Plugins and capabilities
What every official plugin, module and major capability does, which edition has it, what it costs, how to turn it on and what you can set, plus the edition comparison.
Multi-CDN resilience and scheduling
Schedule your nodes, subscribed nodes and cloud CDNs together and fail over automatically.
Multi-CDN aggregated edgeUse Cloudflare, CloudFront, EdgeOne, ESA and other CDNs as site supplies scheduled with your own nodes: config sync, schedule-only, one-click import.Community: noPlusCross-CDN scheduling: failover, quality, fixedSites pick a supply per line among own nodes, subscribed nodes and cloud CDNs: failover, quality or fixed, with failback, minimum stay and flap freezing.Community: noPlusAutomatic fallback chainWhen nodes fail or are overwhelmed, a site steps down own nodes → backup line group → subscribed nodes → third-party CDN, and steps back once they recover.Community: noPlusPer-line probing and smart schedulingProbe each node from China Telecom, Unicom and Mobile (or per province) and answer visitors with the fastest healthy nodes that are not overloaded.CommunityPlus
Node and plugin markets
Run a CDN without a data centre by subscribing to supplier nodes; buy and install plugins in your console.
Node market: subscribing and supplyingSubscribe to supplier nodes in your console and add them to line groups like your own; ban lists reach them, per-node traffic is shown. Sell your nodes too.CommunityPlusPlugin market and install confirmationBuy or claim plugins in the console: feature modules activate on payment; the administrator confirms themes, rule packs and page plugins and picks tenants.CommunityPlus
Security
From L7 WAF and CC to L4 rules and kernel blocking, with automatic line changes when an attack is too big.
Automatic defenseNodes learn normal traffic per site and, on attack, challenge, rate-limit, ban and kernel-block step by step, then withdraw. Learning free, mitigation paid.CommunityPlusWAF and CC protectionA WAF rule library, CC rule sets counting by IP, network, URI, JA4 and more, JS challenges, quick block and JA4 blocking; Plus adds adaptive exclusions.CommunityPlusLayer-4 protectionRules for TCP/UDP forwarding: judge new connections by first packet, TLS name, IP, carrier and country, then drop, ban or allow; plus per-IP rate limits.CommunityPlusSDK ShieldGames and apps embed an SDK whose first packet carries an app token; nodes check it at L4 with replay protection. DDoS and CC protection, origin hiding.Community: noPlusKernel blocking and connection protectionLimit connections in the node kernel: per-IP concurrency and new-connection rate, idle connections, malformed TCP, CC bans; XDP or nftables.CommunityPlusAttack auto-escalationWhen automatic defense sees an attack and traffic stays high, a site moves to high defense, unlimited defense or Cloudflare, then blackhole, and back.Community: noPlus
Official plugins and modules
What each official plugin does, what it costs, how to turn it on and what you can set.
Cloudflare preferred IPsFor sites on your own Cloudflare account, find faster Cloudflare IPs per China carrier and write them per line to DNS; replace slow ones, fall back to CNAME.Community: noPlusdnspup probingWith your own dnspup customer API key, probe origins, third-party CDN access points and nodes from dnspup checkpoints across China, independent of node probes.CommunityPlusIP library live updatesPull the latest IP intelligence snapshot on a schedule with your own dnspup key; nodes use it for country, province, carrier and IDC conditions.CommunityPlusOWASP CRS levelsEnable the OWASP Core Rule Set by level, permissive to strict; sites choose a level and exclude misfiring rules. Follows CRS releases; paid, either edition.CommunityPlusAdvanced CC rule groupsOfficially maintained advanced CC rule groups on top of the free basic group, referenced from site CC rules and updated with releases; paid, either edition.CommunityPlusIn-house detection rulesThe official in-house WAF detection rule set, used alongside OWASP CRS; encrypted and watermarked per installation, updated with releases. Paid, either edition.CommunityPlusICP filing lookupWhen a supplier requires ICP filing, subscriber domains are checked with your chosen lookup service; unfiled domains cannot use such offers.CommunityPlusSMS and email servicesCodes, notifications and sign-up mail via Alibaba Cloud DirectMail, SendGrid or SMTP; SMS via Alibaba Cloud SMS, SUBMAIL or a custom gateway. Free modules.CommunityPlus
Business and billing
Collect payments, connect a billing system and move over from another CDN system.
Online paymentsCollect top-ups from your customers via Alipay, WeChat Pay, Epay, Codepay, USDT or payment plugins, with primary and standby channels and daily reconciliation.Community: noPlusBilling system bridgeConnect WHMCS or IDCSmart: orders, renewals, suspensions and plan changes open accounts and plans automatically, with passwordless login and usage.Community: noPlusMigration importImport users, plans, sites, certificates, DNS and balances from another CDN system: dry-run report first, import on confirmation, resumable, no duplicates.Community: noPlus
Community and Plus compared
This table matches the pricing page. "Not in the current community release" marks capabilities the commercial edition has that the current community release does not carry yet. Paid official modules are bought per installation in the plugin market at the price shown there.
