创宇信用

非80端口

NS地址

别名

DNS解析

ICP备案

一、使用场景
业务系统已经支持HTTPS协议，但由于绝大部分浏览器默认使用HTTP协议请求导致依然存在很多不安全传输，若希望客户端尽量采用HTTPS安全加密传输，可使用知道创宇“HTTPS强制跳转”功能。
二、功能介绍
该功能开关开启后将对 HTTP请求响应 307 状态码，并重定向到 HTTPS 的地址请求，从而实现HTTP 自动跳转 HTTPS。
三、配置方法
配置入口：<a class="external-link" href="https://defense.yunaq.com/dns/https_page/" rel="nofollow">https://defense.yunaq.com/dns/https_page/</a>，选择需开启HTTPS强制跳转的主机名，HTTPS强制跳转状态按钮选择开启即可。
<img class="aligncenter size-large wp-image-2705" src="http://help.yunaq.com/wp-content/uploads/2021/03/https跳转-1024x260.png" alt="" width="980" height="249" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/https跳转-1024x260.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/03/https跳转-300x76.png 300w, http://help.yunaq.com/wp-content/uploads/2021/03/https跳转-768x195.png 768w, http://help.yunaq.com/wp-content/uploads/2021/03/https跳转-60x15.png 60w, http://help.yunaq.com/wp-content/uploads/2021/03/https跳转-150x38.png 150w" sizes="(max-width: 980px) 100vw, 980px" />
四、注意事项
该功能开启后，源站切勿配置SSL卸载（即HTTPS跳转HTTP），否则云防御将HTTP跳转为HTTPS后，源站再将HTTPS跳转为HTTP，如此反复，形成死循环，从而导致响应异常而报错。

一、使用场景 业务系统已经支持HTTPS协议，但由于绝大部分浏览器默认使用HTTP协议请求导致依然存在很多不安 [&#8230;]

在云防御平台配置HTTPS强制跳转

一、源站访问控制描述
源站访问控制是在源服务器上设置访问控制，只允许云防御IP访问，云防御和源站联动提高防护安全性的方法。
接入知道创宇云防御平台后，经过云防御的攻击知道创宇均会按防御级别拦截，但因源站 IP 在接入前已经暴露过，存在攻击者已经获取到源站 IP 可直接攻击源服务器的风险。因此知道创宇建议如有条件可在接入云防御后将源站服务器 IP 更换为未暴露过的地址，如果不具备变更源站 IP 条件，建议尽量设置访问控制，即仅允许云防御集群 IP 访问源站，最大程度保障源服务器的安全。
二、获取云防御集群IP
知道创宇云防御共有6242个节点集群，每个集群背后均有多台服务器作为支撑，根据节点性能负载情况，知道创宇云防御会不定期为您选择最优节点集群。获取云防御集群IP时可登录云防御控制台，点击购买的产品，下拉框中点击【功能管理】，选择【通用设置】，进入【查看节点IP】中获取。
<img class="aligncenter size-full wp-image-3517" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png" alt="" width="1315" height="139" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png 1315w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-300x32.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-768x81.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-1024x108.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-60x6.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-150x16.png 150w" sizes="(max-width: 1315px) 100vw, 1315px" />
<img class="aligncenter size-full wp-image-3520" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png" alt="" width="782" height="618" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png 782w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-300x237.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-768x607.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-60x47.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-150x119.png 150w" sizes="(max-width: 782px) 100vw, 782px" />
三、配置指导
1. 登录阿里云控制台。
2. 如下图选择【ECS】-&gt;【安全组】-&gt;【安全组列表】，点击对应安全组的【配置规则】。
<img class="aligncenter size-full wp-image-2806" src="http://help.yunaq.com/wp-content/uploads/2021/03/ali1.png" alt="" width="830" height="370" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/ali1.png 830w, http://help.yunaq.com/wp-content/uploads/2021/03/ali1-300x134.png 300w, http://help.yunaq.com/wp-content/uploads/2021/03/ali1-768x342.png 768w, http://help.yunaq.com/wp-content/uploads/2021/03/ali1-60x27.png 60w, http://help.yunaq.com/wp-content/uploads/2021/03/ali1-150x67.png 150w" sizes="(max-width: 830px) 100vw, 830px" />
3. 点击【快速添加】或【手动添加】。
<img class="aligncenter size-full wp-image-2807" src="http://help.yunaq.com/wp-content/uploads/2021/03/ali2.png" alt="" width="830" height="412" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/ali2.png 830w, http://help.yunaq.com/wp-content/uploads/2021/03/ali2-300x149.png 300w, http://help.yunaq.com/wp-content/uploads/2021/03/ali2-768x381.png 768w, http://help.yunaq.com/wp-content/uploads/2021/03/ali2-60x30.png 60w, http://help.yunaq.com/wp-content/uploads/2021/03/ali2-150x74.png 150w" sizes="(max-width: 830px) 100vw, 830px" />
3.1. 【快速添加】配置方法。
<img class="aligncenter size-full wp-image-2808" src="http://help.yunaq.com/wp-content/uploads/2021/03/ali3.png" alt="" width="830" height="544" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/ali3.png 830w, http://help.yunaq.com/wp-content/uploads/2021/03/ali3-300x197.png 300w, http://help.yunaq.com/wp-content/uploads/2021/03/ali3-768x503.png 768w, http://help.yunaq.com/wp-content/uploads/2021/03/ali3-60x39.png 60w, http://help.yunaq.com/wp-content/uploads/2021/03/ali3-150x98.png 150w" sizes="(max-width: 830px) 100vw, 830px" />
3.2. 【手动添加】配置方法。
<img class="aligncenter size-full wp-image-2809" src="http://help.yunaq.com/wp-content/uploads/2021/03/ali4.png" alt="" width="830" height="258" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/ali4.png 830w, http://help.yunaq.com/wp-content/uploads/2021/03/ali4-300x93.png 300w, http://help.yunaq.com/wp-content/uploads/2021/03/ali4-768x239.png 768w, http://help.yunaq.com/wp-content/uploads/2021/03/ali4-60x19.png 60w, http://help.yunaq.com/wp-content/uploads/2021/03/ali4-150x47.png 150w" sizes="(max-width: 830px) 100vw, 830px" />
4. 添加完成后，需要删除默认的“全部允许”规则（参考下图中的示例）。注意，非HTTP协议的端口建议按照原始配置，特别是22、3389等远程控制端口。
<img class="aligncenter size-full wp-image-2810" src="http://help.yunaq.com/wp-content/uploads/2021/03/ali5.png" alt="" width="830" height="116" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/ali5.png 830w, http://help.yunaq.com/wp-content/uploads/2021/03/ali5-300x42.png 300w, http://help.yunaq.com/wp-content/uploads/2021/03/ali5-768x107.png 768w, http://help.yunaq.com/wp-content/uploads/2021/03/ali5-60x8.png 60w, http://help.yunaq.com/wp-content/uploads/2021/03/ali5-150x21.png 150w" sizes="(max-width: 830px) 100vw, 830px" />
注意事项：
    1. 需保障配置访问控制的服务器域名全部接入知道创宇防护体系。
    2. 如遇特殊情况需回源验证，需要将安全组中 0.0.0.0 放行规则添加并生效后再设置回源。
    3. 如有需要直连服务器的接口调用或程序员测试，也需将 IP添加到安全组的白名单中。
    4. ACL 策略只能拦截应用层请求，若源站 IP 已经暴露，网络层面 DDoS 攻击还有直接攻击源站的风险，最好采用更换对外 IP 的方法。
5.验证策略是否生效：即仅Allow的IP地址（云防御节点）可请求成功，其他IP地址均连接超时。
a.修改本地Host文件，指定域名解析到源站IP。
<img class="aligncenter size-full wp-image-3575" src="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png" alt="" width="1043" height="263" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png 1043w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-300x76.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-768x194.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-1024x258.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-60x15.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-150x38.png 150w" sizes="(max-width: 1043px) 100vw, 1043px" />
b.访问该域名时若出现以下报错则策略生效，若可正常访问网站则策略有误，建议核实配置情况。
<img class="aligncenter size-full wp-image-3528" src="http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图.png" alt="" width="1340" height="703" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图.png 1340w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-300x157.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-768x403.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-1024x537.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-60x31.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-150x79.png 150w" sizes="(max-width: 1340px) 100vw, 1340px" />
四、其他服务器
1.常见服务器设置方法可参考：【<a href="http://help.yunaq.com/faq/2801/index.html">IIS</a>】、【<a href="http://help.yunaq.com/faq/3549/index.html">Nginx</a>】、【<a href="http://help.yunaq.com/faq/3543/index.html">Apache</a>】、【<a href="http://help.yunaq.com/faq/3552/index.html">Iptables</a>】、【<a href="http://help.yunaq.com/faq/3562/index.html">Tomcat</a>】、【<a href="http://help.yunaq.com/faq/3615/index.html">腾讯云</a>】。
2.除上述WEB 服务器和防火墙的其他设备建议参考厂商官方指导配置或联系厂商技术支持协助。

