeone.ai/"><span style="color:rgb(30,111,255);font-family:Oxygen, &quot;pingfang SC&quot;, &quot;hiragino sans gb&quot;, &quot;Apple SD Gothic Neo&quot;, ui-sans-serif, system-ui, -apple-system, &quot;system-ui&quot;, sans-serif, &quot;helvetica neue&quot;, arial, &quot;microsoft yahei ui&quot;, DIN, &quot;microsoft yahei&quot;, &quot;Apple Color Emoji&quot;, &quot;Segoe UI Emoji&quot;, &quot;Segoe UI Symbol&quot;, &quot;Noto Color Emoji&quot;;">EdgeOne</a><span style="color:rgb(0,0,0);font-family:Oxygen, &quot;pingfang SC&quot;, &quot;hiragino sans gb&quot;, &quot;Apple SD Gothic Neo&quot;, ui-sans-serif, system-ui, -apple-system, &quot;system-ui&quot;, sans-serif, &quot;helvetica neue&quot;, arial, &quot;microsoft yahei ui&quot;, DIN, &quot;microsoft yahei&quot;, &quot;Apple Color Emoji&quot;, &quot;Segoe UI Emoji&quot;, &quot;Segoe UI Symbol&quot;, &quot;Noto Color Emoji&quot;;"> is a next-generation Edge Services provider that delivers unparalleled speed, dependable protection, and the extremely flexible programmable platform for your global services, regardless of scale.

The Importance of Security Protection

The Access Process/Acceleration Principle of CDN

EdgeOne CDN Service: Not just Acceleration

<h2 id="Definition-of-CDN" id="Definition-of-CDN" id="Definition-of-CDN">Definition of CDN</h2>CDN (Content Delivery Network) meaning a network composed of geographically distributed proxy servers and data centers. The goal is to provide high availability and performance by spatially distributing the service near end-users. CDNs emerged in the late 1990s to address the performance bottlenecks of the Internet as it was becoming a mission-critical medium for individuals and businesses. Since then, CDNs have evolved to serve a large portion of today's Internet content, including web objects (text, graphics, and scripts), downloadable objects (media files, software, documents), applications (e-commerce, portals), live streaming media, on-demand streaming media, and social media websites.<h2 id="The-Access-Process/Acceleration-Principle-of-CDN" id="The-Access-Process/Acceleration-Principle-of-CDN" id="The-Access-Process/Acceleration-Principle-of-CDN">The Access Process/Acceleration Principle of CDN</h2>CDN acceleration technology generates multiple mirror images of the original website during the traditional website access process, and stores them on cache servers in different regions and on different lines. When a user accesses a website, the scheduling system routes or guides the user's request to the cache server that is closest to the user's access network or has the best access effect, and this cache server provides the content service for the user. Compared to direct access to the source station, this method shortens the network distance between users and content, thereby achieving an acceleration effect. CDN is a composite technology comprising several key components: origin server, cache servers, and intelligent DNS.<ol><li>Origin servers: The origin server refers to the original site where content is published. All file additions, deletions, and modifications to the website occur on the origin server. Additionally, the objects fetched by the cache servers all come from the origin server.</li><li>Cache Servers: Cache servers directly provide resources to user access and consist of one or several servers. When a user initiates a request, their access request is directed by intelligent DNS to the nearest cache server. If the requested content is already in the cache, it is directly returned to the user. If the required content is not cached, the cache server fetches the content from nearby cache servers or directly from the origin server before returning it to the user.</li><li>Intelligent DNS: <a href="https://edgeone.ai/document/58235">Intelligent&nbsp;DNS</a> is the core of the entire CDN technology. It primarily directs user access requests to the nearest cache server based on the user's location. Through intelligent DNS resolution, users access servers within the same service provider, mitigating the issue of slow interconnection between networks in different regions, thereby achieving acceleration. The emergence of intelligent DNS has overturned the traditional approach of one domain corresponding to one mirror, making it more convenient for users to access websites.</li></ol><img src="https://edgeone.ai/media/92cb516a-e037-4084-9259-31e1a7fe3938.png" alt="企业微信截图_db3066f4-a1d2-4cec-a79c-3b0845ac1d16.png"><h2 id="Benefits-of-CDN" id="Benefits-of-CDN" id="Benefits-of-CDN">Benefits of CDN</h2>CDNs carry a large portion of the world's internet traffic. They help solve the toughest challenges of delivering content over the internet. From small and medium content providers to the world's large corporations, businesses everywhere take advantage of key CDN benefits to provide a seamless web experience to their customers. Some of its major advantages include:<ol><li>Improving website load times: By distributing content to CDN servers near visitors (and other optimization measures), visitors experience faster page loading times. Since visitors are more likely to leave slow-loading websites, CDNs can reduce bounce rates and increase the time people spend on the site. In other words, the faster the website speed, the longer users stay.</li><li>Improve origin server load: By distributing traffic across multiple server nodes, CDN can reduce the load on the origin server and avoid single points of failure.</li><li>Always get the latest version: For example, by using Font Awesome CDN, you will always have access to the latest version of Font Awesome without the need for manual updates.</li><li>Increased availability and reliability: The distributed architecture of CDN can automatically switch traffic to other available nodes when a node fails, ensuring continuous content availability.</li><li>Enhanced security: CDN offers various security features, such as DDoS attack protection, SSL encryption, and Web Application Firewall, to improve the security of websites or applications.</li><li>Reduced bandwidth costs: The bandwidth consumption cost of website hosting is a major expense for websites. Through caching and other optimizations, CDNs can reduce the amount of data that the origin server must provide, thereby lowering the hosting costs for website owners.</li><li>Offload traffic: With the explosive growth of online streaming and other rich media services, and higher user expectations about web performance across multiple device types, many of today's network service providers are finding their content distribution networks to be highly stressed. By responding to a request for web content with a cached version from servers closer to the end user, a CDN can offload traffic from content servers and improve the web experience.</li></ol><h2 id="EdgeOne-CDN-Service:-Not-just-Acceleration" id="EdgeOne-CDN-Service:-Not-just-Acceleration" id="EdgeOne-CDN-Service:-Not-just-Acceleration">EdgeOne CDN Service: Not just Acceleration</h2>Compared to CDN, <a href="https://www.tencentcloud.com/products/teo?lang=en&amp;pg=">Tencent&nbsp;EdgeOne</a> not only offers a broader range of features but also serves as a comprehensive one-stop platform that addresses both acceleration and security requirements. Its risk-avoidance capabilities allow billing based on clean traffic after cleansing, eliminating concerns about unexpected high bills. At the same time, operational efficiency is further improved, such as free certificate automatic updates, site-level batch management, and saving a lot of tedious steps. It also supports personalized capability customization: <a href="https://edgeone.ai/document/46151">Rule&nbsp;Engines</a> and <a href="https://edgeone.ai/document/53372">Edge&nbsp;Functions</a> can flexibly adapt to different business scenarios. The billing model is more reasonable, offering subscription packages and excess pay-as-you-go.<ol><li>Cost savings: A one-stop solution is more cost-effective than purchasing individual products separately. Billing based on clean traffic after protection avoids unexpected high bills, making budget management easier.</li><li>Increased efficiency and speed: The integration of acceleration and security analysis helps users quickly locate problems; configuration and operation management are more efficient within a single console.</li><li>Inclusive security: Enjoy advanced Web protection and platform-level <a href="https://edgeone.ai/document/56398">DDoS&nbsp;protection</a> at a low cost, combined with advanced semantic analysis engines and intelligent BOT analysis, accurately identifying malicious requests and reducing false positives.</li><li>Flexible configuration: Edge functions, rule engines, and other product capabilities enable more personalized and customized business solutions, allowing flexible adaptation to different business scenarios.</li><li>Audio/Video Acceleration: Based on Tencent's many years of online video operations experience and optimized for online audio/video playback business scenarios. EdgeOne can support a high number of concurrent requests during peak hours while effectively ensuring high availability of the service and satisfactory media transfer speed, helping you deliver a stable, smooth, and rich-featured watch experience.</li></ol>

What is a CDN?

