Tencent Cloud EdgeOne-Edge Security Acceleration Platform
立即咨询
首页
Product Overview
Traditional IDC Web service
High Latency Slow Start Vulnerable
EdgeOne
Optimal Fast Secure
What is Tencent Cloud EdgeOne?The cloud service that Accelerate and Protect applications on the Edge of the Internet
Product HighlightsStatic Content Acceleration
Dynamic Content Acceleration
DDoS Protection
Advanced Access Control
Monitoring Metrics & Reports
Product HighlightsAll in One
All Protect & Perform L4/7 features in one package.
Quick & Easy Onboarding
Simple Professional Service process
CNAME, Anycast IP.
Better Visibility
Historical attack data, including L4 attacks
Rate limit features with great visibilities
AI based automatic protection.
EdgeOne Resources - Distributed & Connected Data CentresAbundant Resource Reserves
2800+ PoPs worldwide, 160T reserved bandwidth
Three-layer construct based on core, backbone and cache nodes
Dedicated lines for edge interconnection to provide ultimate performance
Resilient
Anycast network provides overallprotection up to 10Tbps, largest DDoSattack in history
Anycast nodes have multiple PNl andTransit lines to ensure high availability
Anycast nodes have multiple PNl andTransit lines to ensure high availability
Low latency
Edge based DNS service offers 30ms latency in average
worldwide
End-to-end latency <60ms, uninterrupted global gamingexperience
worldwide
End-to-end latency <60ms, uninterrupted global gamingexperience
EdgeOne Global Resource Distribution
EdgeOne Product ArchitectureEdgeOne deploy security measures at the edge closest to users and defend against malicious traffic, support L3/4/7 route optimisation, Persistent Connection and WebSocket
EdgeOne Security: Real-time Detection At The EdgeAttack Detection
Based on DPDK, network packets are intercepted when passing through EdgeOne network. ML model is then built on traffic behaviour + AI Intelligent engine to determine the existence of attack and deploy countermeasures within 3 seconds.
Clean Traffic
Intelligently spread attacks across PoPs distributedglobally behind Anycast lPs assigned to customersdropping suspicious requests before reaching networkregions near the origins.
Layer 3/4 attacks automatically blocked with fullvisibility and reporting.
ldentification and protection for fingerprint and UDPwatermark application.
CC Attack Mitigation & Rate Limiting, with visiblereporting.
Layer 3/4 attacks automatically blocked with fullvisibility and reporting.
ldentification and protection for fingerprint and UDPwatermark application.
CC Attack Mitigation & Rate Limiting, with visiblereporting.
The Best Integrated Multi-layer ProtectionsL4/7 accelerate & protect the same hostnames
CDN
Support static content caching, global PoPs coverage, QUIC compatible, WebSocket, gRPC and other access protocols.
Dynamic Acceleration
Real-time monitoring for latency and quality of route, intelligent dynamic route optimization for L4/L7 traffic forwarding request to origin
Layer 4 Proxy
CNAME proxy or static IP integration to TCP/UDP service, support load balancing and L4 dynamic acceleration.
DNS
Global domain name resolution, support intelligent DNS resolution and CNAME flattening, withstand over 1 million+ QPS and 50 billion+ daily requests at peak.
Customizable protection strategies thanks to Anycast's distributed architecture and "self-developed+AI recognition" cleansing algorithm.
灵活接口能
Effectively defend against SQLi, XSS attack and related Web attack thanks to Tencent's massive attack sample libraries, covers OWASP Top 10 scenarios and filter traffic to match characteristics.
Bot Management
Bot identification and protection - precise management of Bot access policies, one-click Captcha challenge setup, intelligent Bot behaviour analysis, and whitelisting.