一、源站访问控制描述 源站访问控制是在源服务器上设置访问控制，只允许云防御IP访问，云防御和源站联动提高防护安 [&#8230;]

阿里云ECS服务器访问控制设置方法

一、源站访问控制描述
源站访问控制是在源服务器上设置访问控制，只允许云防御IP访问，云防御和源站联动提高防护安全性的方法。
接入知道创宇云防御平台后，经过云防御的攻击知道创宇均会按防御级别拦截，但因源站 IP 在接入前已经暴露过，存在攻击者已经获取到源站 IP 可直接攻击源服务器的风险。因此知道创宇建议如有条件可在接入云防御后将源站服务器 IP 更换为未暴露过的IP地址，如果不具备变更源站 IP 条件，建议尽量设置访问控制，即仅允许云防御集群 IP 访问源站，最大程度保障源服务器的安全。
二、获取云防御集群IP
知道创宇云防御共有6242个节点集群，每个集群背后均有多台服务器作为支撑，根据节点性能负载情况，知道创宇云防御会不定期为您选择最优节点集群。获取云防御集群IP时可登录云防御控制台，点击购买的产品，下拉框中点击【功能管理】，选择【通用设置】，进入【查看节点IP】中获取。
<img class="aligncenter size-full wp-image-3517" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png" alt="" width="1315" height="139" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png 1315w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-300x32.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-768x81.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-1024x108.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-60x6.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-150x16.png 150w" sizes="(max-width: 1315px) 100vw, 1315px" />
<img class="aligncenter size-full wp-image-3520" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png" alt="" width="782" height="618" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png 782w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-300x237.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-768x607.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-60x47.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-150x119.png 150w" sizes="(max-width: 782px) 100vw, 782px" />
三、配置指导
IIS 服务器的访问控制一般在防火墙或 IP 限制模块中进行设置。若有多个网站在使用云防御，建议对接入云防御的业务系统均进行访问控制(这里以 Windows Server 2008 R2 系统上 IIS 的 IP 限制模块为例)。
1.若在安装IIS时，没有安装IP限制模块，需按以下步骤进行安装。
<img class="aligncenter size-full wp-image-3531" src="http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块1.png" alt="" width="1167" height="790" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块1.png 1167w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块1-300x203.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块1-768x520.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块1-1024x693.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块1-60x41.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块1-150x102.png 150w" sizes="(max-width: 1167px) 100vw, 1167px" />
<img class="aligncenter size-full wp-image-3532" src="http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块2.png" alt="" width="1098" height="813" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块2.png 1098w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块2-300x222.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块2-768x569.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块2-1024x758.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块2-60x44.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块2-150x111.png 150w" sizes="(max-width: 1098px) 100vw, 1098px" />
<img class="aligncenter size-full wp-image-3533" src="http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块3.png" alt="" width="1099" height="829" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块3.png 1099w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块3-300x226.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块3-768x579.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块3-1024x772.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块3-60x45.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS安装IP限制模块3-150x113.png 150w" sizes="(max-width: 1099px) 100vw, 1099px" />
2.安装完成后，打开 IIS 设置界面，选择【IPv4 地址和域限制】。
<img class="aligncenter size-full wp-image-3534" src="http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源1.png" alt="" width="1106" height="782" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源1.png 1106w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源1-300x212.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源1-768x543.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源1-1024x724.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源1-60x42.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源1-150x106.png 150w" sizes="(max-width: 1106px) 100vw, 1106px" />
3. 点击【添加允许条目】，设置允许访问的 IP。
<img class="aligncenter size-full wp-image-3535" src="http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源2.png" alt="" width="1102" height="701" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源2.png 1102w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源2-300x191.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源2-768x489.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源2-1024x651.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源2-60x38.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源2-150x95.png 150w" sizes="(max-width: 1102px) 100vw, 1102px" />
4.点击【编辑功能设置】，将“未指定的客户端访问权”设置为“拒绝”。
<img class="aligncenter size-full wp-image-3538" src="http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源3.png" alt="" width="1377" height="740" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源3.png 1377w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源3-300x161.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源3-768x413.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源3-1024x550.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源3-60x32.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS配置限源3-150x81.png 150w" sizes="(max-width: 1377px) 100vw, 1377px" />
5.验证策略是否生效：即仅允许的IP地址（云防御节点）可请求成功，其他地址均返回403拒绝。
a.修改本地Host文件，指定域名解析到源站IP。
<img class="aligncenter size-full wp-image-3575" src="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png" alt="" width="1043" height="263" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png 1043w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-300x76.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-768x194.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-1024x258.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-60x15.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-150x38.png 150w" sizes="(max-width: 1043px) 100vw, 1043px" />
b.访问该域名时若出现以下报错则策略生效，若可正常访问网站则策略有误，建议核实配置情况。
<img class="aligncenter size-full wp-image-3539" src="http://help.yunaq.com/wp-content/uploads/2021/07/IIS限源效果图.png" alt="" width="1715" height="769" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/IIS限源效果图.png 1715w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS限源效果图-300x135.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS限源效果图-768x344.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS限源效果图-1024x459.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS限源效果图-60x27.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/IIS限源效果图-150x67.png 150w" sizes="(max-width: 1715px) 100vw, 1715px" />
四、其他服务器
1.常见服务器设置方法可参考：【<a href="http://help.yunaq.com/faq/3549/index.html">Nginx</a>】、【<a href="http://help.yunaq.com/faq/3562/index.html">Tomcat</a>】、【<a href="http://help.yunaq.com/faq/3543/index.html">Apache</a>】、【<a href="http://help.yunaq.com/faq/3552/index.html">Iptables</a>】、【<a href="http://help.yunaq.com/faq/3566/index.html">阿里云</a>】、【<a href="http://help.yunaq.com/faq/3615/index.html">腾讯云</a>】。
2.除上述WEB 服务器和防火墙的其他设备建议参考厂商官方指导配置或联系厂商技术支持协助。

