DocsICP FilingConsole
Documentation
Home Page CDN User Guide Domain name management Origin-fetch settings Specify an origin SNI

Specify an origin SNI

Updated at:
Copy as MD
Product
My Favorites

If your accelerated domain name is configured with multiple origin server addresses, the origin protocol is HTTPS, and each origin server hosts a different domain name for its web service, you can specify a different SNI value for each origin server address. Each origin server then returns a different HTTPS certificate based on the SNI value that it receives, so that Alibaba Cloud CDN POPs can successfully establish SSL connections with the different origin server addresses.

Differences between a specified origin SNI and the default origin SNI

  • A specified origin SNI allows you to configure a different origin SNI for each origin server when multiple origin servers are configured.

  • The default origin SNI uses the same origin SNI for all origin servers, regardless of whether one or multiple origin servers are configured. For more information about the default origin SNI, see Configure default origin SNI.

  • When both a specified origin SNI and the default origin SNI are configured, the specified origin SNI takes precedence.

Procedure

  1. Log on to the CDN console.

  2. In the left navigation pane, click Domain Names.

  3. On the Domain Names page, find the target domain name and click Manage in the Actions column.

  4. On the Origin Fetch tab, find Specify Origin SNI, and then click Add.

    Parameter

    Description

    Origin Address

    The origin server address for which you want to specify an SNI.

    SNI HOST

    • Follow Origin Address:

      • Effect: The SNI value is the same as the origin server address.

      • Scenario: The origin server address is a domain name, and the origin server requires the SNI to match the origin server domain name.

    • Follow Origin Host:

      • Effect: The SNI value is the same as the origin host.

      • Scenario: The origin server requires the SNI to match the origin host.

    • Custom:

      • Effect: You can specify any SNI value.

      • Scenario: The origin server requires the SNI to match a value that is neither the origin server domain name nor the origin host.

    Keep-Alive

    • Enabled: When CDN POPs send requests to the origin server, requests with different SNI values use different persistent connections. This prevents SNI conflicts on the same persistent connection.

    • Disabled: Only one SNI value can be used on the same persistent connection between CDN POPs and the origin server.

  5. Click OK to complete the configuration.

Previous：Parameter rewriteNext：Troubleshooting guide about origin fetch