Anti-DDoS:What is Anti-DDoS Origin?

How Anti-DDoS Origin works

Anti-DDoS Origin protects your resources against Layer 3 and Layer 4 volumetric attacks. When the traffic exceeds the default traffic scrubbing threshold of Anti-DDoS Origin, traffic scrubbing is automatically triggered to mitigate DDoS attacks.

Anti-DDoS Origin adopts passive scrubbing as a major mitigation approach and active blocking as an auxiliary approach to mitigate DDoS attacks. Anti-DDoS Origin uses conventional technologies such as reverse detection, blacklists, whitelists, and packet compliance. This way, your asset that is protected by Anti-DDoS Origin can work as expected even when an attack is ongoing. Anti-DDoS Origin deploys a DDoS attack detection and traffic scrubbing system at the egress of an Alibaba Cloud data center. This system is deployed in bypass mode.

Why choose Anti-DDoS Origin

• Anti-DDoS Origin starts to protect your service immediately after you purchase an instance. Anti-DDoS Origin supports quick deployment within at least one minute. Anti-DDoS Origin directly protects your cloud services. This eliminates the need to deploy mitigation plans and switch IP addresses.

• Anti-DDoS Origin provides burstable protection. When your assets experience volumetric DDoS attacks, Anti-DDoS Origin uses all resources in a region to provide best-effort protection.

• Anti-DDoS Origin adopts Alibaba Cloud Border Gateway Protocol (BGP) bandwidth resources across different Internet service providers (ISPs). The ISPs include China Telecom, China Unicom, China Mobile, China Education and Research Network (CERNET), and Great Wall Broadband Network. You can obtain fast access to the networks of the ISPs by using only one IP address.

• Anti-DDoS Origin provides protection bandwidth as required. This can ensure service stability and security for big promotions, event releases, and important services.

• Anti-DDoS Origin supports protection capacity sharing among multiple IP addresses. This enhances protection for multiple IP addresses.

Editions

• Anti-DDoS Origin 1.0: Anti-DDoS Origin 1.0 Enterprise. You must select a region when you purchase an Anti-DDoS Origin 1.0 Enterprise instance. The instance can protect only the assets that reside in the same region as the instance.

• Anti-DDoS Origin 2.0 (Subscription): Anti-DDoS Origin 2.0 of Inclusive Edition for Small and Medium Enterprises and Anti-DDoS Origin 2.0 Enterprise.

  • Anti-DDoS Origin 2.0 of Inclusive Edition for Small and Medium Enterprises: You can select any region when you purchase an instance of Anti-DDoS Origin 2.0 of Inclusive Edition for Small and Medium Enterprises. However, the instance can only protect assets in one region within the current Alibaba Cloud account.

  • Anti-DDoS Origin 2.0 Enterprise: You need to only purchase an instance to protect assets in all regions within the current Alibaba Cloud account.

  Note

  We recommend that you purchase an Anti-DDoS Origin 2.0 Enterprise instance instead of an Anti-DDoS Origin 1.0 Enterprise instance.

• Anti-DDoS Origin 2.0 (Pay-as-you-go): You can add a regular Alibaba Cloud service to an Anti-DDoS Origin 2.0 (Pay-as-you-go) instance for protection. You can also purchase an Anti-DDoS Origin 2.0 (Pay-as-you-go) instance and then purchase an elastic IP address (EIP) with Anti-DDoS (Enhanced) enabled.

  Note

  • Regular Alibaba Cloud service: If you do not specify a DDoS mitigation capability when you purchase an Alibaba Cloud service, only the basic DDoS mitigation capability from 500 Mbit/s to 5 Gbit/s is provided.

  • EIP with Anti-DDoS (Enhanced) enabled: The Elastic IP addresses (EIPs) for which Security Protection is set to Anti-DDoS (Enhanced) when you purchase the EIPs are supported.

Mitigation capabilities

Anti-DDoS Origin provides best-effort protection, which defends against DDoS attacks based on the network capacity of the cloud data center. The level of best-effort protection is dynamic, improving as Alibaba Cloud enhances its network infrastructure. However, during times of high demand on data center resources, the protection level may be reduced. Anti-DDoS Origin is available in editions 1.0 and 2.0, with edition 1.0 no longer available for new purchases. The table below shows only the reference mitigation capabilities of Anti-DDoS Origin 2.0.

Feature comparison

The following table describes the features of different editions.

Limits

You can directly purchase Anti-DDoS Origin instances only in the Chinese mainland. If you want to purchase an Anti-DDoS Origin instance outside the Chinese mainland, contact your account manager. For more information about how to contact the account manager, see Contact us.

How to use an Anti-DDoS Origin instance

1. Purchase an Anti-DDoS Origin instance. For more information, see Purchase an Anti-DDoS Origin instance.

2. Add an asset that is assigned a public IP address to the instance. For more information, see Add an object for protection.

3. Create custom mitigation policies based on your business requirements. For more information, see Use the mitigation settings feature (previous version).

4. View monitoring data of service traffic. For more information, see Use the service monitoring feature.

5. Enable the mitigation logs feature. You can use this feature to query and analyze mitigation logs and view mitigation reports. For more information, see Enable mitigation analysis.

6. View the attack event details after an attack occurred. For more information, see View information on the Attack Analysis page.

7. View blackhole filtering events and traffic scrubbing events. For more information, see View the Event Center page.