IIS服务器访问控制设置方法

一、源站访问控制描述
源站访问控制是在源服务器上设置访问控制，只允许云防御IP访问，云防御和源站联动提高防护安全性的方法。
接入知道创宇云防御平台后，经过云防御的攻击知道创宇均会按防御级别拦截，但因源站 IP 在接入前已经暴露过，存在攻击者已经获取到源站 IP 可直接攻击源服务器的风险。因此知道创宇建议如有条件可在接入云防御后将源站服务器 IP 更换为未暴露过的IP地址，如果不具备变更源站 IP 条件，建议尽量设置访问控制，即仅允许云防御集群 IP 访问源站，最大程度保障源服务器的安全。
二、获取云防御集群IP
知道创宇云防御共有6242个节点集群，每个集群背后均有多台服务器作为支撑，根据节点性能负载情况，知道创宇云防御会不定期为您选择最优节点集群。获取云防御集群IP时可登录云防御控制台，点击购买的产品，下拉框中点击【功能管理】，选择【通用设置】，进入【查看节点IP】中获取。
<img class="aligncenter size-full wp-image-3517" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png" alt="" width="1315" height="139" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png 1315w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-300x32.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-768x81.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-1024x108.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-60x6.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-150x16.png 150w" sizes="(max-width: 1315px) 100vw, 1315px" />
<img class="aligncenter size-full wp-image-3520" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png" alt="" width="782" height="618" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png 782w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-300x237.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-768x607.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-60x47.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-150x119.png 150w" sizes="(max-width: 782px) 100vw, 782px" />
三、配置指导
Iptabels 是与 Linux 内核集成的包过滤防火墙系统，几乎所有的 Linux 发行版本都会包含 Iptables 的功能。Iptabels 配置简单，推荐首选在 Iptabels 中配置。
1.配置示例：
假设 WEB 服务监听端口为 80，使用以下命令对 80 端口进行访问限制， 其他端口类似。
<blockquote>
iptables -I INPUT -p tcp –dport 80 -j DROP
iptables -I INPUT -p tcp -s 1.1.1.0/24 -p tcp –-dport 80 -j ACCEPT
iptables -I INPUT -p tcp -s 2.2.2.0/24 -p tcp –-dport 80 -j ACCEPT
</blockquote>
<img class="aligncenter size-full wp-image-3526" src="http://help.yunaq.com/wp-content/uploads/2021/07/Iptables配置限源.png" alt="" width="1738" height="201" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/Iptables配置限源.png 1738w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables配置限源-300x35.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables配置限源-768x89.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables配置限源-1024x118.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables配置限源-60x7.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables配置限源-150x17.png 150w" sizes="(max-width: 1738px) 100vw, 1738px" />
2.策略核实：执行 iptables -L -n 命令，检查策略是否设置成功。
<img class="aligncenter size-full wp-image-3527" src="http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源配置检查.png" alt="" width="1792" height="498" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源配置检查.png 1792w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源配置检查-300x83.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源配置检查-768x213.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源配置检查-1024x285.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源配置检查-60x17.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源配置检查-150x42.png 150w" sizes="(max-width: 1792px) 100vw, 1792px" />
3.验证策略是否生效：即仅ACCEPT的IP地址（云防御节点）可请求成功，其他地址均连接超时。
a.修改本地Host文件，指定域名解析到源站IP。
<img class="aligncenter size-full wp-image-3575" src="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png" alt="" width="1043" height="263" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png 1043w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-300x76.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-768x194.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-1024x258.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-60x15.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-150x38.png 150w" sizes="(max-width: 1043px) 100vw, 1043px" />
b.访问该域名时若出现以下报错则策略生效，若可正常访问网站则策略有误，建议核实配置情况。
<img class="aligncenter size-full wp-image-3528" src="http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图.png" alt="" width="1340" height="703" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图.png 1340w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-300x157.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-768x403.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-1024x537.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-60x31.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-150x79.png 150w" sizes="(max-width: 1340px) 100vw, 1340px" />
四、其他服务器
1.常见服务器设置方法可参考：【<a href="http://help.yunaq.com/faq/2801/index.html">IIS</a>】、【<a href="http://help.yunaq.com/faq/3549/index.html">Nginx</a>】、【<a href="http://help.yunaq.com/faq/3562/index.html">Tomcat</a>】、【<a href="http://help.yunaq.com/faq/3543/index.html">Apache</a>】、【<a href="http://help.yunaq.com/faq/3566/index.html">阿里云</a>】、【<a href="http://help.yunaq.com/faq/3615/index.html">腾讯云</a>】。
2.除上述WEB 服务器和防火墙的其他设备建议参考厂商官方指导配置或联系厂商技术支持协助。