WebSocket is a protocol for real-time communication that enables bidirectional communication between clients and servers, suitable for applications requiring low latency and high-frequency data updates.<h2 id="How-does-WebSocket-Work?" id="How-does-WebSocket-Work?" id="How-does-WebSocket-Work?">How does WebSocket Work?</h2>WebSocket is a protocol for full-duplex communication over a single TCP connection. It establishes a persistent connection between the client and server, allowing bidirectional real-time communication. WebSocket initiates a handshake using the HTTP protocol and then upgrades to a WebSocket connection, enabling both parties to send data directly. This persistent connection reduces communication overhead and enables the server to push data to the client actively, eliminating the need for frequent client-initiated requests.<h2 id="WebSocket-vs-HTTP" id="WebSocket-vs-HTTP" id="WebSocket-vs-HTTP">WebSocket vs HTTP</h2><ol><li>Reduced overhead: WebSocket requires less overhead compared to traditional HTTP connections, as it eliminates the need to repeatedly establish and tear down connections for each communication, reducing latency and conserving network resources.</li><li>Bi-directional communication: WebSocket allows for simultaneous two-way communication between the client and server, which is particularly useful for real-time applications, enabling quicker data transfer and response times.</li><li>Efficient data exchange: WebSocket supports binary data transfer, allowing for more efficient and compact data exchange, which is beneficial for multimedia streaming, gaming, and other applications requiring high-speed data transmission.</li><li>Lower latency: By maintaining a persistent connection, WebSocket reduces the latency associated with establishing new connections for each data exchange, resulting in faster and more responsive communication.</li><li>Server push capabilities: WebSocket enables servers to push data to clients without the need for clients to continuously poll the server for updates, leading to more efficient use of network resources and reducing unnecessary data transfer.</li></ol>Overall, WebSocket's efficient use of network resources, reduced latency, and support for real-time, bi-directional communication make it a valuable tool for network optimization in various web-based applications.<h2 id="Why-use-WebSocket?" id="Why-use-WebSocket?" id="Why-use-WebSocket?">Why use WebSocket?</h2>WebSocket is used for real-time applications and services where low-latency, high-frequency data updates are required. It's especially useful for applications like real-time chat, online gaming, live sports updates, financial trading platforms, collaborative editing tools, and more. WebSocket enables faster and more efficient bi-directional communication between clients and servers compared to traditional HTTP, making it particularly well-suited for these types of use cases.<h2 id="WebSocket-Server-(Node.js-+-ws)" id="WebSocket-Server-(Node.js-+-ws)" id="WebSocket-Server-(Node.js-+-ws)">WebSocket Server (Node.js + ws)</h2><pre><code class="language-javascript">const WebSocket = require('ws');
 
const wsk = new WebSocket.Server({ port: 8080 });
 
wsk.on('connection', ws =&gt; {
 ws.on('message', message =&gt; {
 console.log('Message received from client: %s', message);
 
 // Reply to client message 
 ws.send(`I am the server, and the message I received from you is: ${message}`); 
 }); 
 
 ws.on('close', () =&gt; { 
 console.log('Client has disconnected'); 
 }); </code></pre><h2 id="Client-(JavaScript)" id="Client-(JavaScript)" id="Client-(JavaScript)">Client (JavaScript)</h2><pre><code class="language-javascript">// Create WebSocket connection 
var socket = new WebSocket("ws://localhost:8080"); 
 
// What to do when a connection is opened 
socket.onopen = function(event) { 
 console.log("Connection is open"); 
 // Send an initialization message
 socket.send("I am the client and connected!"); 
}; 
 
// What to do when receiving server data 
socket.onmessage = function(event) { 
 console.log("The data received from the server is: " + event.data); 
}; 
 
// What to do when a connection is closed 
socket.onclose = function(event) { 
 console.log("connection closed"); 
}; 
 
// How to handle connection errors 
socket.onerror = function(error) { 
 console.log("An error occurred: " + error); 
}</code></pre>In addition to using WebSocket in JavaScript for front-end development, we can also use WebSocket in programming language platforms such as Java, C++, Go, Python, PHP, and Rust.<h2 id="A-Websocket-Request-Case" id="A-Websocket-Request-Case" id="A-Websocket-Request-Case">A Websocket Request Case</h2>Here's an example of a typical WebSocket handshake request:<pre><code class="language-plaintext">GET /chat HTTP/1.1 // a GET request to the /chat endpoint.
Host: example.com:8000 // the domain and port of the WebSocket server.
Upgrade: websocket // the protocol that the client wishes to upgrade to.
Connection: Upgrade // tells the server that the client wishes to establish a new connection rather than use an existing one.
Sec-WebSocket-Key: dGhlIHNhbXBsZSBub25jZQ== // a base64 encoded random value which server decode, hash it, and then send it back to prove that the server received the request.
Origin: http://example.com // the origin of the client request.
Sec-WebSocket-Protocol: chat, superchat //specifies sub-protocols, if any used by the application creating the connection.
Sec-WebSocket-Version: 13 // the WebSocket protocol version the client wishes to use.</code></pre>In response to the handshake request, the server will return the following:<pre><code class="language-plaintext">HTTP/1.1 101 Switching Protocols // indicates that the protocol is being switched, as requested.
Upgrade: websocket
Connection: Upgrade
Sec-WebSocket-Accept: s3pPLMBiTxaQ9kYGzzhZRbK+xOo= // is a hash of the Sec-WebSocket-Key that was sent in the initial handshake, combined with a specific GUID. The client can use this to verify the server received the handshake</code></pre><h2 id="Conclusion" id="Conclusion" id="Conclusion">Conclusion</h2><a href="https://edgeone.ai/">EdgeOne</a> supports the <a href="https://edgeone.ai/document/46971">WebSocket protocol</a> that allows the server to send data to the client proactively. WebSocket provides a two-way communication channel over a single TCP connection allowing real-time data exchange. This is particularly beneficial for applications that need real-time interaction, such as interactive games, live chats, collaborative documents, etc.

What is WebSocket?

What is a WebSocket?

What are the Classifications of DDoS Attacks?

