Configure HTTP connection with the origin

By default, CDN requests content from the origin via HTTPS. This allows you to additionally:

verify the origin certificate when requesting the origin;
specify an SNI host name so that the origin serves content for the required domain if multiple domains point to a single IP address. SNI (Server Name Indication) is the host name sent in a TLS request.

If the content origin does not support encryption, you can disable the use of HTTPS. We do not recommend disabling HTTPS — it reduces security and increases the risk of MITM attacks. During a MITM attack, attackers can intercept credentials, tamper with page content, and inject malicious code. If you disable HTTPS, origin certificate verification and SNI host specification will be unavailable.

Enable origin certificate verification

Verification confirms that the certificate:

is issued by a trusted certification authority (CA);
is valid;
matches the origin domains;
matches the SNI host if it is specified.

In the control panel, in the top menu, click Products and select CDN.
Under CDN resources, open the CDN resource page → the Origin tab.
In the HTTP settings for origins section, select the Verify origin certificate checkbox.
Click Apply. While applying the settings, the CDN resource will have the PROCESSING status. Applying other settings is not available during this time. The settings will take effect once the CDN resource changes to the ACTIVE status.

Specify the SNI hostname

In the control panel, in the top menu, click Products and select CDN.
Under CDN resources, open the CDN resource page → the Origin tab.
In the HTTP settings for origins section, select the Specify SNI host name checkbox.
Enter the SNI host name — a domain without a protocol, for example, example.com. This value will be passed in the SNI header when establishing a TLS connection.
Click Apply. While applying the settings, the CDN resource will have the PROCESSING status. Applying other settings is not available during this time. The settings will take effect once the CDN resource changes to the ACTIVE status.

Disable the use of HTTPS

In the control panel, in the top menu, click Products and select CDN.
Under CDN resources, open the CDN resource page → the Origin tab.
In the HTTP settings for origins section, clear the Use HTTPS when requesting origins checkbox.
Click Apply. While applying the settings, the CDN resource will have the PROCESSING status. Applying other settings is not available during this time. The settings will take effect once the CDN resource changes to the ACTIVE status.