Application Acceleration Services

 

As of September 1, 2017, Application Acceleration Services are no longer available to customers who are not already receiving Application Acceleration Services from Company.

 

I.    SERVICES DESCRIPTION: Company will provide Customer with Application Acceleration Services ordered by Customer. Company resells Application Acceleration Services provided by vendors. 

 

II.  DEFINITIONS: In addition to the definitions found in Online Definitions, the following apply to Application Acceleration Services:

 

“Akamai Services” are Akamai’s services resold by Company pursuant to a reseller agreement.

 

“API” means Application Programming Interface.

 

“Application or “App” means any discrete instance of computer software that performs a particular function for a Customer or Customer’s end user and can be accelerated by any Akamai acceleration Service. For billing purposes, each instance of any such software is considered an independent “Internet Application” or “App”. For example, each Application running on a particular platform (e.g., Force.com, Amazon AWS, Microsoft Azure, SAP, .NET, etc.) is considered a discrete App, while the platform itself would not be considered an App. Also, a portal consisting of many Applications will be counted as more than one application.

 

“Application Acceleration Services” means the Application Acceleration services, specified on a Service Order including any related documentation, which may be Akamai Services.

 

“Card Information” means personally identifiable information entered by a user on a designated portion of Customer’s Site for the purpose of fulfilling a transaction or account access process and which is identified to be replaced by a token pursuant to the Edge Tokenization Module configuration defined and approved by Customer. Such information may include a user’s name, address, personal account number, credit card number, debit card number, bank account number, check number or other financial account number.

 

“Content Type” means a HTTP response header that describes the file type that follows and that the browser uses to render the content properly.

 

“Customer Content” means any creation, renewal, update, deletion, editorial content, control, publication, reproduction, and all other aspects of any files, software, scripts, multimedia images, graphics, audio, video, text, data or other objects or an event, including any third party content or materials, originating or transmitted from any web site owned or operated by Customer, and/or uploaded or routed to, passed through and/or stored on or within the Vendor’s Network or the Company Network or otherwise provided to Company’s vendor or transmitted or routed using any of the  Application Acceleration Services.

 

“Customer Portal” means the Luna Control Center located at https://control.akamai.com.

 

“DDoS (distributed denial-of-service) or DoS (denial-of-service) Attack” means an ongoing traffic increase where (i) Site traffic is four or more times higher than the average Site traffic, per unit, over the immediately preceding two month period, (ii) Customer and Akamai mutually agree that the traffic spike is malicious, and/or unwanted, and Customer requests Akamai to declare the traffic as a DDoS Attack, and (iii) Customer informs Akamai that they are willing to NOT serve the unexpected traffic and are willing to allow Akamai to determine the approach for mitigating potential negative impacts of the DDoS traffic (e.g., blocking the traffic, redirecting the traffic, serving the traffic, etc.).

 

“DNS” means Domain Name System.

 

“Extended Validation (EV) Digital Certificate” means a special type of X.509 digital certificate that requires more extensive investigation of the requesting entity by the certificate authority before being issued. The requirements for issuing EV Digital Certificates are defined by the Certification Authority Browser Forum (“CA/Browser Forum”) located at http://www.cabforum.org. Extended Validation certificates may be issued as single-hostname or Subject Alternative Name (SAN) certificates.

 

“GB” means Gigabyte(s). One (1) GB is equal to 1,000 MB.

 

“HD Client” means combination of the HD Network Player Component and the NetSession Interface to enable delivery of HD Network Services.

 

“HD Network Player Component” means Akamai’s client-side software used to enable delivery of Akamai HD Network Services. The Akamai HD Network Player Component is provided subject to the applicable license agreement located at www.akamai.com/product/licenses, and Customer’s purchase and use of the Akamai HD Network Player Component constitutes Customer’s acceptance of the terms of such license.

 

“HTML” means HyperText Markup Language.

 

“HTTP” means Hypertext Transfer Protocol. HTTP is an Application-level protocol for distributed, collaborative, hypermedia information systems.

 

“HTTP Dynamic Streaming (“HDS”)” supports Adobe Flash.