EdgeOne Security: DDoS Protection
Advantages of solution
Anycast distribution and various protection mechanism support Tbps level traffic
Protection around origin, filter attack traffic while making sure requests are uninterrupted
Customizable protection policies to defend against various attack
Algorithm to identify and cleanse TCP related reflection attack without human intervention
Respond within seconds to ensure stable services
EdgeOne Security: DDoS ProtectionGeo/Regional blocking
IP blocklist/allowlist
Port number filtering
L3/4 layer payload message blocking
Protocol blocking -TCP, UDP, ICMP Others
Concurrent connection/ packet limit-Global, Per lP
EdgeOne Security: OWASP’s vulnerability
EdgeOne Security: Web Protection
EdgeOne Security: Bot ManagementEdgeOne Bot threat modelling and dynamic identification
Identify malicious crawler with threat intelligence and comprehensive analysis through multiple identification and verification methods
Crawler program library contains 2,300 known crawlers that combined with threat level and fingerprint rules to provide protection accurately
EdgeOne Performance: Route and Performance OptimisationTransport layer optimization
Self-developed QTCP and TQuic protocols optimize congestion window, retransmission and other techniques to improve network jitter for bandwidth maximization
Long Persistent Connection, avoid establishing connection frequently Intelligent compression, improve transmission efficiency
Intelligent routing
Real-time network quality monitoring, dynamic quality map generation
Optimal routing algorithm and Port routing technology select most optimal path to avoid network congestion and failure
Private transmission protocol, dynamic FEC algorithm to improve performance
Multi-integration VS. All-in-one platform
dgeOne Features in OSI Layers
Best Overall CDN LeaderTencent Cloud EdgeOne has the best overall performance in CDN industry
Tencent Cloud EdgeOne Qualification CertificationPCI DSS
PCI DSS Level 1 Service Provider Joint third-party evaluation agency ATSEC to provide security compliance services around the world
GDPR
Comply with EU GDPR user data protection rules
HIPAA
Publish the HIPAA Self-Assessment Report Passed the requirements of ePHI on protecting the security and privacy of user information
CSA STAR
International Cloud Security Alliance Gold Level Certification
MPAA
In compliance with Motion Picture Association of America
K-ISMS
Korea Information Security Management System The third company in the world after Amazon and Microsoft
ISO 27701
The world's first cloud service provider certified by ISO/IEC 27701:2019 personal privacy security protection
CISPE
The first company in China to be certified by the European Cloud Computing Service Providers Alliance Personal Data Protection Code of Conduct
MTCS
Certification to Singapore Multi-Tier Cloud Security (MTCS) T3 Level Standard
Comprehensive Protection with Quick & Easy OnboardingTip: Quick & Easy onboarding to enable basic features with fine-tuning allowed at a later stage
Proprietary Algorithms to Optimize Full Stack PerformanceProprietary algorithms to identify the best path to origin
Detect real-time network latency and quality, to build routing model.
Proprietary algorithm for routing optimization, effectively avoiding poor quality and congested links.
Proprietary packet loss concealment solutions
Incorporates latency and packet loss for accurate network quality detection.
Adaptive network transmission packet loss prediction method, significantly reduces packet loss rate.
Research of network optimization and applicationTencent Cloud published "AutoPlex: Inter-Session multiplexing Congestion Control for Large-Scale Live Video Services" in ACM SIGCOMM 2022 WORKSHOP and awarded with praises by acadamia and industry experts. This paper achieved CDN adaptive congestion control for audio and video transmission across WAN.
Beyond HTTP/2.0
Independent TQUIC-SDK
Tencent Cloud's proprietary TQUIC-SDK is a lightweight network library developed based on Google's QUIC protocol stack.
Key metrics: Latency, TTFF, and success rate
Cache optimization + scheduling precision improvement
Metric collection + correlation analysis
Congestion control optimization
TTFB optimization: First window optimization + 0 RTT ratio improvement
Edge Functions – JS on the EdgeJS Execution Capabilities on Edge Servers, offloadingorigin computing & unnecessary round trips
On-Demand cache prewarming
Security and Performance functions both available
Example (previous client):
Changing colour selection
Performance, Availability and ScalabilityIt’s easy to test and compare average download time, but not so easy to verify situational performance in different scenarios
Availability is much better on the Edge due to its distributed nature and redundancy levels
Scalability due to the IAAS service model
Anycast based Security ProtectionBy leveraging the strengths of Anycast architecture, EdgeOne offers a global protection capability up to 10 Tbps
Traditional scrubbing architecture
Attack protection relies on the protection capabilities of individual nodes. General nodes and large central nodes offer 10–100 and 200–800 Gbps protection respectively.