A Denial of Service (DoS) attack is a malicious attempt to affect the availability of a targeted system, such as a website or application, to legitimate end users. Typically, attackers generate large volumes of packets or requests ultimately overwhelming the target system. In case of a Distributed Denial of Service (DDoS) attack, and the attacker uses multiple compromised or controlled sources to generate the attack.In general, DDoS attacks can be segregated by which layer of the Open Systems Interconnection (OSI) model they attack. They are most common at the Network (layer 3), Transport (Layer 4), Presentation (Layer 6) and Application (Layer 7) Layers.<img src="https://edgeone.ai/media/91102d74-5347-4941-a37a-241962cfade2.png" alt="ddos-OSI.png"><h2 id="What-are-the-Classifications-of-DDoS-Attacks?" style="margin-left:0px;">What are the Classifications of DDoS Attacks?</h2>When analyzing and classifying attack methods, we categorize the attacks into infrastructure layer (Layer 3 and Layer 4) and application layer (Layer 6 and Layer 7). Attacks on Layer 3 and Layer 4 are typically classified as infrastructure layer attacks, which are also the most common types of DDoS attacks. Attacks on Layer 6 and Layer 7 are usually classified as application layer attacks. While these are less common, they tend to be more complex. Compared to infrastructure layer attacks, these attacks are usually smaller in volume. Based on common attack scenarios, the attack types are categorized as follows:<h3>Protocol Attacks</h3>These attacks target network layer or transport layer protocols, primarily focusing on the 3rd and 4th layers. These are the most common types of DDoS attacks, including Synchronous (SYN) flood attacks and other reflection attacks such as User Datagram Protocol (UDP) flood vectors. These attacks are usually large in number, aiming to overload the capacity of the network or application server. However, these attacks are also the types with clear identifiers and are easier to detect.This type of attack is like the staff in the supply room receiving requests from the store counter. The staff receive the request, go to fetch the package, wait for confirmation, and then deliver the package to the counter. The staff receive too many package requests but get no confirmation, until they can't handle more packages, and are overwhelmed, resulting in no one being able to respond to the requests.These attacks exploit the TCP handshake (a series of communications that two computers go through when initiating a network connection) by sending a large number of TCP 'initial connection request' SYN packets with spoofed source IP addresses to the target. The target computer responds to each connection request and then waits for the last step in the handshake, but this step never happens, thus exhausting the target's resources in the process. They consume the resources of servers or network devices (such as load balancers and firewalls).<h3>Application Layer Attacks</h3>These attacks target specific applications or services, primarily focusing on the 6th and 7th layers. They are the most complex attacks, often mimicking normal user traffic. Examples include HTTP floods, slow attacks (such as Slowloris), and DNS query floods. Although these attacks are less common, they are often more complex. Compared to infrastructure layer attacks, these attacks are usually smaller in number but often focus on specific critical parts of the application, making it impossible for real users to use the application. Examples include a large number of HTTP requests on the login page, expensive search APIs, or even Wordpress XML-RPC flooding (also known as Wordpress pingback attacks). It's like pressing refresh over and over again in a large number of different computer web browsers - a large number of HTTP requests flood the server, leading to denial of service. This type of attack can be simple or complex. Simpler implementations can use the same range of attack IP addresses, referrers, and user agents to access a URL. Complex versions may use a large number of aggressive IP addresses and use random referrers and user agents to target random URLs.<h3>Volumetric Attacks</h3>These are the most common types of DDoS attacks, aiming to saturate network bandwidth. The attacker needs to control a large number of 'botnets' to generate enough traffic, trying to create and send a large amount of traffic to make network services unavailable. Examples include UDP floods, ICMP floods, and other indiscriminate amplified traffic attacks. Specific types include:<ul style="list-style-type:disc;"><li>UDP Flood: The attacker sends a large number of UDP packets to random ports on the target server. The server tries to respond to each packet, eventually exhausting its ability to handle legitimate requests.</li><li>ICMP (Ping) Flood: Using the ICMP protocol, the attacker sends a large number of 'echo requests' (ping requests) to the target system. If the target system responds to all requests, it may be overloaded, preventing legitimate traffic from reaching.</li><li>Other Spoofed Packet Floods: The attacker spoofs IP addresses to send a large number of packets. These packets can be any type of protocol, aiming to consume as much bandwidth as possible.</li><li>Amplification Attacks: The attacker uses protocols with large responses, such as DNS or NTP, to send small query requests and spoof the victim's IP address. Since responses are usually much larger than requests, this results in the victim receiving a large amount of unrequested data.</li><li>DNS Amplification: A specific type of amplification attack, where the attacker uses DNS servers to amplify the attack. The attacker sends small query requests, but requests the DNS server to return larger responses to the victim's address.</li><li>NTP Amplification: Similar to DNS amplification attacks, but uses Network Time Protocol (NTP) servers. The attacker requests the NTP server to send time synchronization responses to the victim's IP address.</li><li>Smurf Attack: The attacker sends ICMP requests to the network broadcast address, all responses are sent to the victim's IP address. This not only exhausts the victim's bandwidth but also affects intermediate network devices.</li><li>Fraggle Attack: Similar to Smurf attacks, but uses UDP instead of ICMP. The attacker sends UDP echo requests to the broadcast address, all responses are directed to the victim.</li></ul><h3>Reflection and Amplification Attacks</h3>Attackers exploit third-party servers to amplify attack traffic. For example, NTP amplification, DNS amplification, and SNMP reflection attacks. These attacks forge the victim's IP address, directing the response of the reflection server towards the victim, thereby amplifying the attack traffic. It's like someone calling a restaurant and saying, 'Order one of each dish and call me back to repeat the entire order,' but the callback number actually belongs to the victim. With little effort, a lengthy response can be generated and sent to the victim. After sending a request to an open DNS server using a forged IP address (the victim's IP address), the target IP address will receive the server's response.<h3>&nbsp;Multi-Vector Attacks</h3>These attacks combine several of the above methods, attacking the target in multiple ways simultaneously. They are harder to defend against because they require dealing with multiple attack surfaces at once.<h2 id="How-to-Defend-Against-DDoS-Attacks?">How to Defend Against DDoS Attacks?</h2>Mitigating DDoS attacks is about distinguishing between attack traffic and normal traffic. For example, if a company's website experiences a surge of visitors due to the release of an application, and the load increases dramatically, it may be under a DDoS attack. It would not be appropriate to cut off all traffic. If the company sees a sudden increase in traffic from known malicious users, it may need to work to mitigate the attack. The challenge is to distinguish between real customer traffic and attack traffic. In the modern internet, DDoS traffic comes in many forms. The design of the traffic may vary, from non-deceptive single-source attacks to complex adaptive multi-directional attacks. Multi-directional DDoS attacks use a variety of attack methods, knocking down targets in different ways, likely distracting mitigation efforts at all levels. A typical example of a multi-directional DDoS attack is one that targets multiple levels of the protocol stack (such as DNS amplification (targeting layers 3/4) plus HTTP flood (targeting layer 7)). To defend against multi-directional DDoS attacks, multiple different strategies need to be deployed to mitigate attacks at different levels. Generally, the more complex the attack, the harder it is to distinguish between attack traffic and normal traffic - the attacker's goal is to blend in with normal traffic as much as possible, thereby reducing the effectiveness of mitigation. If mitigation measures indiscriminately discard or limit traffic, they may discard normal traffic along with attack traffic, and the attack may also be modified to evade mitigation measures. To overcome complex destructive methods, a layered solution is ideal.<h3>Blackhole Routing</h3>Blackhole routing is a method of mitigating Distributed Denial of Service (DDoS) attacks. When a network or server is under a DDoS attack, a large amount of malicious traffic is sent to the target system, preventing legitimate user requests from being responded to. The principle of blackhole routing is to redirect all traffic heading towards the attacked target to a 'black hole', a special network address where any traffic sent to it is discarded without any response. The purpose of this is to prevent malicious traffic from reaching the target server, thereby protecting the server from attack. Implementing blackhole routing usually involves the following steps:<ul style="list-style-type:disc;"><li>Detecting the attack: First, there needs to be a mechanism to detect the occurrence of a DDoS attack.</li><li>Triggering blackhole routing: Once an attack is detected, the network administrator can manually or automatically trigger blackhole routing.</li><li>Broadcasting routing updates: By using BGP (Border Gateway Protocol) or other routing protocols, update the routing table to tell all routers to redirect traffic from the target IP address to the black hole.</li><li>Traffic discard: All traffic sent to the attacked IP address will be routed to the black hole and discarded there.</li></ul>Although blackhole routing can effectively reduce the impact of malicious traffic on the target system, it has a significant drawback: legitimate traffic is also discarded. This means that during an attack, the affected service is unavailable to all users. Therefore, blackhole routing is often seen as a last resort defense measure. In some cases, more refined methods may be used, such as 'Scrubbing Centers' or other types of traffic analysis and filtering, to distinguish and block malicious traffic while allowing legitimate traffic to pass.<h3>Rate Limiting</h3>Limiting the number of requests a server receives in a certain period of time is also a method of defending against denial of service attacks.Although rate limiting is helpful in slowing down web crawlers stealing content and defending against brute force attacks, relying solely on rate limiting may not be sufficient to effectively deal with complex DDoS attacks.However, in an efficient DDoS defense strategy, rate limiting is an effective measure.<h3>Web Application Firewall</h3>A Web Application Firewall (WAF) is an effective tool that helps mitigate Layer 7 DDoS attacks. Once a WAF is deployed between the internet and the origin server, it can act as a reverse proxy, protecting the target server from specific types of malicious traffic. such as <a href="https://edgeone.ai/document/57245">DDoS traffic alarms</a>, <a href="https://edgeone.ai/document/56409">configuring IP block lists/whitelists</a>, <a href="https://edgeone.ai/document/56429">configuring regional blocking rules</a>, <a href="https://edgeone.ai/document/56429">configuring port filtering</a>, <a href="https://edgeone.ai/document/56431">configuring feature filtering</a>, <a href="https://edgeone.ai/document/56432">configuring protocol blocking rules</a>, and <a href="https://edgeone.ai/document/56432">configuring connection attack protection</a>, it can prevent Layer 7 attacks. A key value of an effective WAF is its ability to quickly implement custom rules to respond to attacks.<h2 id="Conclusion">Conclusion</h2><a href="https://edgeone.ai/">Tencent EdgeOne</a> DDoS Protection is a security service provided by Tencent Cloud that aims to protect internet-facing applications, services, and networks from Distributed Denial of Service (DDoS) attacks. DDoS attacks are a type of cyber attack where multiple compromised systems are used to target a single system, overwhelming its resources and causing it to become unavailable to legitimate users.Tencent EdgeOne DDoS Protection provides the following features:<ol><li>Traffic Monitoring and Detection: The service continuously monitors network traffic and detects abnormal traffic patterns that may indicate a DDoS attack.</li><li>Automatic Mitigation: Once an attack is detected, Tencent EdgeOne DDoS Protection automatically triggers mitigation measures to block the malicious traffic and protect the targeted system.</li><li>Real-time Reporting: The service provides real-time reports on attack traffic, including the source IP addresses, attack types, and other relevant information.</li><li>Customizable Protection Policies: Users can customize protection policies based on their specific needs, such as setting up whitelist and blacklist rules, adjusting traffic thresholds, and more.</li><li>Global Coverage: Tencent EdgeOne DDoS Protection leverages Tencent's global network infrastructure to provide protection for users worldwide.</li></ol>By using Tencent EdgeOne DDoS Protection, businesses can ensure the availability and performance of their online services, even in the face of large-scale DDoS attacks. Learn more about <a href="https://edgeone.ai/document/56398">Tencent EdgeOne's DDoS protection</a>.&nbsp;

DDoS Attack

What is a DDoS Attack?

How Tencent EdgeOne Improve Website Performance?