 

“HTTP Live Streaming (“HLS”)” supports Apple iPhone/iPad.

 

“HTTPS” means HTTP combined with a network security protocol.

 

“Indemnified Party” means each of the following:  Company, its vendor for the Application Acceleration Services, their respective affiliates, and each of their respective officers, directors, employees, agents and representatives.

 

“ISO” means Industry Organization for Standardization.

 

“KB” means Kilobyte(s). One KB is equal to 1,000 bytes.

 

“Mbps” means Megabit(s) per second.

 

“MB” means Megabyte(s). One MB is equal to 1,000 KB.

 

“Mobile Site” means a set of URLs used to deliver content and applications targeted at mobile devices for a discrete and individual corporate unit (e.g., legal entity, company business unit, publishing group, product brand or Application) that may consist of at most one domain and up to 3 sub-domains. For example, in the case of mobile.customer.com and images-mobile.customer.com, “customer.com” is the domain and “mobile“ and “images-mobile” are sub-domains.

 

“MPV” means Million Page Views.

 

“NetSession Interface” means Application Acceleration Services client-side software used in conjunction with various Application Acceleration Services. The NetSession Interface is provided subject to the terms of the applicable license agreement located at www.akamai.com/product/licenses, and Customer’s purchase and use of the NetSession Interface constitutes Customer’s acceptance of the terms of such license.

 

“NetSession Interface Software Development Kit” means an API, sample applications, and documentation that enables Customer to programmatically access features and functions of the NetSession Interface. This kit supports the C programming language and is subject to the applicable licenses included therewith.

 

“Page View” means the delivery of a file by Application Acceleration Services that has Content Type “text/html” but excludes redirects (HTTP response code 301/302) and File Not Found error page (HTTP response code 404). Application Acceleration Services aggregates the number of “text/html” files delivered each month.

 

“Play Attempt” means an attempt to run a live or on demand stream on a media player. A single Play Attempt may result in successful play back that lasts many hours or the stream may not start at all due to errors or user initiated termination of play back. The number of Play Attempts will be tracked via the “Play Attempts” metric in the Media Analytics Service. Total Play Attempts for a month are calculated by summing the Play Attempts metric across all active instances of Audience Analytics, QoS Monitor, and Server Side Analytics modules. Bitrate switching during adaptive bitrate streaming does not constitute a new Plays Attempt. For 24x7 streams or playlists that have multiple titles in a single stream, each new title accessed within the playlist will constitute a new Play Attempt.

 

“Priority Level” - The following is a guide for assigning appropriate priority levels for Support Requests:

 

Priority 1 (“P1”) Critical means the service is significantly impaired and unavailable to multiple user locations.  Example: Multiple Sites are affected.

 

Priority 2 (“P2”) Major neabs a repeatable inability to use the applicable Service from a single location or region. Example: Localized denial of service issue. This might be to a single Site or even a single server.

 

Priority 3 (“P3”) Low means a non-urgent matter or information request. Examples: Planned configuration change request, information requests, reports or usage questions, clarification of documentation, or any feature enhancement suggestions.

 

“Real-Time Reporting (RTR)” means an Application Acceleration Services proprietary log delivery technology used for intercommunication with customer-operated log management systems.

 

“Request” means a request to an Application Acceleration Services server to retrieve an item of anonymous non-personally identifiable user data from an Application Acceleration Services proprietary database or to perform a certain function based upon one or more Segments specified by Customer.

 

“Reseller Agreement” means the reseller agreement(s) whereby Company is authorized to resell Application Acceleration Services to Customer.

 

“Secure Web Transaction” means an SSL Network HTTPS request and response that may carry Card Information.

 

“Segment” means a characteristic selected by Customer and assigned to an anonymous user based upon such user’s online activity.

 

“Service Level Agreements or SLA” means use of any Service is subject to the applicable Application Acceleration Services service level agreement located on the Application Acceleration Services Customer Portal.

 

“Services Order Form” means an order for Application Acceleration Services placed by Customer with its Company account representative attendant to Application Acceleration Services. The Services Order Form constitutes a binding commitment of Customer to purchase the requested Application Acceleration Services.

