1. How can I configure inter-domain resource sharing?

2. How can I view the internal network domain name and external network domain name of a bucket?

3. Is changing the domain name necessary for accessing a different region?

4. Why cannot I use a cloud host to access KS3 through the internal network?

5. How can I bind a custom domain name to a bucket?

6. How many domain names can be bound to a bucket?

7. Can a cloud host access KS3 in the same region through the internal network?

8. Does KS3 support HTTPS access?

9. How can I use a custom domain name to support HTTPS?

10. How can I configure HTTPS for a custom domain name by configuring a reverse proxy?

11. Why is an external network access to the KS3 address shown as a dangerous link in QQ?

1. How can I configure inter-domain resource sharing?

Use one of the following methods:

• Log in to the KS3 management console, select the bucket, and configure rules on the CORS Configuration page under Bucket Settings. For more information, see CORS configuration.
• Use an SDK. KS3 provides SDKs for Java, PHP, Python, Android, IOS, JavaScript, Node.js, C#,GO, and C/C++.
• Call the PUT Bucket CORS interface.

2. How can I view the internal network domain name and external network domain name of a bucket?

Log in to the KS3 management console, and select the target bucket from the My buckets menu. You view the internal network domain name and external network domain name that KS3 has automatically assigned to the bucket.

3. Is changing the domain name necessary for accessing a different region?

Yes. Different regions have different domain names. When using APIs or SDKs, you must identify the region and use the corresponding domain name. For more information, see Endpoints and regions.

4. Why cannot I use a cloud host to access KS3 through the internal network?

Check whether the domain name is the internal network domain name or external network domain name. To access KS3 through the internal network, you must use the internal network domain name. For domain names of regions, see Endpoints and regions.

5. How can I bind a custom domain name to a bucket?

Follow these steps:

1. On the KS3 console, create a bucket.
2. Access Bucket Settings > Domain Name Binding, enter the domain name to be bound, and submit the configuration.

Note:

• If the domain name is not filed, the binding will fail.
• If the custom domain name to be bound has been bound to another bucket in the same region under the current account, you must remove the existing binding first.
• If the custom domain name to be bound has been bound to a bucket under another account, you must modify the domain name server's TXT records and perform domain name ownership authentication to remove the existing binding and bind the domain name to the current bucket. After binding a custom domain name to a bucket successfully, you must add a CNAME record on your own domain name server. The record value is the external network domain name to be bound to the bucket. Then, all access requests destined for the custom domain name will be sent to the KS3 bucket.

For more information about the binding procedure, see Domain binding.

6. How many domain names can be bound to a bucket?

A maximum of 50 domain names can be bound to a bucket.

7. Can a cloud host access KS3 in the same region through the internal network?

Yes. A cloud host can download data from and upload data to KS3 in the same region through the internal network. The traffic is internal network traffic and is free.

8. Does KS3 support HTTPS access?

Yes. KS3 supports HTTPS access. It uses a unidirectional HTTPS certificate and does not require installing a certificate on the client. After logging in to the console, you can see that the object generates the corresponding URL. The URL uses HTTPS by default. You only need to copy the URL to the address bar of the Web browser directly. No other special configuration is required. If you want to use a custom domain name to support HTTPS, see 9. How can I use a custom domain name to support HTTPS?.

9. How can I use a custom domain name to support HTTPS?

To use a custom domain name to support HTTPS, choose one of the following methods:

• Use the bound domain name as a reverse proxy to implement HTTPS. For more information, see 10. How can I configure HTTPS for a custom domain name by configuring a reverse proxy?.
• Enable CDN acceleration for the bound domain name, and configure the certificate corresponding to your domain name in the CDN service. For more information, see CDN.

The second method is recommended.

10. How can I configure HTTPS for a custom domain name by using a reverse proxy?

Scenario:

Custom domain name: ks3.a.com
Bucket: bucket-a
Goal: Use https://ks3.a.com to access an object in bucket-a.

Procedure:

1. Bind domain name ks3.a.com to bucket-a. For more information see Domain binding.

2. Configure domain name ks3.a.com as a reverse proxy on a server. In the following example, an Nginx server is used.

   server { listen 443 ; server_name ks3.a.com; location / {

   If the host is not in the same region as the bucket, you must use the external network endpoint.

        proxy_pass http://bucket-a.ks3-cn-beijing-internal.ksyuncs.com/;
        # proxy_set_header  Referer http://www.test.com;
     }

   }

3. Resolve the ks3.a.com a record to the IP address of the server.

4. Verify that you can access the object successfully, and then add an SSL certificate for the domain name on the server.

11. Why is an external network access to the KS3 address shown as a dangerous link in QQ?

It is recommended that you bind a custom domain name for external network access.