Anti-DDoS Proxy (Chinese Mainland) and Anti-DDoS Proxy (Outside Chinese Mainland) provide the Standard and Enhanced function plans. The Enhanced function plan provides the following features in addition to all the features of the Standard function plan: static page caching, non-standard ports, and the location blacklist. You can select a function plan based on your business requirements. This topic describes the differences between the Standard and Enhanced function plans.
Feature differences
The Enhanced function plan provides the following features in addition to all the features of the Standard function plan:
Service adding
Protects websites that provide services over ports 80, 8080, 443, and 8443 and non-standard HTTP, HTTPS, WebSocket, and WebSockets ports. For more information, see Specify custom ports.
Supports custom Transport Layer Security (TLS) protocol versions and cipher suites. For more information, see Configure a custom TLS security policy.
Supports the Alibaba Cloud CDN (CDN) or Dynamic Content Delivery Network (DCDN) interaction feature to provide access acceleration and DDoS mitigation capabilities. For more information, see Use the CDN or DCDN interaction feature.
Supports application layer protection in port forwarding configurations. This feature can protect against application layer attacks that do not utilize HTTP or HTTPS protocols. For more information, see Configure port forwarding rules.
Mitigation settings
Supports the location blacklist to block requests from IP addresses in and outside China. For more information, see Configure the location blacklist feature and Configure the location blacklist (domain names) feature.
Supports the static page caching feature to accelerate website access. For more information, see Anti-DDoS Lab.
Supports the UDP reflection attack mitigation feature. This feature takes effect on only UDP traffic and allows you to filter out common UDP reflection attacks with a few clicks. For more information, see Configure the UDP reflection attack mitigation feature.
Supports packet feature filtering, which accurately distinguishes between normal service traffic and attack traffic by analyzing packet payloads to protect against attacks. This feature also allows you to configure access control rules based on application-layer protocols. For more information, see Configure a DDoS mitigation policy.
Price differences
The price of an instance that uses the Enhanced function plan is USD 1,145 per month higher than the price of an instance that uses the Standard function plan at the same specifications.
Upgrade and downgrade
An instance that uses the Standard function plan can be upgraded to the Enhanced function plan. An instance that uses the Enhanced function plan cannot be downgraded to the Standard function plan. For more information, see Upgrade an instance.