Page Rules

This feature allows you to define rules on files or file formats for content they hold under our CDN structure.

To use this feature;

1. You can access the Medianova cloud panel by logging in with your username and password at http://cloud.medianova.com .

2. You can reach the Page Rule settings screen by clicking on the CDN Resource you would like to edit by following the CDN > CDN Resources path on the left side of the panel and navigating to Page Rules tab.

3. You can create a page rule by clicking on the Create Page Rule button, entering the path information and selecting the file extension and operation type.

• Path: Enter the path that you would like to define the page rules for. Only one path at a time can be entered.

  • / * would mean that the settings apply to all files and folders.

  • / cdn / would mean that the settings apply to files and folders under the CDN folder.

• File Extension: The extensions for which the rules will apply are specified without a dot. Multiple extensions are written with a comma.

  • jpg

  • jpg, png

• Valid Referrers: Only requests from the specified websites are allowed, others are rejected. Multiple values are written with comma.

  • .com

  • .com, *.medianova.com

• Browser Cache: It defines the amount of cache time for the browser (Google Chrome, Firefox).

• Cache Time: It defines the cache time for the content on CDN servers.

• Ip Restriction: It defines for which IPs the content will be available. The content can be accessed by the IPs that are given. If left blank, it will be available for all IPs. You should use a comma for entering multiple IPs.

  • 168.2.1

  • 168.2.1, 192.168.2.2

  • 111.28.0 / 24 (can be defined as IP block.)

• Security Headers: Security headers can be enabled to prevent hostile attacks and penetrations.

  • X-XSS Protection: To protect your website from XSS (Cross-Site-Scripting) attacks, header information can be added to the response header on the server side.

  • HTTP Strict Transport Security: HSTS converts the HTTP request made by a user through the web browser to automatic HTTPS. It provides a more secure connection between servers.

  • X-Frame: Clickjacking technique, which is one of the hidden attacks used to click on the Internet users without being aware of them, is related to the X-Frame Options Header.

  • X-Content Type: Supported by Chrome and IE browsers, X-Content-Type-Options is the Security Header that analyzes the file type of the content by doing MIME Type Sniffing on the webserver.

• Custom Headers: It contains three different values. These are:

  • Request Header Add: It contains header information sent to the origin server.

    • XCDN medianova “Can be written as an example.”

  • Add Response Header: It contains header information to be displayed on the browser. Users can view these headers by doing a resource review.

    • XCDN medianova “Can be written as an example.”

  • Hide (Response Header Concealment): Headers to hide

    • Expires “Can be written as an example.”

• Afterwards, you can view, edit and delete the existing custom paths from the settings button on the right.