 

“Site” means a set of URLs used to deliver content and Applications for a discrete and individual corporate unit (e.g., legal entity, company business unit, publishing group, product brand or Application) that may consist of at most one domain and up to 10 hostnames. For example, in the case of www.customer.com and images.customer.com “customer.com” is the domain and “www” and “images” are hostnames.

 

“SSL” means Secure Sockets Layer.

 

“SSL Network Access” means a network resource allocated to Customer for the purpose of accelerating SSL sessions with a X.509 digital certificate. Customer purchases the type of digital certificate to be included with the SSL Network Access, such as Standard (Single-Hostname), Wildcard, SAN, Extended Validation (EV), Extended Validation SAN or Third Party.

 

“Standard or Single-Hostname Digital Certificate” means an X.509 digital certificate identifying a single hostname that is issued by either Application Acceleration Services or an Application Acceleration Services chosen certificate authority.

 

“Subject Alternative Name (SAN) Digital Certificate” means an X.509 digital certificate standard that can be used to identify more than one entity or device. Digital certificate products identified as SAN Digital Certificates can sign more than one hostname.

 

“Support Requests” means service support calls or online support tickets initiated by Customer where the underlying issue is determined to reside in Customer’s host environment (not in the Application Acceleration Services o  Application Acceleration Services network) or other requests outside the scope of support. Additional Support Requests beyond those included in a particular Service package may be subject to Application Acceleration Services standard rates.

 

“TB” means Terabytes delivered. One (1) TB is equal to 1,000 GB.

 

“Third Party” means an entity or person other than Application Acceleration Services or Customer.

 

“Third Party Component” means any solution, application, technology or component thereof provided by a 3rd Party.

 

“Third Party Digital Certificate” means an X.509 digital certificate furnished by the customer to Application Acceleration Services for use with the purchased Service(s).

 

“Thps” means thousand hits per second.

 

“Vendor’s Network” means Company’s vendor’s worldwide network dedicated to web content delivery deployed to efficiently deliver content over the Internet.

 

“Vendor’s Use Policy” means the current vendor’s acceptable use policy, as amended from time to time, is available at www.akamai.com.

 

“Wildcard Digital Certificate” means an X.509 digital certificate that signs multiple hostnames within a specified domain. For example, the wildcard *.example.com specifies the domain "example.com" and can sign hostnames such as "www.example.com" and "images.example.com". Wildcard Digital Certificates are issued by either Application Acceleration Services or an Application Acceleration Services chosen certificate authority. In cases where Application Acceleration Services issues the wildcard certificate there is a 10 hostname limit under the primary domain. Otherwise, Wildcard Digital Certificates can sign an unlimited quantity of hostnames in the specified domain.

 

III.        FEATURES AND OPTIONS: The following features and options are available:

 

      Akamai Services provides the following:

 

1.         Application Acceleration Features and Service Descriptions. The following Application Acceleration Services are resold from Company’s vendor, Akamai (with the equivalent Company and Akamai service names).

 

 

2.         Application Acceleration – Standard.

 

2.1       Web Application Accelerator. Web Application Accelerator includes access to Akamai’s network for content delivery and Akamai’s Application Accelerator Services serving HTTP/HTTPS traffic (includes all HTTP methods), and includes one or more of the following features:

 

·                  Control de acceso

·                  Advanced Cache Optimization (or Control)

·                  NetStorage

·                  Pre-fetching

·                  Site Analyzer

·                  Site failover

·                  SureRoute for performance

·                  SSL Network Access – (Certificates – Standard (Single-hostname), Wildcard, SAN or Third Party

 

3.         Application Acceleration – Advanced and Enterprise.

 

3.1       Terra Alta Enterprise Accelerator. Terra Alta Enterprise Accelerator includes access to Akamai’s network for content delivery and Akamai’s Alta Enterprise Accelerator providing improved performance, scalability and control for the quantity of Applications specified in the Service Order and includes all the modules in the Application Acceleration - Standard package plus the following features:

 

