腾讯云EdgeOne发布安全公告，详细说明React2Shell远程代码执行(RCE)漏洞的防护措施及针对HTTP/2协议的DDoS攻击防护策略。详情请查阅服务公告。

腾讯云EdgeOne安全公告：React2Shell RCE漏洞与DDoS攻击防护

以下为边缘安全加速平台 EO 产品的安全公告，请您关注。更多公告，请参见 

Overview

概述

Token authentication

Access Control

访问控制

Smart Acceleration

智能加速

EdgeOne caching rules introduction

Cache Configuration

缓存配置

Clear and Preheat Cach

清除和预热缓存

How to improve the Cache Hit Rate of EdgeOne

Cache configuration

Content Compression

内容压缩

Smart Compression

智能压缩

File Optimization

文件优化

HTTP/2

 HTTP/3(QUIC)

IPv6 Access

IPv6 访问

Maximum Upload Size

最大上传大小

WebSocket

Client IP Geolocation Header

携带客户端 IP 头部回源

Client IP Geographical Location

携带客户端 IP 地理位置头部回源

gRPC

开启 gRPC

Network Error Logging

Network Optimization

网络优化

Access URL Redirection

访问 URL 重定向

Origin-Pull URL Rewrite

回源 URL 重写

URL Rewrite

URL 重写

Modifying HTTP Response Headers

修改 HTTP 节点响应头

Modifying HTTP Request Headers

修改 HTTP 回源请求头

Modifying Header

修改头部

HTTP Response

Custom Error Page

Modify response content

Rule Management

规则管理

variables

变量

Supported Matching Types and Actions

规则引擎支持的匹配类型与操作

Rules Engine

规则引擎

Audio and Video Pre-pulling

Just-in-Time Image Processing

Video Just-In-Time Processing

VOD Media Origin

Image and video processing

Speed limit for single connection download

HTTP响应

Processing order

请求处理顺序

Default HTTP Headers of Origin-Pull Requests

EdgeOne 默认 HTTP 回源请求头

Default HTTP Response Headers

EdgeOne 默认 HTTP 响应头

HTTP Restrictions

HTTP限制

Request and Response Actions

请求与响应行为

音视频预拉取

实时图片处理

Just-in-Time Media Processing

实时媒体处理

点播媒体源

Media Services

媒体服务

Site Acceleration

站点加速

Creating an L4 Proxy Instance

新建四层代理实例

Modifying an L4 Proxy Instance

修改四层代理实例配置

Disabling or Deleting an L4 Proxy Instance

停用/删除四层代理实例

Batch Configuring Forwarding Rules

批量配置转发规则

Obtaining Real TCP Client IPs via TOA

通过 TOA 获取 TCP 协议客户端真实 IP

Obtaining Real Client IPs Through Protocol V1/V2

通过 Proxy Protocol V1/V2 协议获取客户端真实 IP

Transmitting Client Real IP via SPP Protocol

通过 SPP 协议传递客户端真实 IP

Obtaining Real Client IPs

获取客户端真实IP

L4 Proxy

四层代理

DNS resolution for managed domains

Access accelerated domains

Traffic scheduling

Domain Name Services

Edge HTTPS Certificate

Edge mTLS Authentication

Origin Certificate Validation

HTTPS configuration

Related References

HTTPS Certificate

Load Balancing

负载均衡

Origin Group Configuration

Origin configuration

回源配置

Origin Protection(Obtaining/Updating Origin IP Address Range)

Origin Configuration

源站配置

Domain name service and origin server configuration

边缘 DNS

Edge Acceleration

边缘加速

DDoS Protection Overview

DDoS 防护概述

Exclusive DDoS Protection Usage

使用独立 DDoS 防护

Configuration of Exclusive DDoS protection Rules

配置独立 DDoS 防护策略

DDoS Protection

DDoS 防护

Configuring Web Protection Policy

配置Web防护策略

Custom rule

自定义规则

Rate Limiting

Hosting Rules

Exception Rules

防护例外规则

Managed Custom Rules

托管定制规则

Web security monitoring alarm

Web 安全监控告警

Web Protection

Web 防护

AI Crawler Control

Bot Intelligent analysis

Bot Basic Feature Management

Client Reputation

Active Detection

Custom Bot Rule

Client authentication (Beta)

Bot Management

API Discovery（Beta）

DDoS and Web Protection

Edge Security

边缘安全

Getting Started

快速指引

Function Management

函数管理

Web Debugging

Web调试

Function Trigger

触发配置

Environment Variable

环境变量

Code Replica

Operation Guide

操作指引

addEventListener

Cache

Cookies

Encoding

Fetch

FetchEvent

Headers

Request

Response

Streams

Web Crypto

Web standards

Images

Runtime APIs

Example Overview

示例概述

Obtaining Client URL Information

获取客户端URL信息

Customization Based on Client Geo Location

基于客户端地理位置的自定义

Obtaining Client Geo Location Information

获取客户端地理位置信息

Batch Redirect

批量重定向

Sample Functions

示例函数

Edge Functions

边缘函数

Edge Developer Platform

边缘开发者平台

Security Announcement

公告标题	发布日期
关于针对 React2Shell 远程代码执行漏洞的防护公告	2025-12-17
关于针对 HTTP/2 协议漏洞的 DDoS 攻击防护	2023-10-11