Alibaba Cloud offers Anti-DDoS solutions to protect enterprises whose services on the Internet become unavailable due to distributed denial of service (DDoS) attacks.
Anti-DDoS service is based on Alibaba Cloud's global scrubbing centers, combined with intelligent DDoS detection and protection systems developed at Alibaba, automatically mitigating attacks and reinforcing the security of your applications, thereby reducing the threat of malicious attacks.
This article mainly introduces how to choose a suitable Anti-DDoS proxy solution to deal with frequent and massive DDoS attacks.
As the DDoS protection system for Alibaba Group, Alibaba Cloud Anti-DDoS products have been deployed to scrubbing centers across the globe, serving as a secure network with over 20 Tbit/s total mitigation capacity. Alibaba Cloud Anti-DDoS mitigates around 2,500 DDoS attacks on a daily basis and has successfully protected against a DDoS attack of 2 Tbit/s.
As an AI-Enabled DDoS protection system developed based on big data and machine learning technologies, Alibaba Cloud Anti-DDoS can automatically mitigate sophisticated DDoS attacks and quickly adjust protection policies based on the specific circumstances of an attack. Implementing this solution can effectively reduce operational and maintenance expenses while ensuring the stability and reliability of business operations.
Alibaba Cloud offers a free Anti-DDoS service with a capacity of up to 5 Gbit/s. Anti-DDoS Basic is automatically activated after you purchase an Alibaba Cloud service.
Protected Assets:
Learn More about Anti-DDoS Basic
Alibaba Cloud provides Anti-DDoS Origin services, which include versions 1.0 and 2.0, and offers three billing models: Inclusive Edition for Small and Medium Enterprises, Enterprise Edition, and Pay-as-you-go. Anti-DDoS Origin 2.0 features enhanced protection for a broader range of assets, such as Elastic Compute Service (ECS) instances and Server Load Balancer (SLB) instances, while supporting IPv4 and IPv6 network types.
Mitigation Capabilities
In China, the protection capacity varies by region, reaching up to hundreds gigabits per second (Gbit/s). If you buy Anti-DDoS Origin 2.0 (Pay As You Go) version and enable EIP with Anti-DDoS (Enhanced) in China, it can provide best-effort protection of up to Tbit/s. The mitigation capability is provided only for China (Beijing), China (Shanghai), and China (Hangzhou).
In regions outside the Chinese mainland, the mitigation capability is limited to a maximum of 10 gigabits per second (Gbit/s). If you buy Anti-DDoS Origin 2.0 (Pay As You Go) version and enable EIP with Anti-DDoS (Enhanced), it can provide best-effort protection of up to Tbit/s.
Several versions offer unlimited mitigation sessions. Clean bandwidth, IP address protection, and mitigation sessions are limited for the Enterprise and Inclusive Editions.
Protected Assets:
Learn More about Anti-DDoS Origin
Anti-DDoS Proxy is a proxy-based service provided by Alibaba Cloud to mitigate volumetric and resource exhaustion DDoS attacks.
If the server is deployed overseas and the service users are also located overseas, it is recommended to purchase an overseas Anti-DDoS Proxy instance and choose an insurance or unlimited mitigation plan according to specific needs.
If the server is deployed overseas but serves users in mainland China, consider these solutions:
Deploy Anti-DDoS Proxy instances overseas and domestically respectively, or adopt the above-mentioned double-layer protection and Sec-CMA solutions to ensure service stability and security.
Protected Assets:
Protecting Against Distributed Denial of Service (DDoS) Attack
Alibaba Clouder - January 20, 2021
Alibaba Clouder - December 23, 2020
Alibaba Clouder - January 20, 2021
Alibaba Clouder - July 15, 2021
Alibaba Clouder - April 8, 2021
Alibaba Clouder - June 26, 2019
Security Solution
Alibaba Cloud is committed to safeguarding the cloud security for every business.
Learn More
Security Overview
Simple, secure, and intelligent services.
Learn More
Data Security on the Cloud Solution
This solution helps you easily build a robust data security framework to safeguard your data assets throughout the data security lifecycle with ensured confidentiality, integrity, and availability of your data.
Learn More
Cloud Hardware Security Module (HSM)
Industry-standard hardware security modules (HSMs) deployed on Alibaba Cloud.
Learn More