·                  Akamai Instant

·                  Dynamic Page Caching

·                  Edge Load Balancing

·                  Enhanced Akamai Protocol

·                  Enterprise Edge

·                  Global Traffic Management

·                  InstantConfig

·                  Mobile Detection and Redirect

·                  Secure Content delivery

·                  Enterprise DNS Mapping

·                  Web Deduplication

·                  IP v6 Adaptation

 

4.         Website Acceleration – Standard. 

 

4.1       Dynamic Site Accelerator. Dynamic Site Accelerator is to be used for web sites only, not for web applications.  Includes access to Akamai’s network for content delivery and access to Akamai’s Site Acceleration services, which include one or more of the following features:

 

·             Basic Cache Optimization

·             Compression

·             HD On-Demand Streaming

·             NetStorage (1GB)

·             Pre-fetching

·             Site Analyzer (200) Tokens

·             Site and Visitor Intelligence

·             SureRoute for Failover

·             Transport control protocol (TCP) optimization

 

4.2       Website Acceleration – Standard Secure.

 

4.2.1    Dynamic Site Accelerator – Secure. Dynamic Site Accelerator - Secure includes access and features of the Dynamic Site Accelerator plus one or more of the following features:

 

·                  Control de acceso

·                  Secure Content delivery

·                  SSL Network Access – (Certificates – Standard (Single-hostname), Wildcard, SAN or Third Party)

 

5.         Website Acceleration – Advanced.

 

5.1       Dynamic Site Accelerator – Premier.  Dynamic Site Accelerator – Premier includes access to Akamai’s network for content delivery and includes the features of Website Acceleration - Standard plus one or more of the following features:

 

·                  Advanced Cache Optimization

·                  Akamai Instant

·                  Dynamic Page Caching         

·                  Enhanced Akamai Protocol

·                  IP v6 Adaptation

·                  NetStorage (5GB)

·                  SureRoute for Performance

 

5.2       Website Acceleration – Advanced Secure. Dynamic Site Accelerator Secure – Premier includes access to the features of the Dynamic Site Accelerator Premier Service, plus one or more of the following features:

 

·             Control de acceso

·             Secure Content delivery

·             SSL Network Access – (Certificates – Standard (Single-hostname), Wildcard, SAN or Third Party)

 

6.         Website Acceleration – Enterprise.

 

6.1       Aqua Ion.  Aqua Ion includes access to Akamai’s network for content delivery and includes the features of Website Acceleration - Advanced plus Front End Optimization (FEO).  

 

6.2       Aqua Ion Secure. Aqua Ion Secure includes access to Akamai’s network for content delivery and includes the features of Website Acceleration - Advanced plus the following features:

 

·             Control de acceso

·             Secure Content delivery

·             SSL Network Access – (Certificates – Standard (Single-hostname), Wildcard, SAN or Third Party)

 

7.         Mobile Acceleration – Standard.

 

7.1       Aqua Ion Mobile Accelerator. Akamai Services Aqua Ion Mobile is designed to accelerate web content to mobile devices. Aqua Ion Mobile only accelerates mobile sites.  For an additional charge, customer may add Mobile FEO which includes all treatments available and described in FEO but are limited to mobile sites.  Aqua Ion Mobile includes access to the one or more of the following features:

 

·                  Control de acceso

·                  Adaptive Image Compression

·                  Akamai Mobile Protocol

·                  Device Characterization

·                  Mobile Detection and Redirect

·                  NetStorage (5GB)

·                  Site and Visitor Intelligence

 

7.2       Aqua Ion Mobile Accelerator Secure. Aqua Ion Mobile Secure includes the features of Aqua Ion Mobile Accelerator and access to one or more of the following features:

 

·                  Secure Content delivery

·                  SSL Network Access – (Certificates – Standard (Single-hostname), Wildcard, SAN or Third Party)

 

8.         Website Acceleration – Enterprise.

 

8.1       Aqua Ion. Aqua Ion includes access to Akamai’s network for content delivery and includes the features of Website Acceleration - Advanced plus Front End Optimization (FEO).  

