WAFPRO
EN
ConsoleContact
Home/Secure CDN (SCDN)
SECURE CONTENT DELIVERY

Accelerate every request.
Protect what you build.

SCDN combines website acceleration, DDoS / CC protection and tiered application security. Edge nodes filter unwanted traffic, protect origin servers and accelerate content delivery. Standard and higher plans on every network include WAF; protocols and other features depend on the plan.

WAF from Standard · No separate purchase
Open SCDN console View pricing

Opens the SCDN console. Sign in, choose your network, plan and billing period, then confirm the order.

Visitors reach SCDN through your domain. Edge nodes enforce security rules, serve cache hits directly, and forward dynamic or uncached requests to the origin. Manage domains, certificates and rules in the console.
Secure CDN (SCDN)
Websites and APIsAssess your HTTP(S) workload
Three network optionsChoose for your users’ locations
Tiered protectionSubject to plan and configuration
USE SCDN WITH A PURPOSE

Turn each request into a useful insight

Determine the problem you want to solve before reviewing data or adjusting configurations.

01

Traffic geography

Determine where users mainly access and avoid selecting routes based solely on the location of the origin server.

View or configure
Review visitor geography in the site reports, then compare Mainland China, Overseas and Asia-Pacific networks using bandwidth patterns and real access tests. Geography reports describe visitors; they are not a network quality test.
Plans and conditions
Plans are available on all three networks. Confirm report access, available dimensions and retention in the current console or during integration assessment.

After completion: Identify your users’ regions and the networks to test.

Read the guide
02

Blocked request logs

When an exception or misinterception occurs, first locate why the request did not reach the origin server.

View or configure
Search available logs by time, domain and request path. Check matched rules and actions, then retest with legitimate requests. If no matching record exists, check DNS, origin connectivity and origin logs.
Plans and conditions
WAF logs relate to the WAF capability on Standard and higher plans. Confirm other log permissions, fields and retention for your current plan.

After completion: Get request information that can be passed to support for review.

Read the guide
03

Access rules

Configure different access policies for pages, login interfaces and callbacks to reduce the impact of one rule on all businesses.

View or configure
Build rules using URL, IP, Referer, geography and User-Agent conditions. Check priority and actions. Verify login, checkout and API requests before broadening the rule.
Plans and conditions
WAF is included with Standard and higher plans on all three networks. Check each tier for available CC policies and custom rule options.

After completion: Develop a verifiable, tunable site access strategy.

Read the guide
04

Cache and origin behavior

Reduce repeated return to origin and avoid incorrect caching of login status, personal information or dynamic interfaces.

View or configure
Separate static files from dynamic requests. Check cache scope, origin protocol and port. For stale content or 502/504 errors, trace DNS, the edge and the origin in sequence.
Plans and conditions
All three networks support website integration. Cache controls, purge quotas and retention depend on the current plan and console.

After completion: Make it clear which resources can be cached and which requests must go back to the origin.

Read the guide
05

HTTPS and real-time connections

Choose encrypted access, WebSocket or HTTP/3 according to actual business needs to avoid incorrect selection of protocol capabilities.

View or configure
Deploy a certificate that adapts to the domain name and verify HTTPS; test WebSocket handshake, reconnection and timeout when real-time connection is required, and verify HTTP/3 according to the current entry configuration.
Plans and conditions
All listed plans support SSL; certificate purchase is separate. WebSocket is available from Basic. HTTP/3 is available from Standard on Mainland China and Asia-Pacific networks, and on every Overseas tier.

After completion: Confirm with a real client that the connection is established as expected.

Read the guide
06

Traffic scrubbing and origin restrictions

Allow access to pass through edge protection and reduce the number of entrances that bypass the edge and directly access the origin server.

View or configure
Configure the site for its protection tier and review both abnormal traffic and application availability. Allow the agreed origin-fetch addresses on your origin and prepare a rollback plan.
Plans and conditions
See each plan for its protection tier and CC parameters. Coverage depends on the network, application bandwidth, attack type and service agreement. SCDN does not replace origin access controls, patching or backups.

After completion: Clarify the scope of edge processing and the security work that still needs to be completed at the origin.

Read the guide
PLANS & PRICING

Choose your configuration

Clear product configuration and flexible protection options.

✓ Supported; × Not supported. WS = WebSocket; H3 = HTTP/3. WAF is included with Standard and higher plans on every network.

Mainland China

Five Mainland China plans for different workload sizes.

5 plans · CNY
Mainland China / 01

Personal

Personal sites and low-traffic workloads

¥29/mo
Quarterly ¥88Annual ¥299
WSH3WAFL2
Traffic allowance
100 GB
Application bandwidth
20 Mbps
Connections
3,000
Domains
5

China Telecom · Entry DDoS · CC 1,000 Q/S

Open SCDN console
Full specifications
Region
Global
Network
China Telecom single-carrier
DDoS protection tier
Entry
CC threshold
1,000 Q/S
CC policy
Default policy
SSL
Supported

Sign in and select this network and plan again before confirming the order. This link does not preselect a plan.