<h2 id="What-is-Website-Speed?" id="What-is-Website-Speed?">What is Website Speed?</h2>Website speed is the time it takes for a page to finish loading when a user visits a website page. This involves the speed at which each element on a web page, such as images, text, videos, and other content, loads. For example, when you click on a website link, a website that loads and presents the page quickly will give you a better user experience. On the contrary, if a website takes a long time to load, it may make the user feel impatient or even choose to leave. Therefore, how to improve website performance is crucial to the user experience and the success of your website.<figure class="image"><img src="https://edgeone.ai/media/f5d3a375-e68d-41c2-aabf-2c59683115d6.png" alt="importance of website.png"></figure><h2 id="The-Importance-of-Website-Speed" id="The-Importance-of-Website-Speed">The Importance of Website Speed</h2>Website speed is crucial and will be illustrated from the following perspectives:<h3>Conversion Rates</h3>Website speed significantly affects conversion rates. Statistics show that a 1-second delay in page load time can potentially lead to a 7% decrease in conversions. For instance, for an online retailer with a daily sales revenue of $50,000, a 1-second delay could potentially result in up to $1 million in lost sales annually. Therefore, whether viewed from the perspective of user experience, SEO, or conversion rates, website speed plays a critical role in the overall performance and profitability of a website.<h3>Search Engine Optimization (SEO)</h3>Website load speed also affects Search Engine Optimization(SEO). Search engines like Google have given preference to website load speed in their algorithm. A slow-loading website might end up lower in the search rankings, potentially leading to fewer page views and thus affecting advertising and sales revenue.<h3>User Experience</h3>Website speed has a significant impact on the user experience. Imagine visiting a website that loads slowly; it's quite likely you will opt to exit and find faster sources of information or services. For instance, a slow-loading e-commerce website could frustrate potential customers, leading to a decrease in conversion rates.<h2 id="Website-Performance-Metrics" id="Website-Performance-Metrics">Website Performance Metrics</h2>Many metrics can help determine the performance of a website:<ol><li>Page Load Time: This is the time it takes for a user to click on a web page link until the full page is displayed. It directly affects the user's initial impression and experience.</li><li>First Painting (FP): This is the point in time when the page starts displaying content.</li><li>First Content Painting (FCP): This is the point at which the page presents the first DOM content (e.g., text, images, etc.) to the user.</li><li>First Meaningful Paint (FMP): This is the point at which the main content is rendered to the user, making the page useful.</li><li>Time to Interact (TTI): This is the point in time when the page is ready for user interaction (e.g. scrolling, button clicking, etc.).</li></ol><h2 id="Ways-to-Improve-Website-Performance" id="Ways-to-Improve-Website-Performance">Ways to Improve Website Performance</h2>A performance improvement plan is often needed to enhance website performance. Several accepted methods can increase website speed. Compressing and optimizing images is one, as large, unoptimized images can significantly slow your site. Another technique is to reduce HTTP requests because a substantial portion of a web page's load time is spent downloading different elements of the page, such as images, stylesheets, and scripts. Overloaded elements can negatively impact your site's speed. Lastly, using a Content Delivery Network (CDN) can also improve website speed. A CDN copies your site and stores it in one of its numerous global data centers. When a user visits your site, they download files from the server closest to them, reducing the time it takes for your website to load.<ol><li>Implement Content Distribution Network (CDN): A CDN takes a copy of your site, stores it in various servers located in different geographic locations, and serves your site to your visitors from the closest location. This fastens the serving of your site.</li><li>Minimize HTTP Requests: By reducing the number of components on a page like images, scripts, or CSS files, you can minimize the amount of HTTP requests to improve the speed of your site.</li><li>Leverage Browser Caching: Browsers cache a lot of information (like stylesheets, images, JavaScript files, etc.) so the page doesn't need to fully load when a visitor returns. Using methods to leverage browser caches can help improve page load time.</li><li>Minify CSS, JavaScript, and HTML: Optimizing your code by removing spaces, commas, unnecessary characters, code comments, etc. can dramatically improve your page load time.</li><li>Enable Compression: Use software apps such as Gzip for file compression to reduce the size of your CSS, HTML, and JavaScript files which are larger than 150 bytes.</li><li>Optimize CSS Delivery: CSS holds the style requirements of your page. Therefore, ensuring that your CSS is delivered in the most optimized and effective manner can improve the visibility of your web content while loading.</li></ol><h2 id="How-Tencent-EdgeOne-Improve-Website-Performance?" id="How-Tencent-EdgeOne-Improve-Website-Performance?">How Tencent EdgeOne Improve Website Performance?</h2><ol><li><a href="https://edgeone.ai/document/46182">Smart Acceleration</a>: EdgeOne utilizes advanced algorithms and technologies to intelligently select the best data transmission paths and reduce redundant data transfers, thereby increasing website loading speeds.</li><li>Global Edge Node Deployment: EdgeOne has deployed more than 2,800 edge nodes in more than 70 regions across five continents, ensuring that users around the world can realize nearby access, reduce latency, and improve access speed.</li><li>Perfect Combination of Security and Acceleration: EdgeOne not only provides efficient data transmission functions, but also protects the security and stability of the enterprise platform through self-developed high-performance load balancers and a series of security technologies and strategies to effectively resist various network attacks.</li><li>Domain name resolution: EdgeOne provides domain name resolution service to help users quickly resolve the domain name to the correct IP address and improve website access speed.</li><li>Intelligent Optimization and <a href="https://edgeone.ai/document/56973">Detection</a>: By optimizing data transmission paths and reducing redundant data transmission, EdgeOne can dramatically improve users' network access speed and provide a high-quality, highly reliable network experience. Meanwhile, based on syntax analysis and AI intelligent detection engine, EdgeOne can improve detection accuracy, effectively reduce false positives, and further enhance service accuracy and reliability.</li><li><a href="https://edgeone.ai/document/58013">DDoS/CC/Web/Bot Protection</a>: EdgeOne provides DDoS/CC/Web/Bot protection services to effectively resist various network attacks and ensure the safe and stable operation of websites.</li><li><a href="https://edgeone.ai/document/53372">Edge Function Computing</a>: EdgeOne provides edge function computing services to help users perform computing tasks on edge nodes, reduce latency and improve website access speed.</li><li>Content Delivery Network(CDN): EdgeOne provides acceleration and security solutions based on Tencent's edge computing nodes, escorting e-commerce and retail, financial services, content information and gaming, and other industries to improve user experience.</li></ol>

The Importance of Website Speed

Why Website Speed Matters?

What are the Common Means of Web Attacks?

What are the Important Web Application Defense Strategies?

How Does Tencent EdgeOne Prevent Web Attacks on Web Applications?

Web Attack

 What is a Web Attack?

Static files will be cached as a priority

<h2 id="What-is-Node-Cache?" id="What-is-Node-Cache?" style="margin-left:0px;">What is Node Cache?</h2>Caching is at the heart of Content Delivery Network(CDN) services. Similar to how browser caching stores files on a hard drive, where they can be more rapidly accessed, a CDN moves your website content to powerful proxy servers optimized for accelerated content distribution.Caching works by selectively storing website files on a CDN cache proxy servers, where they can be quickly accessed by website visitors browsing from a nearby location.<h2 id="What-benefits-does-CDN-caching-offer?" id="What-benefits-does-CDN-caching-offer?" style="margin-left:0px;">What benefits does CDN caching offer?</h2><h3 style="margin-left:0px;">1. Cut down on bandwidth costs</h3>Delivering content from CDN cache proxies removes the burden from the origin (backend) server, significantly reducing bandwidth costs associated with serving content to numerous visitors. For most sites, bandwidth costs can be reduced by as much as 40% to 80%, depending on the percentage of cacheable content.<h3 style="margin-left:0px;">2. Improve user experience</h3>A globally distributed network of cache proxy servers, CDNs bring your website’s content closer to all visitors, no matter where they are. Having this content delivered from a local server significantly improves access speed and user experience.<h3 style="margin-left:0px;">3. Ensure reliable content delivery</h3>Modern CDNs have traffic capacity far exceeding most normal enterprise network capabilities. Where a self-hosted website may be easily disrupted by unexpected traffic peaks or denial of service attacks, CDN cache servers are highly resilient and secure. As a result, they are stable during peak traffic instances.<h2 id="Static-files-will-be-cached-as-a-priority" id="Static-files-will-be-cached-as-a-priority" style="margin-left:0px;">Static files will be cached as a priority</h2>A majority of all website content consists of static pre-formatted files that are not expected to change over time (or for different users). These files are the default candidates for caching, as opposed to dynamic files, which are generated on-the-fly based on information from a database. For example: Static e-store template with dynamically-generated product information. Typical static files are:<ol><li>Template Images</li><li>Videos</li><li>Music</li><li>JavaScript</li><li>CSS Files</li></ol><h2 id="How-do-cache-servers-work?" id="How-do-cache-servers-work?" style="margin-left:0px;">How do cache servers work?</h2>Proxy cache servers are the building blocks of a CDN network data centers, which are strategically situated around the globe. These points of presence (PoP) are selected based on traffic patterns of individual regions.Highly active locations with numerous users may have several data centers. On the other hand, remote locations with few users may have only one PoP to cover a large geographic region.Once in place, cache servers act as a repository for website content, providing local users with accelerated access to cached files. The closer a cache server is to the end user, the shorter the connection time needed for transmission of website data.Hardware wise, a typical individual cache server is a content delivery powerhouse, with bolstered RAM and SSD storage resources. Being the faster option, RAM is used for high-priority resources, while SSD is used for your least requested, but still cacheable web files. <img class="image_resized" style="width:68.11%;" src="https://edgeone.ai/media/b369e6b0-512f-43c8-9c26-96a0775ec0b7.png" alt="缓存服务是如何工作的.png"><h2 id="Offline-Cache" id="Offline-Cache" style="margin-left:0px;">Offline Cache</h2>If offline caching is enabled, you can use the CDN to cache content when your source site is faulty, that is, you cannot pull resources back to the source.If the node has a cache, the cached content is returned. That is, the content in the mission has expired, and it still responds to the expired content until the source station recovers and can return to the source normally.If the node has no cache, an error message indicating that the source station is faulty is returned.<h2 id="Cache-Prerefresh" id="Cache-Prerefresh" style="margin-left:0px;">Cache Prerefresh</h2>The Content Delivery Network (CDN) provides the basic cache configuration capability. The CDN can set the cache expiration time based on various rules, such as the specified service type, directory, and URL. In this way, the node cache resources are periodically cleared and the source station retrieves the latest resources for re-caching.In addition, the CDN provides the ability to cache refresh, specifying urls or directories in batches for refresh operations:Refresh URL: Deletes the cache of the corresponding resource on all CDN nodes.Refresh directory: In the Refresh Changed resource mode, when a user accesses a resource in the matching directory, the Last-Modified information of the resource is obtained from the source. If it is consistent with the current cache resource, the cached resource is directly returned. If it is inconsistent, the resource is fetched from the source and cached again. If Refresh All Resources is selected, when a user accesses resources in the matching directory, the system directly returns the new resources to the user and caches the new resources again.<h3 style="margin-left:0px;">Cache prerefresh applies to scenarios</h3><h4 style="margin-left:0px;">New resource release</h4>After the source site overwrites a new resource to an old resource with the same name, you can submit the URL or directory of the corresponding resource to refresh the resource. After the cache is cleared, all users can directly access the latest resource.<h4 style="margin-left:0px;">Illegal resource clearing</h4>If illegal resources (such as those related to pornography, drugs, and gambling) are found on the site, node cache resources can still be accessed after the source site resources are deleted. To maintain the network environment, you can delete cache resources by refreshing the URL to ensure timely clearing.<h2 id="Conclusion" id="Conclusion" style="margin-left:0px;">Conclusion</h2>Tencent EdgeOne provides an acceleration and security solution based on Tencent edge nodes to safeguard diverse industries such as ecommerce, retail, finance service, content and news, and gaming and improve their user experience.Tencent EdgeOne's nodes are closer to users, which greatly reduce the data access latency, avoid data transfer jitters, and guarantee the stability and effectiveness during the transfer of massive amounts of data. In addition, EdgeOne has many acceleration features, including dynamic/static data acceleration, cross-border acceleration, and smart route optimization, to efficiently support latency-sensitive businesses.Learn more about <a href="https://edgeone.ai/document">acceleration services and access security services</a>, or sign up for<a href="https://edgeone.ai/register?s_url=https://edgeone.ai/"> Tencent EdgeOne</a>.