 

8.2       Aqua Ion Secure. Aqua Ion Secure includes access to Akamai’s network for content delivery and includes the features of Website Acceleration - Advanced plus the following features:

 

·                  Control de acceso

·                  Secure Content delivery

·                  SSL Network Access – (Certificates – Standard (Single-hostname), Wildcard, SAN or Third Party)

 

9.         Mobile Acceleration – Standard.

 

9.1       Aqua Ion Mobile Accelerator. Akamai Services Aqua Ion Mobile is designed to accelerate web content to mobile devices. Aqua Ion Mobile only accelerates mobile sites.  For an additional charge, customer may add Mobile FEO which includes all treatments available and described in FEO but are limited to mobile sites.  Aqua Ion Mobile includes access to the one or more of the following features:

 

·                  Control de acceso

·                  Adaptive Image Compression

·                  Akamai Mobile Protocol

·                  Device Characterization

·                  Mobile Detection and Redirect

·                  NetStorage (5GB)

·                  Site and Visitor Intelligence

 

9.2       Aqua Ion Mobile Accelerator Secure. Aqua Ion Mobile Secure includes the features of Aqua Ion Mobile Accelerator and access to one or more of the following features:

 

·                  Secure Content delivery

·                  SSL Network Access – (Certificates – Standard (Single-hostname), Wildcard, SAN or Third Party)

 

10.       Acceleration Services’ Feature Descriptions and Terms.

 

10.1     Access Control.  Access Control includes access to specific metadata tags providing additional security controls governing how users connect to the Akamai infrastructure, and how the Akamai infrastructure connects to Customer's origin server(s). These metadata tags are grouped into the following categories: edge authorization, edge to origin authorization, enhanced availability, caching controls, security related controls. The majority of the Access Control metadata tags are configurable solely by Akamai, however, some of the available tags can be selected and implemented by Customer directly.

 

10.2     Adaptive Image Compression. Adaptive Image Compression is designed to detect the current network conditions between a client requests for a JPEG image from an Akamai Edge server, and may dynamically re-compress the image file according to Customer configured levels, reducing file size and assisting in faster transmission of the image file. Customer agrees to abide by all copyright, trademark, and other intellectual property laws worldwide in connection with the use of Adaptive Image Compression. Customer hereby grants permission and license, where applicable, for Akamai to copy, alter, modify, resize, crop, watermark, reformat, resave, compress, decompress, rewrite, transmit, cache, strip metadata and otherwise make derivative versions of images for which the Adaptive Image Compression module is activated, including intermediary graphical stages which may be cached internally in image server software in addition to customary object caching at Edge servers. Customer acknowledges that due to capacity and network deployment constraints, the Adaptive Image Compression functionality may not have a positive impact on performance.

 

10.3     Advanced Cache Optimization. Advanced Cache Optimization enables control of the way different Web site objects are cached on Edge Platform edge servers and includes:

 

10.3.1  flexible cache key that enables caching based on cookies, query strings, path parameters, path components, and other request attributes;

 

10.3.2  session rewriting capabilities that make HTML pages imbedded with a session ID cacheable; and

 

10.3.3  cookie handling, redirect handling, and header handling that enable the edge servers to accommodate more complex origin site configurations and function.

 

10.4     Akamai Instant.   Akamai Instant enables designation of the next pages the Application user is most likely to select and store them on an Edge Server for improved delivery.

 

10.5     Akamai Mobile Protocol. Akamai Mobile Protocol includes access to certain network enhancements and transport protocol optimizations designed for mobile networks.

 

10.6     Basic Cache Optimization. Basic Cache Optimization provides a wide range of cache control features to help maximize the cacheability of Content including setting TTL, modifying headers, path modification and downstream caching.

 

10.7     Compression.  Compressing Content before it is sent to the user is especially effective at reducing transfer times for HTML Content to users on slower connections; because application pages are often light on graphics, this technique can be particularly effective for improving performance of transactional Content.

