CDN.com.tr Help
Protect a file so it can only be fetched with a signature you generate, valid until a moment you choose. Unsigned requests get 403, expired ones get 410.
Cache, security, WAF, and purge
Protect a file so it can only be fetched with a signature you generate, valid until a moment you choose. Unsigned requests get 403, expired ones get 410.
The setting exists at both levels. Account-wide means every request needs a signature, which breaks ordinary pages. One rule for /downloads or /video is what most people want.
Short enough that a leaked link is worthless, long enough that a slow connection can finish the download. Minutes for a document, hours for a large video.
Open Delivery Rules, add or edit the rule covering the path you want protected, enable the expiring-link option and set a secret. Use a long random string, not a word.
Expected result: After the configuration reaches the edges, a plain request to that path returns 403.
The signature is the base64url form of the MD5 of the expiry, the path and the secret joined together, with a single space before the secret. Append it as md5 and the expiry as expires.
Expected result: The link is served until the expiry passes.
Check the failure cases as well as the success one, because they are what your support team will see in reports.
Expected result: Three different responses, so a user report can be classified from the status code alone.
You sell a video, a report or a download and the link must not be shareable forever. Hotlink protection stops other sites embedding your files; a signed URL goes further and makes every link personal and time-limited.