Iptables防火墙访问控制设置方法

一、源站访问控制描述
源站访问控制是在源服务器上设置访问控制，只允许云防御IP访问，云防御和源站联动提高防护安全性的方法。
接入知道创宇云防御平台后，经过云防御的攻击知道创宇均会按防御级别拦截，但因源站 IP 在接入前已经暴露过，存在攻击者已经获取到源站 IP 可直接攻击源服务器的风险。因此知道创宇建议如有条件可在接入云防御后将源站服务器 IP 更换为未暴露过的IP地址，如果不具备变更源站 IP 条件，建议尽量设置访问控制，即仅允许云防御集群 IP 访问源站，最大程度保障源服务器的安全。
二、获取云防御集群IP
知道创宇云防御共有6242个节点集群，每个集群背后均有多台服务器作为支撑，根据节点性能负载情况，知道创宇云防御会不定期为您选择最优节点集群。获取云防御集群IP时可登录云防御控制台，点击购买的产品，下拉框中点击【功能管理】，选择【通用设置】，进入【查看节点IP】中获取。
<img class="aligncenter size-full wp-image-3517" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png" alt="" width="1315" height="139" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png 1315w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-300x32.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-768x81.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-1024x108.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-60x6.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-150x16.png 150w" sizes="(max-width: 1315px) 100vw, 1315px" />
<img class="aligncenter size-full wp-image-3520" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png" alt="" width="782" height="618" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png 782w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-300x237.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-768x607.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-60x47.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-150x119.png 150w" sizes="(max-width: 782px) 100vw, 782px" />
三、配置指导
1. 登录腾讯云控制台。
2. 如下图，从所有产品中选择“云服务器”。 
<img class="aligncenter size-full wp-image-2811" src="http://help.yunaq.com/wp-content/uploads/2021/03/tx1.png" alt="" width="830" height="432" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/tx1.png 830w, http://help.yunaq.com/wp-content/uploads/2021/03/tx1-300x156.png 300w, http://help.yunaq.com/wp-content/uploads/2021/03/tx1-768x400.png 768w, http://help.yunaq.com/wp-content/uploads/2021/03/tx1-60x31.png 60w, http://help.yunaq.com/wp-content/uploads/2021/03/tx1-150x78.png 150w" sizes="(max-width: 830px) 100vw, 830px" />
3. 如下图进入对应实例的安全组配置页面。
<img class="aligncenter size-full wp-image-3617" src="http://help.yunaq.com/wp-content/uploads/2021/08/腾讯云配置限源2.png" alt="" width="1134" height="445" srcset="http://help.yunaq.com/wp-content/uploads/2021/08/腾讯云配置限源2.png 1134w, http://help.yunaq.com/wp-content/uploads/2021/08/腾讯云配置限源2-300x118.png 300w, http://help.yunaq.com/wp-content/uploads/2021/08/腾讯云配置限源2-768x301.png 768w, http://help.yunaq.com/wp-content/uploads/2021/08/腾讯云配置限源2-1024x402.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/08/腾讯云配置限源2-60x24.png 60w, http://help.yunaq.com/wp-content/uploads/2021/08/腾讯云配置限源2-150x59.png 150w" sizes="(max-width: 1134px) 100vw, 1134px" />
4. 点击要配置安全组的名称。
<img class="aligncenter size-full wp-image-2813" src="http://help.yunaq.com/wp-content/uploads/2021/03/tx3.png" alt="" width="830" height="546" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/tx3.png 830w, http://help.yunaq.com/wp-content/uploads/2021/03/tx3-300x197.png 300w, http://help.yunaq.com/wp-content/uploads/2021/03/tx3-768x505.png 768w, http://help.yunaq.com/wp-content/uploads/2021/03/tx3-60x39.png 60w, http://help.yunaq.com/wp-content/uploads/2021/03/tx3-150x99.png 150w" sizes="(max-width: 830px) 100vw, 830px" />
5. 进入安全组配置页面。
<img class="aligncenter size-full wp-image-2814" src="http://help.yunaq.com/wp-content/uploads/2021/03/tx4.png" alt="" width="830" height="416" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/tx4.png 830w, http://help.yunaq.com/wp-content/uploads/2021/03/tx4-300x150.png 300w, http://help.yunaq.com/wp-content/uploads/2021/03/tx4-768x385.png 768w, http://help.yunaq.com/wp-content/uploads/2021/03/tx4-60x30.png 60w, http://help.yunaq.com/wp-content/uploads/2021/03/tx4-150x75.png 150w" sizes="(max-width: 830px) 100vw, 830px" />
6. 添加规则，设置允许云防御所有的IP段访问。
<img class="aligncenter size-full wp-image-2815" src="http://help.yunaq.com/wp-content/uploads/2021/03/tx5.png" alt="" width="832" height="334" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/tx5.png 832w, http://help.yunaq.com/wp-content/uploads/2021/03/tx5-300x120.png 300w, http://help.yunaq.com/wp-content/uploads/2021/03/tx5-768x308.png 768w, http://help.yunaq.com/wp-content/uploads/2021/03/tx5-60x24.png 60w, http://help.yunaq.com/wp-content/uploads/2021/03/tx5-150x60.png 150w" sizes="(max-width: 832px) 100vw, 832px" />
7. 添加完成后，删除默认的“全部允许”规则。
注意：非HTTP协议的端口建议按照原始配置，特别是22、3389等远程控制端口，否则会影响管理员远程控制服务器。
8.验证策略是否生效：即仅Allow的IP地址（云防御节点）可请求成功，其他地址均连接超时。
a.修改本地Host文件，指定域名解析到源站IP。
<img class="aligncenter size-full wp-image-3575" src="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png" alt="" width="1043" height="263" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png 1043w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-300x76.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-768x194.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-1024x258.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-60x15.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-150x38.png 150w" sizes="(max-width: 1043px) 100vw, 1043px" />
b.访问该域名时若出现以下报错则策略生效，若可正常访问网站则策略有误，建议核实配置情况。
<img class="aligncenter size-full wp-image-3528" src="http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图.png" alt="" width="1340" height="703" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图.png 1340w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-300x157.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-768x403.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-1024x537.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-60x31.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/Iptables限源效果图-150x79.png 150w" sizes="(max-width: 1340px) 100vw, 1340px" />
四、其他服务器
1.常见服务器设置方法可参考：【<a href="http://help.yunaq.com/faq/2801/index.html">IIS</a>】、【<a href="http://help.yunaq.com/faq/3543/index.html">Apache</a>】、【<a href="http://help.yunaq.com/faq/3552/index.html">Iptables</a>】、【<a href="http://help.yunaq.com/faq/3562/index.html">Tomcat</a>】、【<a href="http://help.yunaq.com/faq/3549/index.html">Nginx</a>】、【<a href="http://help.yunaq.com/faq/3566/index.html">阿里云</a>】。
2.除上述WEB 服务器和防火墙的其他设备建议参考厂商官方指导配置或联系厂商技术支持协助。