 

10.8     Device Characterization. Device Characterization provides Customer access to the Customer Portal to activate cache key augmentation and HTTP header augmentation with characteristics drawn from a database of mobile devices. The matching mechanism to identify mobile devices at the edge, and the database of related characteristics, is defined and updated periodically by Akamai, at Akamai’s sole and reasonable discretion, and Customer agrees that there are no guarantees around specific device inclusion in such mechanisms or data accuracy or breadth in the database. Customer is prohibited from accruing any device data added by Akamai to HTTP headers except in logs for Customer’s internal analysis and debugging purposes. Customer is prohibited from publishing any device data added by Akamai to HTTP headers. Akamai may, without notice, make substantial and fundamental changes to the Device Characterization module that affect the handling of web traffic to Customer’s digital properties, including but not limited to changes to the database, including addition and removal of devices and characteristic fields, changes to the data or relevant interpretation of the data.

 

10.9     Dynamic Page Caching. Dynamic Page Caching enables more granular caching, segmentation and downstream policies for content based on request criteria such as name/value pairs found in cookies, request headers and query strings.

 

10.10   Edge Load Balancing. Edge Load Balancing enables routing of traffic across multiple data centers with a higher degree of control and assurance than is available with DNS based global traffic management solutions alone. Edge Load Balancing combines Akamai’s robust ability to manage HTTP requests at the Edge with its Global Traffic Management platform, which maintains information about a data center’s load and availability.

 

10.11   Enhanced Akamai Protocol.  Enhanced Akamai Protocol provides additional TCP performance improvements with mapping enhancements and protocol optimizations within the Intelligent Platform.

 

10.12   Enhanced Edge Platform Protocol.  Enhanced Edge Platform Protocol provides additional TCP performance improvements with mapping enhancements and protocol optimizations within the Edge Platform.

 

10.13   Enterprise DNS Mapping. Enterprise DNS Mapping optimizes DNS mapping by redirecting end users to the optimal Akamai edge server based on the client IP address.

 

10.14   Enterprise Edge.  Enterprise Edge extends Intelligent Platform optimization via on a software based virtual appliance deployed within the application datacenter DMZ.  Enterprise Edge also is capable of terminating SSL connections, setting up persistent TCP connections, and performing Web De-duplication to reduce origin traffic and load.

 

10.15   Front End Optimization (FEO).  FEO is designed to improve web page performance by modifying the page and associated embedded objects for faster rendering in the browser. FEO provides Customer with an assortment of performance optimizations that can be applied to an HTML page (or grouping thereof). An HTML page is defined as an object served with a HTTP Content-Type header of text/html.

 

10.16   Global Traffic Management.  Weighed Load Balancing directs requests to live datacenters exactly in the proportion configured.

 

10.17   InstantConfig.  InstantConfig enables an unlimited number of domains to be supported by a single configuration in a scalable way so multiple applications may be quickly deployed onto the Akamai Intelligent Platform. InstantConfig also provide support for identity binding and conditional processing for enhanced security and performance.

 

10.18   IP v6 Adaptation.  IP v6 Adaptation enables support for IPv6 client requests for Applications in an IP v4 origin infrastructure.

 

10.19   Mobile Detection and Redirect.  Mobile Detection and Redirect enables Application users to seamlessly access the mobile version of a configured Site or Application from a mobile device.

 

10.20   On-Demand Streaming. On-Demand Streaming is delivery of on demand streaming Content (Windows Media, QuickTime, and Flash).

 

10.21   NetStorage. NetStorage includes access to Akamai's network-based storage Service that may be used with Akamai's content delivery Services as an origin or source for files that are delivered across Akamai's network. The Akamai NetStorage Service includes the following restrictions and limitations:

 

10.21.1   The maximum size of a single storage group is 10 TB.

 

10.21.2   The maximum size of a file that can be uploaded to NetStorage is 25 GB.

 

10.21.3   The maximum number of files in any given directory is 50,000.

 

10.21.4   There are no guarantees regarding the number of operations per second that may be provided.

 

10.22   Pre-fetching. Pre-fetching reduces the number of long-haul round trips required to retrieve embedded Content, eliminating a major source of latency for page rendering.

 

10.23   Secure Content Delivery. Secure Content Delivery Enables secured delivery of Customer Content over the Intelligent Platform.

