Anti-DDoS:User Guide

Operation

Anti-DDoS Basic

Anti-DDoS Origin

Anti-DDoS Proxy

Purchase an Anti-DDoS instance

You do not need to purchase an instance.

Purchase an Anti-DDoS Origin instance

Purchase an Anti-DDoS Proxy instance

Add a service to an Anti-DDoS instance

You do not need to perform this operation.

Add an object for protection

1. Complete configurations in the Anti-DDoS Proxy console.

   • Website configuration

     • Add a website

     • Modify the back-to-origin settings for a website

     • Specify custom ports

     • Upload an SSL certificate

     • Configure a custom TLS security policy

     • Mark back-to-origin requests

   • Port configuration

     • Configure port forwarding rules

     • Modify the back-to-origin settings for a port

     • Configure a health check

     • Configure session persistence

2. Allow back-to-origin IP addresses to access the origin server.

3. Verify the forwarding configurations on your computer.

4. Add a service to the instance.

   • Map the domain name of a website to a CNAME or an IP address

   • Modify the CNAME record to protect a non-website service

Configure mitigation policies

You do not need to perform this operation.

Use the mitigation settings feature (public preview)

• Protection for infrastructure

  • Configure the blacklist and whitelist (IP address-based) feature

  • Configure the location blacklist feature

  • Configure the blackhole filtering deactivation feature

  • Configure the near-origin traffic diversion feature

  • Configure the UDP reflection attack mitigation feature

• Protection for website services

  • Configure the intelligent protection feature

  • Configure the global mitigation policy feature

  • Configure the blacklist/whitelist (domain names) feature

  • Configure the location blacklist (domain names) feature

  • Configure the HTTP flood mitigation feature

• Protection for non-website services

  • Configure the intelligent protection feature for Layer 4 services

  • Configure the DDoS mitigation policy feature

  • Configure the speed limit for source IP addresses

Configure monitoring and alerting

Configure alert notifications for DDoS attack events.

Configure alert notifications for DDoS attack events

Use the alert monitoring feature of CloudMonitor

View protection data

• View information on the Assets page.

• View information on the Event Center page.

• View information on the Attack Analysis page

• View information on the Assets page.

• View information on the Event Center page.

• Enable mitigation analysis

• View information on the Attack Analysis page

• Use the log analysis feature

• Query system logs

• Query operation logs

• Query advanced mitigation logs