腾讯云服务器访问控制设置方法

一、源站访问控制描述
源站访问控制是在源测防护设备或服务器上设置访问控制，只允许云防御IP访问，云防御和源站联动提高防护安全性的方法。
接入知道创宇云防御平台后，经过云防御的攻击知道创宇均会按防御级别拦截，但因源站 IP 在接入前已经暴露过，存在攻击者已经获取到源站 IP 可直接攻击源服务器的风险。因此知道创宇建议如有条件可在接入云防御后将源站服务器 IP 更换为未暴露过的IP地址，如果不具备变更源站 IP 条件，建议尽量设置访问控制，即仅允许云防御集群 IP 访问源站，最大程度保障源服务器的安全。
二、获取云防御集群IP
知道创宇云防御共有6242个节点集群，每个集群背后均有多台服务器作为支撑，根据节点性能负载情况，知道创宇云防御会不定期为您选择最优节点集群。获取云防御集群IP时可登录云防御控制台，点击购买的产品，下拉框中点击【功能管理】，选择【通用设置】，进入【查看节点IP】中获取。
<img class="aligncenter size-full wp-image-3517" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png" alt="" width="1315" height="139" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png 1315w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-300x32.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-768x81.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-1024x108.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-60x6.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-150x16.png 150w" sizes="(max-width: 1315px) 100vw, 1315px" />
<img class="aligncenter size-full wp-image-3520" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png" alt="" width="782" height="618" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png 782w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-300x237.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-768x607.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-60x47.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-150x119.png 150w" sizes="(max-width: 782px) 100vw, 782px" />
三、配置指导
当服务器只有一个站点时，修改Nginx配置目录下的nginx.conf，当服务器提供多个网站服务时，修改Nginx配置目录下的conf.d/具体网站配置文件.conf，修改时建议先与网站管理员核实配置文件。
1.配置示例：
在Nginx配置文件的server区域中配置，比如云防御的节点有两组，分别是 1.1.1.0 ~ 1.1.1.255和2.2.2.0 ~ 2.2.2.255，那么配置allow 1.1.1.0/24就代表对整个IP段允许访问，而deny all代表除以上允许的IP范围外均不允许访问。
<blockquote>
server {
listen 80;
server_name localhost;
&#8230;&#8230;.
allow 1.1.1.0/24;
allow 2.2.2.0/24;
allow ***.***.***.0/24;
deny all;
}
</blockquote>
<img class="aligncenter size-full wp-image-3524" src="http://help.yunaq.com/wp-content/uploads/2021/07/Nginx配置限源.png" alt="" width="1303" height="558" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/Nginx配置限源.png 1303w, http://help.yunaq.com/wp-content/uploads/2021/07/Nginx配置限源-300x128.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/Nginx配置限源-768x329.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/Nginx配置限源-1024x439.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/Nginx配置限源-60x26.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/Nginx配置限源-150x64.png 150w" sizes="(max-width: 1303px) 100vw, 1303px" />
注意：设置时，节点IP请以云防御官网公布的最新IP为准，设置完成后，重启Nginx生效。
2.验证策略是否生效：即仅Allow的IP地址（云防御节点）可请求成功，其他地址均返回403拒绝。
a.修改本地Host文件，指定域名解析到源站IP。
<img class="aligncenter size-full wp-image-3575" src="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png" alt="" width="1043" height="263" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png 1043w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-300x76.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-768x194.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-1024x258.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-60x15.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-150x38.png 150w" sizes="(max-width: 1043px) 100vw, 1043px" />
b.访问该域名时若出现以下报错则策略生效，若可正常访问网站则策略有误，建议核实配置情况。<img class="aligncenter size-full wp-image-3525" src="http://help.yunaq.com/wp-content/uploads/2021/07/Nginx限源效果图.png" alt="" width="1798" height="554" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/Nginx限源效果图.png 1798w, http://help.yunaq.com/wp-content/uploads/2021/07/Nginx限源效果图-300x92.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/Nginx限源效果图-768x237.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/Nginx限源效果图-1024x316.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/Nginx限源效果图-60x18.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/Nginx限源效果图-150x46.png 150w" sizes="(max-width: 1798px) 100vw, 1798px" />
四、其他服务器
1.常见服务器设置方法可参考：【<a href="http://help.yunaq.com/faq/2801/index.html">IIS</a>】、【<a href="http://help.yunaq.com/faq/3543/index.html">Apache</a>】、【<a href="http://help.yunaq.com/faq/3552/index.html">Iptables</a>】、【<a href="http://help.yunaq.com/faq/3562/index.html">Tomcat</a>】、【<a href="http://help.yunaq.com/faq/3566/index.html">阿里云</a>】、【<a href="http://help.yunaq.com/faq/3615/index.html">腾讯云</a>】。
2.除上述WEB 服务器和防火墙的其他设备建议参考厂商官方指导配置或联系厂商技术支持协助。

一、源站访问控制描述 源站访问控制是在源测防护设备或服务器上设置访问控制，只允许云防御IP访问，云防御和源站联 [&#8230;]