What is Node Caching?

What is the access sequence of common DNS records?

DNS records are data stored on DNS servers that define how to resolve human-readable domain names (such as www.example.com) into machine-readable IP addresses (like 192.0.2.1). This resolution process is a critical part of the normal functioning of the internet, as it allows us to access websites by entering easy-to-remember web addresses, rather than needing to remember complex IP addresses.<h2 id="Why-add-DNS-Records?">Why add DNS Records?</h2><ul style="list-style-type:disc;"><li>User-Friendly - People typically find it easier to remember domain names like www.example.com, rather than IP addresses like 192.0.2.1. DNS records allow us to access websites using easy-to-remember domain names, rather than needing to remember complex IP addresses.</li><li>Flexibility - If a website's IP address needs to change (for example, if the website moves to a new server), only the DNS record needs to be updated, not the domain name. This means users can continue to access the website using the same domain name, without needing to know the new IP address.</li><li>Load Balancing and Redundancy - By using multiple A records, DNS can distribute traffic across multiple servers, thereby improving website availability and performance. If one server fails, DNS can automatically redirect users to other functioning servers.</li><li>Security - Certain types of DNS records (such as CAA records and DNSSEC-related records) can enhance the security of a website, preventing cyber attacks and fraud.</li></ul><h2 id="What-is-the-access-sequence-of-common-DNS-records?">What is the access sequence of common DNS records?</h2>The access order of DNS records refers to the sequence in which various DNS record types are looked up during the domain name resolution process. Here are the detailed steps of the DNS record access order:<ul style="list-style-type:disc;"><li>User enters domain name: First, the user enters a domain name (e.g., www.example.com) in the browser.</li><li>Query NS records: The DNS resolution process needs to find the authoritative DNS server responsible for managing the target domain. This can be achieved by querying the NS (Name Server) records on the root DNS server, top-level domain server, and authoritative DNS server.</li><li>Query CNAME records: If the target domain is an alias (for example, mapping www.example.com to example.com), the CNAME (Canonical Name) record needs to be queried. After finding the CNAME record, the actual target domain's A or AAAA record needs to be queried.</li><li>Query A or AAAA records: After finding the actual target domain, the A (IPv4 address) record or AAAA (IPv6 address) record needs to be queried. The result of the query is the IP address of the target website.</li><li>Query MX records: If the target is to send an email, the MX (Mail Exchange) record needs to be queried. The MX record specifies the server responsible for handling email. After obtaining the MX record, the A or AAAA record of the mail server also needs to be queried to get its IP address.</li><li>Query TXT records: In some cases, the TXT (Text) records may also need to be queried, such as for domain ownership verification, SPF (Sender Policy Framework) records, etc.</li><li>Query PTR records: When performing a reverse DNS lookup (mapping an IP address back to a domain name), the PTR (Pointer) record needs to be queried.</li></ul>It is important to note that the access order of DNS records depends on the specific query requirements. Different types of requests may involve different types of DNS records. For example, accessing a website mainly involves A, AAAA, and CNAME records, while sending an email involves MX records.<h2 id="Other-Types-of-DNS-Records">Other Types of DNS Records</h2><span style="background-color:rgb(255,255,255);color:rgb(51,51,51);font-family:&quot;Open Sans&quot;, &quot;Clear Sans&quot;, &quot;Helvetica Neue&quot;, Helvetica, Arial, &quot;Segoe UI Emoji&quot;, sans-serif;">Here are some of the less common DNS record types and their uses:<figure class="table" style="width:99.27%;"><table class="ck-table-resized"><colgroup><col style="width:29.38%;"><col style="width:70.62%;"></colgroup><thead><tr><th style="border-bottom:0px none currentcolor;border-left:1px solid rgb(223, 226, 229);border-right:1px solid rgb(223, 226, 229);border-top:1px solid rgb(223, 226, 229);padding:6px 13px;">Record Type</th><th style="border-bottom:0px none currentcolor;border-left:1px solid rgb(223, 226, 229);border-right:1px solid rgb(223, 226, 229);border-top:1px solid rgb(223, 226, 229);padding:6px 13px;">Description</th></tr></thead><tbody><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">SOA</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Start of Authority" record, contains information about the DNS zone, such as the primary DNS server and the contact information of the administrator.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">PTR</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Pointer" record, used for reverse DNS lookups, mapping IP addresses back to domain names.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">HINFO</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Host Information" record, contains information about the host's hardware and operating system.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">RP</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Responsible Person" record, contains information about the domain administrator.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">AFSDB</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Andrew File System Database" record, used for the database servers of the Andrew File System (AFS).</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">X25</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">X.25 record, used to map domain names to X.25 addresses (an early packet-switching network protocol).</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">ISDN</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Integrated Services Digital Network" record, used to map domain names to ISDN addresses.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">RT</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Route Through" record, used for routing to another network.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">NSAP</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Network Service Access Point" record, used to map domain names to NSAP addresses (an address of the OSI network protocol).</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">DNAME</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Delegation Name" record, used to redirect a domain name and all its subdomains to another domain name.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">LOC</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Location" record, contains information about the geographical location of the host.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">NAPTR</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Naming Authority Pointer" record, used for dynamic redirection and protocols such as SIP (Session Initiation Protocol).</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">CERT</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Certificate" record, used to store PGP, PKIX, or SPKI certificates.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">DHCID</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"DHCP Identifier" record, used for DHCP servers.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">SPF</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"Sender Policy Framework" record, used to prevent email fraud.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">SSHFP</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"SSH Public Key Fingerprint" record, used for SSH connections.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">IPSECKEY</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">"IPsec Key" record, used for IPsec VPN connections.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">DNSKEY, RRSIG, NSEC, DS</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">These records are used for DNSSEC, a protocol that enhances DNS security.</td></tr></tbody></table></figure>&nbsp;<h2 id="EdgeOne-Domain-Name-Resolution">EdgeOne Domain Name Resolution</h2><span style="background-color:rgb(255,255,255);color:rgb(51,51,51);font-family:&quot;Open Sans&quot;, &quot;Clear Sans&quot;, &quot;Helvetica Neue&quot;, Helvetica, Arial, &quot;Segoe UI Emoji&quot;, sans-serif;">Although businesses may have the option to manage DNS themselves, choosing a professional DNS service provider like EdgeOne can bring a higher level of reliability, performance, and security, while significantly reducing management pressure. EdgeOne provides a comprehensive <a href="https://edgeone.ai/document/54764">domain name resolution service</a><span style="background-color:rgb(255,255,255);color:rgb(51,51,51);font-family:&quot;Open Sans&quot;, &quot;Clear Sans&quot;, &quot;Helvetica Neue&quot;, Helvetica, Arial, &quot;Segoe UI Emoji&quot;, sans-serif;">, including modifying DNS servers, bulk importing DNS record configurations, and individually configuring records through page operations. For example, as shown in the figure below, you only need to click the "Add record" button, fill in the record type and configuration content you want to add, and it will take effect immediately after saving. This simple and direct operation method makes DNS management much more relaxed and convenient.<img src="https://edgeone.ai/media/52952435-a744-4960-98bd-3242891d6d97.png" alt="配置DNS记录.png">At the same time, EdgeOne also has the capability of <a href="https://edgeone.ai/document/58235">DNS Security Extensions(DNSSEC</a>). Enabling DNSSEC can effectively prevent attacks such as DNS spoofing and cache poisoning. It ensures the authenticity and integrity of DNS response messages through digital signatures, protecting users from being redirected to unexpected addresses, thereby enhancing user trust in the Internet and protecting your core business. If you wish to enhance the security of your site's resolution to prevent hijacking and tampering, it is recommended to enable this configuration.<img src="https://edgeone.ai/media/d919a6fc-09a0-4caf-aa78-b8b3ba1086fa.png" alt="DNSSEC.png">&nbsp;<h2 id="Conclusion">Conclusion</h2><a href="https://edgeone.ai/products/edgeone">Tencent&nbsp;EdgeOne</a> is a globally distributed Application Delivery Network (ADN), supported by Tencent's extensive infrastructure. It accelerates the delivery of global enterprise applications through intelligent DNS routing, global load balancing, and a user-friendly DNS management interface. If you have any questions or need assistance, our support team is always ready to help. Please feel free to <a href="https://edgeone.ai/contact">contact&nbsp;us</a>.