 

10.24   Site Analyzer. Site Analyzer includes access to Akamai’s speed note network for monitoring websites and transactions; and access to the Customer Portal which includes instant check, e-mail reports and alerting.

 

10.25   Site Failover.  Site Failover monitors the availability of the origin server and enable re-routing of requests when the origin is not available using one of the following options:

 

10.25.1   Failover to EdgeServer –content may be served out of cache on the EdgeServer in the event of an origin failure.

 

10.25.2   Failover to NetStorage – requires upload of a static site to NetStorage to be served in the event of an origin failure.

 

10.25.3   Failover to alternate data center – redirect requests to an alternate data center.

 

10.26   Site and Visitor Intelligence.  Site and Visitor Intelligence provides Customers with additional reporting insight and includes:

 

10.26.1   URL reporting that allows Customer to obtain detailed reporting information on each configured URL.  For each URL, Customer has access to traffic volume (MB delivered) and number of hits.  Customer can also run reports on the top URLs by traffic volume and number of hits.  URL reports can be run for HTTP Content, downloads (HTTP & FTP), and streaming services; and

 

10.26.2   Visitor reporting that provides powerful reporting insight into number of unique visitors as well as top visitors.  Visitor demographics can be broken down by operating system, browser, top countries, and top US states.

 

10.27   SSL Network Access.   SSL Network Access is a network resource allocated to Customer for the purpose of accelerating SSL sessions with a X.509 digital certificate. Customer purchases the type of digital certificate to be included with the SSL Network Access, such as Standard (Single-Hostname), Wildcard, SAN, Extended Validation (EV), Extended Validation SAN or Third Party.

 

10.28   SureRoute for Performance. SureRoute for Performance selects an effective route between the Intelligent Platform and origin servers for optimum network performance.

 

10.29   Transport Control Protocol (TCP) Optimization. TCP Optimization tunes the parameters that govern communications between Edge Platform servers, as well as between Edge Platform servers and end users, in order to increase the performance of those connections.

 

10.30   Web De-duplication. Web De-duplication provides data differencing for objects being sent over http(s) connections by only sending the differences in objects that have already been sent from the origin and eliminating the need to resend the entire object.

 

 11.      Media Delivery – Standard.

 

11.1     HD Network Solution. HD Network Solution includes (i) access to the HD Client, (ii) access to the HD Network Player Component code under the terms set forth at www.akamai.com/product/licenses, and (iii) Customer Portal access credentials for HD network for delivery of HD On Demand Streaming and/or HD Live Streaming (in Adobe Flash, Microsoft Silverlight, and/or Apple iPhone/iPad format).

 

11.1.1  Token Authorization. Token Authorization is an add-on security module for the HD Network Solution designed to help limit link sharing attacks. This security mechanism authorizes the user based on a token generated using a shared secret string. Token Authorization provides access to the Customer Portal to create an initial Token Authorization configuration for the HD Network Solution. In addition, Customer will receive token generation software development kit for supported platforms using which Customer will generate time bound tokens. The following additional terms apply to Customer’s use of Token Authorization Services.

 

11.1.1.1           All terms and limitations of the HD Network Solution apply to use of Token Authorization;

 

11.1.1.2           Available for Adobe Flash platform and HTTP live streaming by Apple iPhone and iPad only; and

 

11.1.1.3           Protection of segmented streaming formats with Token Authorization requires the use of cookies based tokens by Customer.

 

11.2     Player Verification. Player Verification is an add-on security module for the HD Network Solution designed to help limit deep linking attacks by helping to ensure only an approved player is used to play the content delivered by the HD Network Solution. Player Verification provides access to the Customer Portal to create an initial player verification configuration for the HD Network Solution and the HD Network Player Components to be used with the player. For Apple IPhone and iPad devices, Company offers device verification capability, which helps verify that content is delivered to a registered Apple iPhone and iPad device. The following additional terms apply to Customer’s use of Player Verification.

 

11.2.1  All terms and limitations of the HD Network Solution apply to use of Player Verification;

 

11.2.2  Up to 100 players may be enabled on an approved list of players provided by Customer. Adding additional players to the approved player list requires written authorization from Company;