Nginx Web服务器访问控制设置方法

一、源站访问控制描述
源站访问控制是在源服务器上设置访问控制，只允许云防御IP访问，云防御和源站联动提高防护安全性的方法。
接入知道创宇云防御平台后，经过云防御的攻击知道创宇均会按防御级别拦截，但因源站 IP 在接入前已经暴露过，存在攻击者已经获取到源站 IP 可直接攻击源服务器的风险。因此知道创宇建议如有条件可在接入云防御后将源站服务器 IP 更换为未暴露过的IP地址，如果不具备变更源站 IP 条件，建议尽量设置访问控制，即仅允许云防御集群 IP 访问源站，最大程度保障源服务器的安全。
二、获取云防御集群IP
知道创宇云防御共有6242个节点集群，每个集群背后均有多台服务器作为支撑，根据节点性能负载情况，知道创宇云防御会不定期为您选择最优节点集群。获取云防御集群IP时可登录云防御控制台，点击购买的产品，下拉框中点击【功能管理】，选择【通用设置】，进入【查看节点IP】中获取。
<img class="aligncenter size-full wp-image-3517" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png" alt="" width="1315" height="139" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png 1315w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-300x32.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-768x81.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-1024x108.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-60x6.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-150x16.png 150w" sizes="(max-width: 1315px) 100vw, 1315px" />
<img class="aligncenter size-full wp-image-3520" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png" alt="" width="782" height="618" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png 782w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-300x237.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-768x607.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-60x47.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-150x119.png 150w" sizes="(max-width: 782px) 100vw, 782px" />
三、配置指导
通常修改站点配置文件/etc/httpd/conf/httpd.conf，如果网站配置在其它目录或文件中，修改时需与网站管理员核实,以对应配置文件情况为准。
1.配置示例：
在Apache配置文件中找到对应网站的配置，并搜索文件中是否存在Order deny，Allow，若不存在可重新创建配置内容，若存在直接修改即可。
比如云防御的节点组有两组，分别是 1.1.1.0 ~ 1.1.1.255和2.2.2.0 ~ 2.2.2.255，那么配置allow from 1.1.1.0/24就代表允许整个IP地址C段访问，而deny from all代表除以上外，对其它IP地址均不允许访问。
<blockquote>
&lt;Directory  “您的网站根目录路径”&gt;
Options Indexes FollowSymLinks
AllowOverride None
Order deny,allow
Allow from 1.1.1.0/24
Allow from 2.2.2.0/24
Deny from All
&lt;/Directory&gt;
</blockquote>
<img class="aligncenter size-full wp-image-3522" src="http://help.yunaq.com/wp-content/uploads/2021/07/Apache配置限源.png" alt="" width="1549" height="560" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/Apache配置限源.png 1549w, http://help.yunaq.com/wp-content/uploads/2021/07/Apache配置限源-300x108.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/Apache配置限源-768x278.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/Apache配置限源-1024x370.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/Apache配置限源-60x22.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/Apache配置限源-150x54.png 150w" sizes="(max-width: 1549px) 100vw, 1549px" />
注意：设置时，节点IP请以云防御官网公布的最新节点IP为准，并将上面的网站根目录路径修改为实际路径，设置完成后，重启Apache生效。
2.验证策略是否生效：仅Allow的IP地址（云防御节点）可请求成功，其他IP地址请求均返回403拒绝。
a.修改本地Host文件，指定域名解析到源站IP。
<img class="aligncenter size-full wp-image-3575" src="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png" alt="" width="1043" height="263" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png 1043w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-300x76.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-768x194.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-1024x258.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-60x15.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-150x38.png 150w" sizes="(max-width: 1043px) 100vw, 1043px" />
b.访问该域名时若出现以下报错则策略生效，若可正常访问网站则策略有误，建议核实配置情况。
<img class="aligncenter size-full wp-image-3523" src="http://help.yunaq.com/wp-content/uploads/2021/07/Apache限源效果图.png" alt="" width="1484" height="550" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/Apache限源效果图.png 1484w, http://help.yunaq.com/wp-content/uploads/2021/07/Apache限源效果图-300x111.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/Apache限源效果图-768x285.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/Apache限源效果图-1024x380.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/Apache限源效果图-60x22.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/Apache限源效果图-150x56.png 150w" sizes="(max-width: 1484px) 100vw, 1484px" />
四、其他服务器
1.常见服务器设置方法可参考：【<a href="http://help.yunaq.com/faq/2801/index.html">IIS</a>】、【<a href="http://help.yunaq.com/faq/3549/index.html">Nginx</a>】、【<a href="http://help.yunaq.com/faq/3552/index.html">Iptables</a>】、【<a href="http://help.yunaq.com/faq/3562/index.html">Tomcat</a>】、【<a href="http://help.yunaq.com/faq/3566/index.html">阿里云</a>】、【<a href="http://help.yunaq.com/faq/3615/index.html">腾讯云</a>】。
2.除上述WEB 服务器和防火墙的其他设备建议参考厂商官方指导配置或联系厂商技术支持协助。

