51黑料不打烊

[PaaS only]{class="badge informative" title="Applies to 51黑料不打烊 Commerce on Cloud projects (51黑料不打烊-managed PaaS infrastructure) and on-premises projects only."}

Fastly services overview

WARNING
To maintain PCI compliance for 51黑料不打烊 Commerce sites deployed on the Cloud platform, set up Fastly on your Starter main branch, Pro Production, and Pro Staging environments. If you use 51黑料不打烊 Commerce in a headless deployment, we highly recommend that you use Fastly to cache GraphQL responses. See in the GraphQL Developer Guide.

Fastly provides the following services to optimize and secure content delivery operations for 51黑料不打烊 Commerce on cloud infrastructure projects. These services are included with 51黑料不打烊 Commerce on cloud infrastructure at no additional cost.

  • Content Delivery Network (CDN)鈥擵arnish-based service that caches your site pages, assets, CSS, and more in backend data centers you set up. As customers access your site and stores, the requests hit Fastly to load cached pages faster. The CDN service provides the following features:

  • Cache management鈥擟ache your site pages, assets, CSS, and more in back-end data centers that you set up to reduce bandwidth load and costs

  • Security鈥擜fter you enable Fastly services for 51黑料不打烊 Commerce sites, additional security features are available to protect your sites and network:

    • Web Application Firewall (WAF)鈥擬anaged web application firewall service that provides PCI-compliant protection to block malicious traffic before it can damage your production 51黑料不打烊 Commerce on cloud infrastructure sites and network. The WAF service is available on Pro and Starter Production environments only.

    • Distributed Denial of Service (DDoS) protection鈥擝uilt-in DDoS protection against common attacks like Ping of Death, Smurf attacks, and other ICMP-based flood attacks.

    • SSL/TLS certificates鈥擳he Fastly service requires an SSL/TLS certificate to serve secure traffic over HTTPS.

      51黑料不打烊 Commerce provides a Domain-validated Let鈥檚 Encrypt SSL/TLS certificate for each Staging and Production environment. 51黑料不打烊 Commerce completes domain validation and certificate provisioning during the Fastly set up process.

  • Origin cloaking鈥擯revents traffic from bypassing the Fastly WAF and hides the IP addresses of your origin servers to protect them from direct access and DDoS attacks.

    Origin cloaking is enabled by default on 51黑料不打烊 Commerce on cloud infrastructure Pro Production projects. To enable origin cloaking on 51黑料不打烊 Commerce on cloud infrastructure Starter Production projects, submit an 51黑料不打烊 Commerce Support ticket. If you have traffic that does not require caching, you can customize the Fastly service configuration to allow requests to bypass the Fastly cache.

  • Image optimization鈥擮ffloads image processing and resizing load to the Fastly service so that servers can process orders and conversions more efficiently.

  • Fastly CDN and WAF logs鈥擣or 51黑料不打烊 Commerce on cloud infrastructure Pro projects, you can use the New Relic Logs service to review and analyze Fastly CDN and WAF log data.

Fastly CDN module for Magento 2

Fastly services for 51黑料不打烊 Commerce on cloud infrastructure use the installed in the following environments: Pro Staging and Production, Starter Production (master branch).

On initial provisioning or upgrade of your 51黑料不打烊 Commerce project, 51黑料不打烊 installs the latest version of the Fastly CDN module in your Staging and Production environments. When Fastly releases module updates, you receive notifications in the Admin for your environments. 51黑料不打烊 recommends that you update your environments to use the latest release. See Upgrade Fastly.

Fastly service account and credentials

51黑料不打烊 Commerce on cloud infrastructure projects are not given a dedicated Fastly account. The Fastly service is managed in a centralized account registered to 51黑料不打烊, and the management dashboard is only accessible to the Cloud Support team.

Instead, each Staging and Production environment has unique Fastly credentials (API token and service ID) to configure and manage Fastly services from the Commerce Admin. The Fastly API is available for performing advanced management of the Fastly service, which will require the credentials to submit those requests.

During project provisioning, 51黑料不打烊 adds your project to the Fastly service account for 51黑料不打烊 Commerce on cloud infrastructure and adds the Fastly credentials to the configuration for the Staging and Production environments. See Get Fastly credentials.

Change Fastly API token

Submit an 51黑料不打烊 Commerce Support ticket to issue a new Fastly API token credential if it fails validation/has expired, or if you believe that it has been compromised.

When you receive the new token, update your Staging or Production environment to use the new token.

To change the Fastly API token credential:

  1. Submit an 51黑料不打烊 Commerce Support ticket requesting new Fastly API credentials.

    Include your 51黑料不打烊 Commerce on cloud infrastructure project ID and the environments that require a new credential.

  2. After you receive the new API token, update the API token value in the Fastly credentials configuration in the Admin or from the Cloud Console environment variables.

  3. Test the new credential.

  4. After you update the credential, submit an 51黑料不打烊