What are DNS Records?

Measures and techniques to prevent DNS attacks

DNS was born in the early days of the Internet, when security threats were relatively few and DNS traffic could pass through network firewalls without hindrance. However, as the number of Internet users and networks has grown, so has the appeal of DNS among malicious actors. It has become an attack method that can be exploited to threaten network security and induce users to disclose personal information. DNS security involves all protective measures related to the DNS protocol. An effective DNS security strategy includes many overlapping defenses, including establishing redundant DNS servers, DNS filtering, and strict DNS logging.<h2 id="What-are-the-common-DNS-attacks?">What are the common DNS attacks?</h2><h3>1. DDoS attack</h3>Distributed Denial of Service (DDoS) attack refers to an attacker remotely controlling a large number of zombie hosts through the network to send a large number of attack requests to one or more targets, blocking the network bandwidth of the target server or exhausting the system resources of the target server. Overload or crash the DNS server, causing it to be unable to respond to normal service requests, and even cause data leakage.<h3>2. DNS cache poisoning</h3>In this type of attack, attackers exploit vulnerabilities in the DNS server to take over the server. During the 'cache poisoning' process, attackers inject malicious data into the cache system of the DNS resolver, thereby redirecting users to a website specified by the attacker, where personal information or other data is often stolen.If cybercriminals successfully gain control of a DNS server, they can manipulate the information in the cache (DNS poisoning). This poisoning code is commonly found in URLs sent via spam or phishing emails. Since DNS servers can access the caches of other DNS servers, this attack method has significant propagation properties. The main risk of DNS cache poisoning is data theft.<h3>3. DNS tunnel</h3>DNS tunneling attacks begin when a user downloads malware to a computer, or when a hacker successfully exploits a vulnerability in a computer system and installs a malicious attack payload. Typically, attackers want to retain control of the device to be able to run commands or transfer data outside of that environment. To do this, an attacker would need to establish a tunnel, a method of sending commands and receiving data from a compromised system while evading detection by network perimeter security measures.DNS traffic can often pass freely through perimeter security measures such as firewalls, making it ideal for this type of exploit. In order to create a tunnel, an attacker would need to create and register a domain name, as well as configure an authoritative name server controlled by the attacker. When malware on a victim's device issues a DNS query to the attacker's server, the server responds with a DNS packet containing data and commands specific to the infected device. This allows the attacker to continuously communicate with the infected device without triggering any alerts. Additionally, an attacker could send the data encoded in the query to a malicious authoritative name server.<h3>4. DNS hijacking</h3>DNS hijacking is an attack technique that can be implemented in a variety of ways, including DNS cache hijacking, DNS server hijacking, router hijacking, and malware hijacking. Attackers redirect users' domain name resolution requests to malicious IP addresses or websites by tampering with data in the DNS resolution process. This kind of attack can cause users to be redirected to malicious websites to conduct malicious activities such as phishing, malware spreading, and information theft.<h2 id="Measures-and-techniques-to-prevent-DNS-attacks">Measures and techniques to prevent DNS attacks</h2><ul style="list-style-type:disc;"><li>DNS resolution service provider: Choose a trustworthy DNS resolution service provider and ensure that it has good security and protection measures. These service providers usually adopt various techniques to protect the security of the DNS resolution process.</li><li>Configuring DNSSEC: <a href="https://edgeone.ai/document/58235">DNSSEC</a> is a security extension protocol that ensures the integrity and authenticity of DNS responses through digital signatures and verification mechanisms, preventing DNS hijacking and cache poisoning attacks.</li><li>Detection and Logging: Implement DNS traffic monitoring and logging to promptly detect abnormal activities and attack behaviors. By monitoring and analyzing DNS traffic, potential signs of attack can be discovered, and corresponding defensive measures can be taken.</li><li>Regularly Check and Update Router and Device Firmware: Regularly check and update the firmware of routers and devices to ensure their security and the latest protective features.</li><li style="text-align:justify;">Use Firewalls and Security Software: Configure firewalls and security software to detect and block malicious DNS requests and responses, preventing malware hijacking and DNS hijacking.</li><li>Pay Attention to Security Awareness and Education: Enhance users' security awareness to avoid clicking on suspicious links and downloading files from unknown sources. Regularly update and scan computers to detect malware.</li></ul><h2 id="How-EdgeOne-Can-Help?">How EdgeOne Can Help?</h2><h3>1. DDoS Protection</h3>EdgeOne provides and enables L3/L4 traffic-based <a href="https://edgeone.ai/document/56398">DDoS&nbsp;attack&nbsp;protection</a> for all connected services. It monitors network traffic in real time and immediately performs traffic cleaning and filtering when a DDoS attack is identified. The DDoS protection feature offers preset protection strategies based on attack profiling, behavior pattern analysis, AI intelligent recognition, and other protection algorithms. It can identify and filter the following types of DDoS attacks:<figure class="table" style="width:97.91%;"><table class="ck-table-resized"><colgroup><col style="width:28.31%;"><col style="width:71.69%;"></colgroup><thead><tr><th style="border-bottom:0px none currentcolor;border-left:1px solid rgb(223, 226, 229);border-right:1px solid rgb(223, 226, 229);border-top:1px solid rgb(223, 226, 229);padding:6px 13px;">Protection Category</th><th style="border-bottom:0px none currentcolor;border-left:1px solid rgb(223, 226, 229);border-right:1px solid rgb(223, 226, 229);border-top:1px solid rgb(223, 226, 229);padding:6px 13px;">Description</th></tr></thead><tbody><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">Malformed Packet Filtering</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">Filters frag flood, smurf, stream flood, land flood attacks, and filters malformed IP, TCP, UDP packets.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">Network Layer DDoS Attack Protection</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">Filters UDP Flood, SYN Flood, TCP Flood, ICMP Flood, ACK Flood, FIN Flood, RST Flood, DNS/NTP/SSDP and other reflection attacks, null connections.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">DNS DDoS Attacks</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">DNS DDoS attacks mainly include DNS Request Flood, DNS Response Flood, Fake Source + Real Source DNS Query Flood, authoritative server attacks, and Local server attacks.</td></tr><tr><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">Connection-based DDoS Attacks</td><td style="border:1px solid rgb(223, 226, 229);padding:6px 13px;">Connection-based DDoS attacks mainly refer to TCP slow connection attacks, connection exhaustion attacks, Loic, Hoic, Slowloris, Pyloris, Xoic and other slow attacks.</td></tr></tbody></table></figure><h3>2. Configure DNSSEC</h3><a href="https://edgeone.ai/document/58235">Domain&nbsp;Name&nbsp;System&nbsp;Security&nbsp;Extensions&nbsp;(DNSSEC)</a> can effectively prevent DNS spoofing and cache poisoning attacks. By adopting digital signatures, it can ensure the authenticity and integrity of DNS response messages, thereby preventing users from being redirected to unexpected addresses. This in turn enhances user trust in the internet while protecting your core business. If you want to improve the security of site resolution to prevent hijacking and tampering, it is recommended to activate this configuration.<img src="https://edgeone.ai/media/d919d39a-603c-4a18-894a-6f403f7c5048.png" alt="setDNSSEC.png"><h3>3. Traffic Monitoring</h3>EdgeOne Service provides multi-dimensional, visualized <a href="https://edgeone.ai/document/54449">traffic&nbsp;analysis</a> by analyzing L7 (application layer) access log data, including time trend curves of traffic, requests and other indicators, as well as country/region distribution and TOP rankings.<img class="image_resized" style="width:97.88%;" src="https://edgeone.ai/media/7670957c-af75-4d86-8c5c-b5883e0415e5.png" alt="traffic analysis"><h2 id="Summary">Summary</h2>With <a href="https://edgeone.ai/products/edgeone">EdgeOne</a>, you can identify which sites pose a threat and block all requests from these sites. You can also use EdgeOne as an auxiliary DNS server, as mentioned above. This sets up a wall between your main DNS server and potential attackers. By hiding your main DNS server behind EdgeOne, it protects your organization from attackers and various types of malware. &nbsp;

What is DNS Security?