Large-scale attacks can easily damage the business. As the protection capacity of individual nodes is low, when they are attacked, there will be the risk of continuous scheduling, which will greatly increase the latency
EdgeOne architecture
EdgeOne adopts the Anycast architecture to perform near-origin scrubbing when under attack. The aggregate protection capability can reach 15 Tbps, far exceeding the largest DDoS attack ever recorded (3.45 Tbps).
EdgeOne can identify and mitigate most DDoS attacks within few seconds, with a 99.9% attack mitigation efficiency.
Rate Limiting with Better Visibility & ReportingIP Level Traffic Reporting with Aggregation Analysis
Past service experience in large-scale events
10 Tbps
Volcano managed to provide up to 10Tbps resources to serve unexpected short burst of traffic due to game version updates and e-commerce promotions
60 seconds
With docker container - any single node can complete resource preparation, IP request, deploy container and programs in 60 seconds
5 minutes
Volcano predict available bandwidth of each node and serve 1Tbps of burst resource in 5 minutes
Plans
Support & Service
Support & ServiceTechnical support team
24 x 7 professional support
Monthly customer-level service reports
Comprehensive and fast response
IM real-time response (QQ/Slack/WeCom)
Call support
E-Mail communication
Online consultation
Case: Game account and lobby accelerationCustomer Background
This customer provides a unified account platform for overseas games e.g. login and lobby features. It is deployed in Singapore to serve players from Europe, America, Middle East, and South America. Customer focus on performance on acceleration, concurrent QPS and WAF protection to provide high quality experience for their overseas players.
Solutions
Feature group: HTTPS Acceleration + WAF + DDoS Protection
EdgeOne handles millions of concurrent QPS requests through global PoPs to allow players connect via EdgeOne dedicated line for dynamic acceleration and optimize latency by 37.5%.
DDoS Protection easily defend against 10 Tbps attack, help customer reduce global security threat.
Managed WAF rules and AI WAF effectively block bad traffic while ensuring zero false positive.
Global Application Acceleration Platform (GAAP) ensure fast and stable gaming and communication for game servers and lobbies.
Case: E-CommerceCustomer Background
This customer is an international e-commerce platform covering Singapore, Malaysia, Philippines, Thailand, Vietnam, Brazil, Mexico, Colombia, Chile, Poland and many more. Award winner of "YouGov 2022 Top 10 Best Brand In The World". It focuses on stability and performance especially during key promotional events.
Solutions
Feature group: HTTPS Dynamic Acceleration + CC + WAF + BOT Protection
EdgeOne provides acceleration for small image, video on demand and product information to achieve request forwarding to regional origins in customer's key business area.
EdgeOne ensures stable business during customer's promotional events e.g. 5.5 and 6.6 where it is able to handle traffic volume peaked at 1.5 Tbps, requests up to 3.59 Million QPS and keep hit rate above 97% in average.
EdgeOne WAF and BOT anti-crawler features mitigated numerous malicious DDoS and CC attacks during promotional events, ensuring stable operation.
产品推荐
海致星图知识图谱分析平台，创建自己的场景图谱、接入或定制行业知识图谱应用，提供服务共享的在线协作方式。提供实时图查询、离线图查询、场景探索等分析能力，支持基于项目与组织的功能和数据权限控制。支持主流大数据平台、图数据库以及查询语言的适配。
极验行为验证4.0利用适应型第四代验证技术让验行为获得更安全的能力，7重动态屏障应对不同的攻击模式，更能单位周期内多达43 74种变化，大幅提升黑产攻击成本较上一代产品，黑产绝对攻击成本最高上升3.714倍。行为验拥有扩展性极强的界面，并兼容所有平台 除此之外，我们为其调试了顺畅自然的动画效果。
黑湖智能工厂建设方案，适配数字生产车间管理与制造企业车间生产管理核心需求。打通生产全流程数据链路，实现设备互联、工序协同、产能监控与质量追溯，赋能工厂数字化转型。助力制造企业降本增效、优化生产排程，是打造智能高效生产车间的专业解决方案。
LKY 蓝客云国际版酒店管理系统，是多语言 PMS 酒店管理优选方案，核心搭载 Channel Manager 功能直连全球 OTA 平台。实现全渠道价格、库存、订单自动同步房态，无需人工录单，客人可自主入住，减少 60% 管理时间。适配多币种结算与海外合规要求，助力酒店民宿高效运营、拓展全球客源。
数字化社区
视频
文章