Community
In the community edition, with limits
- Subscribe to supplier nodes, list your ownAfter registering a free installation identity
- Automatic defense (learn, observe, alert)CC auto switch and WAF auto block only
- Plugin market: buy, install, upgrade, uninstallAfter registering a free installation identity; official items are not free
- White-label themesDefault theme; theme plugins can be bought in the market
Plus
Plus adds
- Multi-CDN aggregated edge (Cloudflare, CloudFront, EdgeOne, ESA; other vendors schedule-only)
- Cross-CDN failover, quality and fixed strategies
- Automatic fallback chain (own nodes → backup line group → subscribed nodes → third-party CDN)
- Subscribed nodes in line groups, per-node traffic, ban list deliveryNot in the current community release
- Offers show single node / combination and country flagsNot in the current community release
- Adaptive WAF (per-site false-positive exclusions)
- SDK Shield (first-packet client token, origin hiding)
- Automatic defense: automatic mitigation
- Attack auto-escalation (high defense → unlimited → blackhole)
- Cloudflare preferred IPs
- Multi-tenant plans, traffic packs, balances and top-ups
- Online payments (Alipay, WeChat Pay, Epay, Codepay, USDT)
- Billing system bridge (WHMCS, IDCSmart)
- Migration import from other CDN systems
Bought in the market (either edition)
In both editions
- Control plane and nodes, one-line install
- HTTP/HTTPS sites, L4 TCP/UDP forwarding
- Caching, HTTP/2 and HTTP/3, automatic ACME certificates
- Multiple DNS providers in one place
- Per-line probing and smart scheduling
- WAF and CC protection, custom rules, quick block, JS challenge
- L4 protection rules (first packet, SNI, IP, region)
- Kernel blocking: connection limits, malformed packets, XDP / nftables
- dnspup probing, IP library updates, ICP lookup, SMS, email
| Capability | Community | Plus |
|---|---|---|
| Getting it | ||
| Activation | None, built-in community licence | Licence and install command from the licence portal |
| Licence | AGPL-3.0 | Commercial licence |
| Control plane price | Free | Free |
| Upgrades | Install the new release package | In-console upgrade, version can be pinned |
| Delivery | ||
| Control plane and nodes, one-line install | Included | Included |
| HTTP/HTTPS sites, L4 TCP/UDP forwarding | Included | Included |
| Caching, HTTP/2 and HTTP/3, automatic ACME certificates | Included | Included |
| Multiple DNS providers in one place | Included | Included |
| Per-line probing and smart scheduling | Included | Included |
| Multi-CDN resilience | ||
| Multi-CDN aggregated edge (Cloudflare, CloudFront, EdgeOne, ESA; other vendors schedule-only) | Not included | Included |
| Cross-CDN failover, quality and fixed strategies | Not included | Included |
| Automatic fallback chain (own nodes → backup line group → subscribed nodes → third-party CDN) | Not included | Included |
| Node market | ||
| Subscribe to supplier nodes, list your own | After registering a free installation identity | Included |
| Subscribed nodes in line groups, per-node traffic, ban list delivery | Not in the current community release | Included |
| Offers show single node / combination and country flags | Not in the current community release | Included |
| Security | ||
| WAF and CC protection, custom rules, quick block, JS challenge | Included | Included |
| Adaptive WAF (per-site false-positive exclusions) | Not included | Included |
| L4 protection rules (first packet, SNI, IP, region) | Included | Included |
| SDK Shield (first-packet client token, origin hiding) | Not included | Official, free for now |
| Kernel blocking: connection limits, malformed packets, XDP / nftables | Included | Included |
| Automatic defense (learn, observe, alert) | CC auto switch and WAF auto block only | Official, free |
| Automatic defense: automatic mitigation | Not included | Official, paid |
| Attack auto-escalation (high defense → unlimited → blackhole) | Not included | Official, free |
| Official rule packs: OWASP CRS levels, advanced CC, in-house detection | Bought per installation in the plugin market | Bought per installation in the plugin market (paid) |
| Plugins and modules | ||
| Plugin market: buy, install, upgrade, uninstall | After registering a free installation identity; official items are not free | Included |
| Cloudflare preferred IPs | Not included | Official, free |
| dnspup probing, IP library updates, ICP lookup, SMS, email | Built in, free | Built in, free |
| Business | ||
| Multi-tenant plans, traffic packs, balances and top-ups | Not included | Included |
| Online payments (Alipay, WeChat Pay, Epay, Codepay, USDT) | Not included | Official, free |
| Billing system bridge (WHMCS, IDCSmart) | Not included | Official, free |
| Migration import from other CDN systems | Not included | Official, free |
| White-label themes | Default theme; theme plugins can be bought in the market | Included |