In the digital age, email has become a primary method of communication, both for personal and professional purposes. However, with the rise in its usage, email has also become a popular target for cybercriminals. Therefore, ensuring email security is crucial to protect sensitive information from potential threats.<h2 id="How-does-email-work?">How does email work?</h2>When you send an email to your friends or contacts, it is almost immediately delivered to the recipients within the blink of an eye. However there is a set of processes that happens in the background from when you send the email, and till the email is delivered to the recipient's Inbox. Email is an electronic communication method for transmitting and exchanging messages over computer networks. Here is a brief overview of how email works:<ol><li>Sending an Email.</li><li>Email Server Processing: Upon receiving the email, the sender's mail server performs several processes. First, the server verifies the sender's identity and permissions to ensure they have the authority to send the email. Then, the server checks the format and size of the email and applies spam filtering to prevent the transmission of junk mail. If everything is in order, the mail server stores the email in the sender's mailbox, awaiting further delivery.</li><li>Finding the Recipient's Email Server: The sender's mail server needs to locate the recipient's mail server to deliver the email to the correct destination. To accomplish this, the sender's mail server queries the recipient's domain name system (DNS) records to find the mail server associated with the recipient's email address.</li><li>Delivering the Email: The email client (web/ mobile/ desktop) connects to the Outgoing SMTP server based on the email account you used. The email client handovers the email in MIME format to the Outgoing SMTP server. The Outgoing SMTP validates the sender's details and processes the message for sending. It also verifies the attachment size and verifies whether the email complies with the outgoing email policy set for the particular account. Once the entire validation is completed, it places it in the Outgoing queue. The SMTP server looks up the DNS records of the domain and retrieves the MX records information of the recipient servers (A Records in case no MX record is found). Then the SMTP Server connects with the Recipient email server MTA and sends the email through the SMTP protocol.</li><li>Receiving the Email.</li></ol><img src="https://edgeone.ai/media/af2a2e5e-ae1d-412f-a8b1-6218e39d44d9.jpg" alt="email-security.jpg"><h2 id="What-are-the-attacks-on-email?">What are the attacks on email?</h2>Here are some common types of email attacks:<ol><li>Phishing Emails: Phishing emails are deceptive emails that impersonate legitimate entities such as banks, social media platforms, or e-commerce websites. Attackers attempt to trick victims into clicking malicious links, providing personal information, or downloading malicious attachments to obtain sensitive information.</li><li>Ransomware Emails: Ransomware emails contain malware, such as ransomware, which encrypts the victim's files and demands a ransom payment to decrypt them. Victims are typically infected when they open an attachment or click on a link in the email.</li><li>Malicious Attachments: Malicious attachments are email attachments that contain malware such as viruses, trojans, or spyware. Once the victim opens the attachment, the malware executes on their computer, potentially leading to data breaches, system crashes, or remote control by the attacker.</li><li>Spam Emails: Spam emails are unsolicited or irrelevant bulk emails. They may contain advertisements, fraudulent information, scam links, or malware. Spam emails not only waste the recipient's time and resources but may also contain deceptive content.</li><li>Social Engineering Attacks: Social engineering attacks manipulate and deceive individuals to gain information or access. Attackers may send emails impersonating legitimate entities to trick victims into providing sensitive information, passwords, or performing malicious actions.</li><li>Botnet Attacks: Attackers can spread botnets through email, forming networks of infected computers used for sending spam emails, launching distributed denial-of-service (DDoS) attacks, or engaging in other malicious activities.</li><li>Spyware Emails: Spyware emails distribute malware through email to monitor victims' activities, steal sensitive information, or gain remote control over infected computers.</li></ol><h2 id="What-is-business-email-compromise-(BEC)?">What is business email compromise (BEC)?</h2>Business email leakage refers to the unauthorized disclosure or exposure of the content, attachments, or contact information of business organizations or companies' emails. This leakage can occur due to internal negligence, malicious actions, cyber attacks, or other security vulnerabilities.Business email leakage can have serious implications for an organization, including but not limited to:<ol><li>Confidential information disclosure: Business emails may contain sensitive information such as business plans, customer data, financial information, contract details, etc. The leakage of such information can lead to business competition risks, legal liabilities, and reputational damage.</li><li>Intellectual property leakage: Business emails may contain information related to intellectual property, such as patents, trademarks, trade secrets, etc. The leakage of such information can result in intellectual property infringement or theft.</li><li>Financial fraud: Leaked business emails can be exploited by hackers or fraudsters for financial fraud activities, such as phishing attacks using forged emails, fake invoice scams, etc.</li><li>Brand reputation damage: Business email leakage can harm an organization's brand reputation. The leaked information can be misused or made public, undermining the organization's credibility and customer trust.</li></ol><h2 id="Implementing-Email-Security">Implementing Email Security</h2><ol><li>Use Strong Passwords and Two-Factor Authentication (2FA): A strong, unique password is the first line of defense. Additionally, enabling 2FA adds an extra layer of security by requiring a second form of identification.</li><li>Be Wary of Suspicious Emails: Always be cautious of emails from unknown senders, unexpected attachments, or links. These could be phishing attempts or contain malware.</li><li>Encrypt Sensitive Emails: Encryption converts your email content into a format that can only be read with a decryption key. This prevents unauthorized access to your emails during transmission.</li><li>Regularly Update and Patch Your Systems: Keeping your email software and devices updated ensures you have the latest security patches, reducing vulnerabilities.</li><li>Use a Secure Email Gateway: A secure email gateway prevents the transmission of emails that break company policy or will deliver malware.</li></ol><h2 id="How-do">How do</h2><span style="color:rgb(34,34,34);font-family:-apple-system, &quot;system-ui&quot;, &quot;Segoe UI&quot;, Roboto, Oxygen, Ubuntu, Cantarell, &quot;Fira Sans&quot;, &quot;Droid Sans&quot;, &quot;Helvetica Neue&quot;, sans-serif;">The Domain Name System (DNS<a href="https://www.cloudflare.com/learning/dns/what-is-dns/">)</a><span style="color:rgb(34,34,34);font-family:-apple-system, &quot;system-ui&quot;, &quot;Segoe UI&quot;, Roboto, Oxygen, Ubuntu, Cantarell, &quot;Fira Sans&quot;, &quot;Droid Sans&quot;, &quot;Helvetica Neue&quot;, sans-serif;"> stores public records about a domain, including that domain's IP address. The DNS is essential for enabling users to connect to websites and send emails without memorizing long alphanumeric IP addresses.DNS records can help prevent email attacks in several ways:<ol><li>SPF (Sender Policy Framework) Records: SPF records are a type of DNS record that defines which servers are allowed to send emails on behalf of your domain. This can prevent spammers from forging your domain to send emails. The receiving server can check if the sender's IP address is listed in the SPF record, and if not, the email may be marked as spam or rejected.</li><li>DKIM (DomainKeys Identified Mail) Records: DKIM is an email authentication method that allows the recipient to check if the email has been tampered with. The sending server signs the email with a private key, and the recipient can verify the signature with the public key in DNS. If the signature verification fails, the email may be treated as spam or rejected.</li><li>DMARC (Domain-based Message Authentication, Reporting &amp; Conformance) Records: DMARC is a DNS-based email authentication system that uses SPF and DKIM for verification and defines how to handle emails when verification fails. This can prevent phishing and fraudulent emails.</li></ol><h2 id="Why-customers-choose-Tencent-EdgeOne?" style="margin-left:0px;">Why customers choose Tencent EdgeOne?</h2><a href="https://edgeone.ai/"><span style="color:rgb(30,111,255);font-family:Oxygen, &quot;pingfang SC&quot;, &quot;hiragino sans gb&quot;, &quot;Apple SD Gothic Neo&quot;, ui-sans-serif, system-ui, -apple-system, &quot;system-ui&quot;, sans-serif, &quot;helvetica neue&quot;, arial, &quot;microsoft yahei ui&quot;, DIN, &quot;microsoft yahei&quot;, &quot;Apple Color Emoji&quot;, &quot;Segoe UI Emoji&quot;, &quot;Segoe UI Symbol&quot;, &quot;Noto Color Emoji&quot;;">EdgeOne</a><span style="color:rgb(0,0,0);font-family:Oxygen, &quot;pingfang SC&quot;, &quot;hiragino sans gb&quot;, &quot;Apple SD Gothic Neo&quot;, ui-sans-serif, system-ui, -apple-system, &quot;system-ui&quot;, sans-serif, &quot;helvetica neue&quot;, arial, &quot;microsoft yahei ui&quot;, DIN, &quot;microsoft yahei&quot;, &quot;Apple Color Emoji&quot;, &quot;Segoe UI Emoji&quot;, &quot;Segoe UI Symbol&quot;, &quot;Noto Color Emoji&quot;;"> is a next-generation Edge Services provider that delivers unparalleled speed, dependable protection, and the extremely flexible programmable platform for your global services, regardless of scale.

What is Email Security?

IPv6 vs IPv4 (Differences between IPv6 and IPv4)

Should I Enable or Disable IPv6 Protocol?

