腾讯云EdgeOne全方位指南：从接入到实战应用

async function handleEvent(event) {
  const { request } = event;

  // 获取客户端支持的图片类型
  const accept = request.headers.get('Accept');
  const option = { eo: { image: {} } };

  // 检查客户端是否支持WebP格式的图片
  if (accept && accept.includes('image/webp')) {
    option.eo.image.format = 'webp';
  }

  const response = await fetch(request, option);
  return response;
}

addEventListener('fetch', event => {
  // 当函数代码抛出未处理的异常时，将请求转发回源站
  event.passThroughOnException();
  event.respondWith(handleEvent(event));
});

/**
 * 静态仓库托管示例
 * @url https://github.com/username/repo
 */
const BACKEND_PREFIX = 'https://raw.githubusercontent.com/username/repo/master';

async function githubProxy(request) {
    const uObj = new URL(request.url);
    
    let backend = BACKEND_PREFIX + uObj.pathname;
    if (backend.endsWith('/')) {
        backend += 'index.html';
    }
    
    const res = await fetch(backend, {
        method: request.method,
        headers: {
            'User-Agent': request.headers.get('User-Agent'),
        }
    });
    
    const headers = new Headers();
    headers.set('Backend-Url', backend);
    headers.set('Content-Type', fileType(backend));
    headers.set('Cache-Control', 'public, max-age=86400');
    
    return new Response(res.body, {
        status: res.status,
        headers,
    });
}

function fileType(url) {
    const ext = url.split('?').shift().split('.').pop();
    const mimes = {
        'json': 'application/json; charset=utf-8',
        'js': 'application/javascript; charset=utf-8',
        'css': 'text/css; charset=utf-8',
        'xml': 'text/xml; charset=utf-8',
        'html': 'text/html; charset=utf-8',
        'webm': 'video/webm',
        'mp3': 'audio/mpeg',
        'mp4': 'video/mp4',
        'webp': 'image/webp',
        'gif': 'image/gif',
        'png': 'image/png',
        'jpg': 'image/jpeg',
        'jpeg': 'image/jpeg',
        'svg': 'image/svg+xml',
        'ico': 'image/x-icon',
    };
    return mimes[ext] || 'text/plain';
}

// 事件监听器
addEventListener('fetch', e => {
    const resp = githubProxy(e.request);
    e.respondWith(resp);
});

# 假设已获取EdgeOne SDK实例edge_one
# 配置仅允许陕西地区访问
edge_one.security.set_geo_restriction(allowed_countries=['CN'], allowed_regions=['Shaanxi'])

# 仅允许公司IP访问管理后台
rule = {
    "conditions": [
        {"type": "path", "value": "/admin*"},
        {"type": "ip", "value": "公司IP范围", "operator": "not_in"}
    ],
    "action": "block"
}
edge_one.security.add_custom_rule(rule)

# 限制登录接口请求频率：10次/分钟，超过则封禁IP10分钟
rule = {
    "path": "/login",
    "limit": 10,
    "period": 60,
    "action": "block",
    "block_time": 600
}
edge_one.security.set_rate_limit(rule)

# 设置IP黑名单，禁止指定IP访问
blacklist_ips = ["1.2.3.4", "5.6.7.8"]
edge_one.security.set_ip_blacklist(blacklist_ips)

# 设置访问速率限制，每秒最多100个请求
rate_limit = {"requests_per_second": 100}
edge_one.security.set_rate_limit(rate_limit)

# 启用DDoS防护，自动清洗异常流量
edge_one.security.enable_ddos_protection()

# 配置防刷策略，限制单用户在指定时间内的请求次数
anti_brush_config = {
    "identifiers": ["user_agent", "ip"],
    "max_requests": 10,
    "time_window_seconds": 60
}
edge_one.anti_brush.enable_config(anti_brush_config)

# 在抢购开始时启用防刷保护
edge_one.anti_brush.enable_protection()

# 强制开启HTTPS，确保数据传输安全
edge_one.security.enable_https_enforcement()

# 启用WAF防火墙，防范SQL注入、XSS攻击等
edge_one.security.enable_waf()

# 配置边缘缓存策略，缓存静态资源
cache_rules = [
    {"path_pattern": "/static/*", "ttl": 3600},
    {"path_pattern": "/images/*", "ttl": 3600}
]
edge_one.caching.set_rules(cache_rules)