Mainland China / 02

Basic

Basic workloads requiring WebSocket

¥109/mo
Quarterly ¥320Annual ¥1,090
WSH3WAFL2
Traffic allowance
500 GB
Application bandwidth
30 Mbps
Connections
No limit
Domains
15

BGP · DDoS Basic · CC 1,500 Q/S

Open SCDN console
Full specifications
Region
Global
Network
BGP
DDoS protection tier
Basic
CC threshold
1,500 Q/S
CC policy
Default policy
SSL
Supported

Sign in and select this network and plan again before confirming the order. This link does not preselect a plan.

Mainland China / 03

Standard

Websites and APIs requiring WAF

¥399/mo
Quarterly ¥1,190Annual ¥3,999
WSH3WAFL2
Traffic allowance
3,000 GB
Application bandwidth
50 Mbps
Connections
No limit
Domains
25

BGP · DDoS Standard · CC 4,500 Q/S

Open SCDN console
Full specifications
Region
Global
Network
BGP
DDoS protection tier
Standard
CC threshold
4,500 Q/S
CC policy
Custom policy
SSL
Supported

Sign in and select this network and plan again before confirming the order. This link does not preselect a plan.

Mainland China / 04

Professional

Higher bandwidth and connection needs

¥988/mo
Quarterly ¥2,900Annual ¥9,888
WSH3WAFL2
Traffic allowance
12,000 GB
Application bandwidth
100 Mbps
Connections
No limit
Domains
50

BGP · DDoS Enhanced · CC 100,000 Q/S

Open SCDN console
Full specifications
Region
Global
Network
BGP
DDoS protection tier
Enhanced
CC threshold
100,000 Q/S
CC policy
Professional policy
SSL
Supported

Sign in and select this network and plan again before confirming the order. This link does not preselect a plan.

Mainland China / 05

Business

High-traffic, multi-domain workloads

¥2,999/mo
Quarterly ¥8,990Annual ¥29,999
WSH3WAFL2
Traffic allowance
45,000 GB
Application bandwidth
300 Mbps
Connections
No limit
Domains
300

BGP · DDoS Enhanced · CC 300,000 Q/S

Open SCDN console
Full specifications
Region
Global
Network
BGP
DDoS protection tier
Enhanced
CC threshold
300,000 Q/S
CC policy
Professional policy
SSL
Supported

Sign in and select this network and plan again before confirming the order. This link does not preselect a plan.

Opens the SCDN console. Sign in and select your network, plan and billing period. Review the final amount and configuration before submitting the order.Read purchasing and billing guidance

VERIFY · ADJUST · SUPPORT

After integration, verify your service

Investigate issues

Record the abnormal time, domain name, path and error message, and compare the edge records and origin server logs to determine in which section the problem occurs.

Troubleshoot step by step

Adjust policies

Only change a specific set of configurations at a time and save the original values. Retest using login, API, and callbacks to confirm there are no false interceptions before expanding the scope.

Understand application rules

Get support

Include your plan, network, event time, redacted request details and steps already tried. Do not share private keys or passwords.

Contact support on WeCom
QUICK START / SCDN

Three steps.Secure, faster delivery.

From domain name to protection, let business access take a safe path.

  1. STEP 01Add your domain and origin

    Check account and network requirements, choose a plan, enter your domain and origin address, and confirm the origin port.

    Open SCDN console

  2. STEP 02Configure HTTPS and protection

    Configure certificates, caching and CC policies. Choose Standard or higher on your selected network if you need WAF.

    View configuration guide

  3. STEP 03Update DNS and verify access

    Modify the domain name resolution according to the CNAME provided by the console, and verify the page, login and key business interfaces after it takes effect.

    Read the integration and troubleshooting guide

Purchase requirements and billing · Activation time depends on your configuration and DNS propagation

QUESTIONS & ANSWERS

Frequently asked questions

After using SCDN, do I still need to purchase WAF separately?

Standard and higher plans on every network include WAF. Personal and Basic do not include WAF. Choose Standard or higher for application protection.

How to access secure acceleration CDN?

Purchase a plan on the console, add the website domain name, origin address and port, and then follow the console prompts to configure resolution. For detailed steps, please view the "CDN Website Management" help document.

Are HTTPS, WebSocket, and HTTP/3 supported?

All plans support SSL. Personal plans on all three networks do not support WebSocket (WS); Basic and higher do. HTTP/3 (H3) is available from Standard on Mainland China and Asia-Pacific, and on every Overseas tier. L2 is supported on all plans except Asia-Pacific Personal. Check the feature marks for the complete matrix.

What access control conditions can be configured?

Access rules can be configured based on conditions such as URL, IP, Referer, region, and User-Agent. The specific available items and rule limits are subject to the current plan and console. When you need WAF, choose the Standard or higher of each line; retest the page, interface and callback before going online.

What lines and payment periods are there?

Choose Mainland China, Overseas Optimized or Asia-Pacific Optimized, with 5, 4 and 5 plans respectively. Every tier shows monthly, quarterly and annual totals. Choose for your users’ locations and resource needs.

Have other questions?Contact a technical advisor

BUILD WITH CONFIDENCE

Make every connection safer.

From personal projects to corporate operations, find the protection solution that's right for you.

Discuss a solution Choose your console
Contact us