IPv6 (Internet Protocol version 6) is one of the latest versions of the Internet Protocol (IP), designed to replace <a href="https://datatracker.ietf.org/doc/html/rfc791">IPv4</a>. It provides a larger address space (128-bit addresses, as opposed to the smaller 32-bit addresses in IPv4), improves security and configuration features, and supports a greater number of devices and more efficient routing. The deployment of IPv6 helps address the issue of IPv4 address exhaustion and supports the growth and development of the future Internet.<h2 id="IPv6-Address">IPv6 Address</h2>An IPv6 address consists of 8 groups of 4 hexadecimal digits (each group is called a block) separated by colons, for example: 2001:0db8:85a3:0000:0000:8a2e:0370:7334. IPv6 addresses can also use a double colon (::) to represent a series of consecutive zeros, for example: 2001:0db8::7334.<h2 id="IPv6-vs-IPv4-(Differences-between-IPv6-and-IPv4)" style="margin-left:0px;">IPv6 vs IPv4 (Differences between IPv6 and IPv4)</h2><ol><li>Larger address space: IPv6 provides a vastly expanded address space compared to IPv4, allowing for more efficient addressing of devices and networks.</li><li>Improved security: IPv6 includes built-in security features, such as IPsec, which enhances data integrity, confidentiality, and authenticity.</li><li>Enhanced auto-configuration: IPv6 enables easier and more efficient network configuration through stateless address auto-configuration, simplifying the deployment and management of devices.</li><li>Better support for mobile devices: IPv6 offers improved support for mobile networks and devices, allowing for seamless connectivity and mobility.</li><li>Improved multicast performance: IPv6 includes native support for multicast communication, enabling more efficient distribution of data to multiple recipients.</li><li>Reduced broadcast traffic: IPv6 reduces the reliance on broadcast traffic, leading to more efficient network operation.</li></ol><h2 id="Should-I-Enable-or-Disable-IPv6-Protocol?">Should I Enable or Disable IPv6 Protocol?</h2><h3>Enable IPv6</h3><ol><li>Faster Downloads: Having a public IP allows for faster P2P downloads, enabling quicker discovery of other nodes, accessing more download data, achieving faster download speeds, and reducing the likelihood of interruptions in downloads.</li><li>Interconnectivity: Due to the scarcity of IPv4 addresses, home networks are typically assigned private or dynamic public IP addresses, making it impossible to access their own websites directly via domain names from the outside. Communication between networks relies on public IP addresses, and the unlimited addresses of IPv6 will provide a better interconnectivity experience.</li><li>Enhanced Security: IPv6 is built on a foundation of security, authenticating at the network layer, encrypting data, and verifying IP packets, ensuring end-to-end data security for users and preventing data hijacking.</li><li>Future Development: As more services and infrastructure transition to IPv6, the future of networking will increasingly rely on this technology.</li></ol><h3>Disable IPv6</h3><ol><li>Personal Network Environment: If the current network environment does not support IPv6 or if most services are not optimized for IPv6, enabling IPv6 may result in slow webpage loading or the inability to open applications properly.</li><li>Limited Device Support: Although IPv4 and IPv6 coexist, not all devices and networks support IPv6. Additionally, some regional ISPs do not allocate IPv6 addresses to individual users.</li><li>No Need for IPv6: If you already have a public IPv4 address that meets remote access or other requirements, or if you only use the network for watching online videos, daily chatting, or playing online games, IPv4 is sufficient for your needs.</li></ol><h2 id="Conclusion">Conclusion</h2><a href="https://edgeone.ai/">EdgeOne </a>also supports the <a href="https://edgeone.ai/document/49503">IPv6 protocol</a>. With the proliferation of internet-enabled devices, the older IPv4 addresses are being exhausted, making IPv6 support imperative. By supporting the IPv6 protocol, EdgeOne ensures that its architecture is future-ready.

What is IPv6?

HTTP/2 (originally named HTTP 2.0) is the second version of the Hypertext Transfer Protocol, used for the World Wide Web. It is primarily based on the SPDY protocol, implementing measures such as data compression of HTTP header fields, multiplexing of data transmission, and server push to reduce network latency and enhance client page load speed. HTTP/2 does not change the application semantics of HTTP, still utilizing HTTP request methods, status codes, and header fields. It primarily modifies the message transmission format of HTTP, enhancing performance through the introduction of binary framing.<h2 id="What-problems-does-HTTP/2-solve?">What problems does HTTP/2 solve?</h2>HTTP is the most widely used internet application protocol. The early versions of the HTTP protocol were simple: HTTP/0.9 started the World Wide Web with only one line of protocol; <a href="https://www.ietf.org/rfc/rfc1945.txt">HTTP/1.0</a> was an official specification that extended the popular HTTP/0.9; it wasn't until HTTP/1.1 that the <a href="https://www.ietf.org/">IETF</a> published the first official standard. In the early stages, simplicity came at the cost of application performance: HTTP/1.1 required clients to use multiple connections to achieve concurrency and reduce latency; HTTP/1.1 did not compress request and response header fields, leading to unnecessary network traffic; HTTP/1.1 did not support effective resource prioritization, resulting in low utilization of underlying TCP connections, and so on.As network applications have become integral to people's daily lives, their scope, complexity, and importance have continued to expand. To address issues with the HTTP protocol, <a href="https://datatracker.ietf.org/doc/html/rfc9113">HTTP/2</a> was introduced. HTTP/2 did not change the application semantics of HTTP, continuing to use HTTP's request methods, status codes, and header fields. It primarily modified the message transmission format of HTTP, reducing network latency and improving client page load speeds through measures such as introducing server push.<h2 id="HTTP/2-vs-HTTP/1.1">HTTP/2 vs HTTP/1.1</h2>HTTP/2 and HTTP/1.1 are two different versions of HTTP (Hypertext Transfer Protocol) used for transmitting web pages and other resources over the network. There are several key differences between them:<ol><li>Binary protocol: HTTP/2 uses a binary protocol, while HTTP/1.1 uses a text-based protocol. Binary protocols are easier to parse, more efficient, and less error-prone.</li><li>Multiplexing: HTTP/2 supports multiplexing, which means that multiple requests and responses can be sent and received simultaneously over a single TCP connection. This reduces latency and improves resource utilization. In contrast, HTTP/1.1 uses multiple TCP connections to achieve similar functionality, but with less efficiency.</li><li>Header compression: HTTP/2 employs the HPACK compression algorithm to compress HTTP header information, reducing the size of transmitted data. This helps improve performance, especially in low-bandwidth environments. HTTP/1.1 does not support header compression.</li><li>Server push: HTTP/2 supports server push, allowing the server to proactively send resources before the client requests them. This helps reduce round-trip times and improve performance. HTTP/1.1 does not support this feature.</li><li>Stream prioritization: HTTP/2 allows for the prioritization of different requests so that more important resources can be transmitted faster. HTTP/1.1 does not have this capability.</li></ol>HTTP/2 offers significant improvements in performance, efficiency, and functionality compared to HTTP/1.1, making it a better choice for modern web applications. However, some older clients and servers may still only support HTTP/1.1. In practice, it's best to ensure that your server supports both protocols for forward compatibility and maximum performance benefits.<h2 id="HTTP/2-vs-HTTP/3">HTTP/2 vs HTTP/3</h2><a href="https://datatracker.ietf.org/doc/html/rfc9114">HTTP/3</a>, also referred to as QUIC (Quick UDP Internet Connections), represents the most recent version of HTTP and offers numerous benefits compared to HTTP/2:<ol><li>Reduced latency: HTTP/3 uses QUIC, which operates over UDP instead of TCP, reducing connection establishment times and overall latency.</li><li>Improved congestion control: QUIC includes improved congestion control mechanisms, which can lead to better performance, especially in situations with packet loss or high latency.</li><li>Multiplexing: HTTP/3 allows for more efficient multiplexing, enabling multiple streams to be sent over a single connection without head-of-line blocking issues.</li><li>Security: QUIC includes built-in encryption, providing security at the transport layer, which is an improvement over the optional use of TLS with HTTP/2.</li><li>Better error correction: QUIC includes improved error correction mechanisms, which can help mitigate the impact of packet loss and retransmissions.</li></ol>These advantages make HTTP/3 a compelling option for improving web performance and security over its predecessor, HTTP/2.<h2 id="curl-HTTP/2">curl HTTP/2</h2>you can use the curl command to make HTTP/2 requests. To do this, you need to ensure that your version of curl supports HTTP/2. You can check this by running:<pre><code class="language-plaintext">curl --version</code></pre>and looking for HTTP2 in the features list. If your version supports HTTP/2, you can use the&nbsp;<pre><code class="language-plaintext">-http2</code></pre>&nbsp;flag to enable HTTP/2, like this:<pre><code class="language-plaintext">curl -v --http2 https://example.com</code></pre><h2 id="Conclusion">Conclusion</h2><a href="https://edgeone.ai/">Tencent Cloud's EdgeOne Service</a> provides extensive support for modern protocols like HTTP/2, HTTP/3. Here is a breakdown of how each is supported:<ol><li>EdgeOne supports the <a href="https://edgeone.ai/document/46171">HTTP/2 protocol</a>, which brings a significant performance boost compared to the previous HTTP/1.x protocols. As mentioned earlier, this includes benefits from binary framing, multiplexing, server push, header compression, and stream prioritization. The end result is improved site speed and reliability, especially for complex, resource-intensive websites.</li><li>EdgeOne supports <a href="https://edgeone.ai/document/55930">HTTP/3 (QUIC</a>) requests which are used to further accelerate site requests and improve data transfer efficiency and security. HTTP/3 uses QUIC instead of TCP as a transport protocol, which helps reduce round-trip time and speed up the delivery of the web content.</li></ol>

Learning Center