Apache Web服务器访问控制设置方法

一、源站访问控制描述
源站访问控制是在源服务器上设置访问控制，只允许云防御IP访问，云防御和源站联动提高防护安全性的方法。
接入知道创宇云防御平台后，经过云防御的攻击知道创宇均会按防御级别拦截，但因源站 IP 在接入前已经暴露过，存在攻击者已经获取到源站 IP 可直接攻击源服务器的风险。因此知道创宇建议如有条件可在接入云防御后将源站服务器 IP 更换为未暴露过的IP地址，如果不具备变更源站 IP 条件，建议尽量设置访问控制，即仅允许云防御集群 IP 访问源站，最大程度保障源服务器的安全。
二、获取云防御集群IP
知道创宇云防御共有6242个节点集群，每个集群背后均有多台服务器作为支撑，根据节点性能负载情况，知道创宇云防御会不定期为您选择最优节点集群。获取云防御集群IP时可登录云防御控制台，点击购买的产品，下拉框中点击【功能管理】，选择【通用设置】，进入【查看节点IP】中获取。
<img class="aligncenter size-full wp-image-3517" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png" alt="" width="1315" height="139" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板.png 1315w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-300x32.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-768x81.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-1024x108.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-60x6.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP面板-150x16.png 150w" sizes="(max-width: 1315px) 100vw, 1315px" />
<img class="aligncenter size-full wp-image-3520" src="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png" alt="" width="782" height="618" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP.png 782w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-300x237.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-768x607.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-60x47.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/查看节点IP-150x119.png 150w" sizes="(max-width: 782px) 100vw, 782px" />
三、配置指导
编辑Tomcat配置文件conf目录下的server.xml，在HOST部分进行设置(全局生效)。添加配置样例如下，另不同 Tomcat 版本分割符号可能有差异，如以 “|”分隔未生效，可尝试“,”分隔或查看官方配置说明。
1.配置示例：
<blockquote>
&lt;Host &#8230;&#8230;
&#8230;&#8230;
&lt;Valve className=&#8217;org.apache.catalina.valves.RemoteAddrValve&#8221;
allow=&#8221;117.21.219.*|113.107.238.*|&#8230;.&#8221; deny=&#8221;&#8221;/&gt;
&#8230;&#8230;
&lt;/Host&gt;
</blockquote>
<img class="aligncenter size-full wp-image-3529" src="http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源.png" alt="" width="1722" height="557" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源.png 1722w, http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源-300x97.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源-768x248.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源-1024x331.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源-60x19.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源-150x49.png 150w" sizes="(max-width: 1722px) 100vw, 1722px" />
注意：实际设置时，节点IP请以云防御官网公布的实际节点IP为准，设置完成后，重启Tomcat生效。
2.验证策略是否生效：即仅Allow的IP地址（云防护节点）可直接请求源站成功，其他地址均返回403拒绝。
a.修改本地Host文件，指定域名解析到源站IP。
<img class="aligncenter size-full wp-image-3575" src="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png" alt="" width="1043" height="263" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源.png 1043w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-300x76.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-768x194.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-1024x258.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-60x15.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/绑host测试限源-150x38.png 150w" sizes="(max-width: 1043px) 100vw, 1043px" />
b.访问该域名时若出现以下报错则策略生效，若可正常访问网站则策略有误，建议核实配置情况。
<img class="aligncenter size-full wp-image-3530" src="http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源效果图.png" alt="" width="1422" height="746" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源效果图.png 1422w, http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源效果图-300x157.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源效果图-768x403.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源效果图-1024x537.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源效果图-60x31.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/Tomact配置限源效果图-150x79.png 150w" sizes="(max-width: 1422px) 100vw, 1422px" />
四、其他服务器
1.常见服务器设置方法可参考：【<a href="http://help.yunaq.com/faq/2801/index.html">IIS</a>】、【<a href="http://help.yunaq.com/faq/3549/index.html">Ngin</a>x】、【<a href="http://help.yunaq.com/faq/3543/index.html">Apache</a>】、【<a href="http://help.yunaq.com/faq/3552/index.html">Iptables</a>】、【<a href="http://help.yunaq.com/faq/3566/index.html">阿里云</a>】、【<a href="http://help.yunaq.com/faq/3615/index.html">腾讯云</a>】。
2.除上述WEB 服务器和防火墙的其他设备建议参考厂商官方指导配置或联系厂商技术支持协助。

Tomcat Web服务器访问控制设置方法

一、NS接入方式介绍
NS接入方式是指将域名解析完全托管到知道创宇云防御平台的方式，知道创宇除了提供安全加速服务外，还提供完整的DNS智能解析、DNS抗DDoS服务，接入后，需要用户将该域名的所有子域名均迁移到云防御平台进行解析，需要防御的站点使用云端模式，不需要防御的站点使用回源模式。
二、添加域名入口
登陆后进入【域名管理】-【域名列表】-【添加域名】， 也可通过<a class="external-link" href="https://defense.yunaq.com/site/list/?f=s" rel="nofollow">https://defense.yunaq.com/site/list/?f=s</a> 直接进入。
三、接入操作步骤
1、输入根域名（如：要接入的域名为：www.example.com，则根域名为：example.com），选择“NS方式接入”，点击【添加域名】。
<img class="aligncenter size-full wp-image-3323" src="http://help.yunaq.com/wp-content/uploads/2021/07/NS接入方式.png" alt="" width="1355" height="659" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/NS接入方式.png 1355w, http://help.yunaq.com/wp-content/uploads/2021/07/NS接入方式-300x146.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/NS接入方式-768x374.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/NS接入方式-1024x498.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/NS接入方式-60x29.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/NS接入方式-150x73.png 150w" sizes="(max-width: 1355px) 100vw, 1355px" />
2、点击【完成向导】，进入子域名列表。点击【添加子域名】，支持单个添加和批量添加两种方式。
注：a.云防御平台支持泛域名接入，即在主机名处填写 * ；
        b.若要添加根域名（如：example.com），主机名需填写 @ 。
<img class="aligncenter size-full wp-image-3324" src="http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-29-24.png" alt="" width="2402" height="474" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-29-24.png 2402w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-29-24-300x59.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-29-24-768x152.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-29-24-1024x202.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-29-24-60x12.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-29-24-150x30.png 150w" sizes="(max-width: 2402px) 100vw, 2402px" />
<img class="aligncenter size-full wp-image-3644" src="http://help.yunaq.com/wp-content/uploads/2021/07/cname接入-完成向导-添加子域名.png" alt="" width="1711" height="384" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/cname接入-完成向导-添加子域名.png 1711w, http://help.yunaq.com/wp-content/uploads/2021/07/cname接入-完成向导-添加子域名-300x67.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/cname接入-完成向导-添加子域名-768x172.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/cname接入-完成向导-添加子域名-1024x230.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/cname接入-完成向导-添加子域名-60x13.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/cname接入-完成向导-添加子域名-150x34.png 150w" sizes="(max-width: 1711px) 100vw, 1711px" />
2.1.单个添加。
在添加子域名弹窗中，填写准确的子域名信息，若对所要填写的部分有疑问，可点击”？”查看说明，添加完成后可以在列表右侧的【设置】修改域名信息。
注：a.云防御平台支持泛域名接入，即在主机名处填写 * 。
b.若要添加根域名，主机名填写 @ 。
<img class="size-full wp-image-2662 aligncenter" src="http://help.yunaq.com/wp-content/uploads/2021/03/3.jpg" alt="" width="658" height="560" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/3.jpg 658w, http://help.yunaq.com/wp-content/uploads/2021/03/3-300x255.jpg 300w, http://help.yunaq.com/wp-content/uploads/2021/03/3-60x51.jpg 60w, http://help.yunaq.com/wp-content/uploads/2021/03/3-150x128.jpg 150w" sizes="(max-width: 658px) 100vw, 658px" />
2.2. 批量添加。
点击【批量添加】按钮，进入批量添加页面（若已存在子域名配置，可将现有配置导出至本地进行补充后再上传），添加完成后点击【继续导入】，则回到第一步选择文件上传，点击【域名列表】则回到域名列表页面。
<img class="size-large wp-image-2664 aligncenter" src="http://help.yunaq.com/wp-content/uploads/2021/03/1-1024x249.jpg" alt="" width="980" height="238" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/1-1024x249.jpg 1024w, http://help.yunaq.com/wp-content/uploads/2021/03/1-300x73.jpg 300w, http://help.yunaq.com/wp-content/uploads/2021/03/1-768x187.jpg 768w, http://help.yunaq.com/wp-content/uploads/2021/03/1-60x15.jpg 60w, http://help.yunaq.com/wp-content/uploads/2021/03/1-150x36.jpg 150w" sizes="(max-width: 980px) 100vw, 980px" />
3、添加完成后，点击【下一步，DNS切换】，按照提示修改DNS服务器地址，修改完成点击【立即接入】。
<img class="aligncenter size-full wp-image-3325" src="http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-30-40.png" alt="" width="2440" height="1070" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-30-40.png 2440w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-30-40-300x132.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-30-40-768x337.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-30-40-1024x449.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-30-40-60x26.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-30-40-150x66.png 150w" sizes="(max-width: 2440px) 100vw, 2440px" />
<img class="aligncenter size-full wp-image-3326" src="http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-31-51.png" alt="" width="2286" height="1148" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-31-51.png 2286w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-31-51-300x151.png 300w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-31-51-768x386.png 768w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-31-51-1024x514.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-31-51-60x30.png 60w, http://help.yunaq.com/wp-content/uploads/2021/07/image2021-3-22_16-31-51-150x75.png 150w" sizes="(max-width: 2286px) 100vw, 2286px" />
4、登陆域名解析服务商管理页修改NS记录为知道创宇的NS服务器地址。
腾讯云修改DNS解析可参考：<a href="http://help.yunaq.com/faq/2761/index.html">http://help.yunaq.com/faq/2761/index.html</a>；
阿里云修改DNS解析可参考： <a href="http://help.yunaq.com/faq/2751/index.html">http://help.yunaq.com/faq/2751/index.html</a>；
其他厂商建议参考官方指导配置：【<a href="http://www.xinnet.com/service/cjwt/domain/guanli/1164.html">新华xinnet</a>】、【<a href="https://sg.godaddy.com/zh/help/domains-1000003#nav-7">Godaddy</a>】、【<a href="https://help.now.cn/domain/">时代互联</a>】、【<a href="https://www.22.cn/service_20.html">爱名网</a>】、【<a href="http://www.com.top/productfaq/post/90.html">中国数据</a>】、【<a href="https://help.zzy.cn/">中资源</a>】、【<a href="https://www.west.cn/customercenter/">西部数码</a>】、【<a href="https://www.bizcn.com/show/faq/index.do">商务中国</a>】、【<a href="https://help.ename.cn/">易名</a>】。
5、验证域名是否接入成功可参考：<a href="http://help.yunaq.com/faq/2780/index.html">http://help.yunaq.com/faq/2780/index.html</a>。

一、NS接入方式介绍 NS接入方式是指将域名解析完全托管到知道创宇云防御平台的方式，知道创宇除了提供安全加速服 [&#8230;]

知道创宇云防御NS方式接入操作指导

在阿里云切换NS服务器为云防御DNS服务器的步骤如下：
1、登录阿里云域名管理控制台，在域名列表中定位目标域名，单击操作列表下的【管理】，进入基本信息页面。
<img class="aligncenter size-large wp-image-2752" src="http://help.yunaq.com/wp-content/uploads/2021/03/a1-1-1024x317.png" alt="" width="980" height="303" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/a1-1-1024x317.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/03/a1-1-300x93.png 300w, http://help.yunaq.com/wp-content/uploads/2021/03/a1-1-768x238.png 768w, http://help.yunaq.com/wp-content/uploads/2021/03/a1-1-60x19.png 60w, http://help.yunaq.com/wp-content/uploads/2021/03/a1-1-150x46.png 150w, http://help.yunaq.com/wp-content/uploads/2021/03/a1-1.png 1199w" sizes="(max-width: 980px) 100vw, 980px" />
2、在左侧导航栏中，单击【DNS修改】进入DNS修改页面，点击右上角的【修改DNS服务器】。
<img class="aligncenter wp-image-3166" src="http://help.yunaq.com/wp-content/uploads/2021/03/阿里云修改dns.png" alt="" width="1300" height="256" srcset="http://help.yunaq.com/wp-content/uploads/2021/03/阿里云修改dns.png 1913w, http://help.yunaq.com/wp-content/uploads/2021/03/阿里云修改dns-300x59.png 300w, http://help.yunaq.com/wp-content/uploads/2021/03/阿里云修改dns-768x151.png 768w, http://help.yunaq.com/wp-content/uploads/2021/03/阿里云修改dns-1024x201.png 1024w, http://help.yunaq.com/wp-content/uploads/2021/03/阿里云修改dns-60x12.png 60w, http://help.yunaq.com/wp-content/uploads/2021/03/阿里云修改dns-150x29.png 150w" sizes="(max-width: 1300px) 100vw, 1300px" />
3、根据页面提示，修改DNS服务器地址为ns1.jiasule.net  ns2.jiasule.net，完成后点击【确认】保存。
<img class="alignnone size-full wp-image-3599" src="http://help.yunaq.com/wp-content/uploads/2021/07/1627637341400.jpg" alt="" width="1193" height="519" srcset="http://help.yunaq.com/wp-content/uploads/2021/07/1627637341400.jpg 1193w, http://help.yunaq.com/wp-content/uploads/2021/07/1627637341400-300x131.jpg 300w, http://help.yunaq.com/wp-content/uploads/2021/07/1627637341400-768x334.jpg 768w, http://help.yunaq.com/wp-content/uploads/2021/07/1627637341400-1024x445.jpg 1024w, http://help.yunaq.com/wp-content/uploads/2021/07/1627637341400-60x26.jpg 60w, http://help.yunaq.com/wp-content/uploads/2021/07/1627637341400-150x65.jpg 150w" sizes="(max-width: 1193px) 100vw, 1193px" />
4、设置完成，等待生效后，检验是否完成接入。

在阿里云切换NS服务器为云防御DNS服务器的步骤如下： 1、登录阿里云域名管理控制台，在域名列表中定位目标域名 [&#8230;]

帮助中心