Use EIPs protected by Anti-DDoS Pro/Premium - Elastic IP Address

Elastic IP addresses (EIPs) protected by Anti-DDoS Pro/Premium can mitigate DDoS attacks at the Tbit/s level. EIPs protected by Anti-DDoS Pro/Premium are suitable for scenarios that require high security and low latency, such as large-scale gaming and important livestreaming activities. This topic describes how to purchase and use EIPs protected by Anti-DDoS Pro/Premium.

Limits on using EIPs protected by Anti-DDoS Origin Basic

By default, EIPs can mitigate DDoS attacks at up to 5 Gbit/s. The free mitigation threshold varies with the region. For more information, see View the thresholds that trigger blackhole filtering in Anti-DDoS Origin Basic.

Descriptions

You can select Anti-DDoS Pro/Premium when you create an EIP. EIPs protected by Anti-DDoS Pro/Premium can mitigate DDoS attacks at the Tbit/s level.

You do not need to perform additional configurations for Anti-DDoS Pro/Premium or change your service IP addresses when you use EIPs protected by Anti-DDoS Pro/Premium. EIPs protected by Anti-DDoS Pro/Premium are ideal for scenarios that require high security and low latency, such as large-scale gaming and important livestreaming activities.

原生高防EIP

Billing rules

Only pay-as-you-go EIPs support Anti-DDoS Pro/Premium. You are charged a security protection fee after you purchase an EIP protected by Anti-DDoS Pro/Premium. The following figure shows the billable items of EIPs protected by Anti-DDoS Pro/Premium. 高防EIP计费组成

For more information about the bandwidth fee or data transfer fee of a pay-as-you-go EIP, or the billing rules of EIP configuration fees, see Pay-as-you-go EIPs.
For more information about the billing rules of security protection, see Billing.
Note
The security protection fee is charged additionally and does not affect the billing of EIPs.

Limits

Only pay-as-you-go EIPs of the BGP (Multi-ISP) type support Anti-DDoS Pro/Premium
.
If you specify an IP address pool to create EIPs protected by Anti-DDoS Pro/Premium, the IP address pool must be of the Anti-DDoS Pro/Premium type.
You can select Anti-DDoS Pro/Premium only when you create EIPs and IP address pools. You cannot switch the security protection type between Default and Anti-DDoS Pro/Premium for existing EIPs.

The following regions support Anti-DDoS Pro/Premium:

Regions that support EIPs protected by Anti-DDoS Pro/Premium

Area	Region
China	China (Beijing), China (Hangzhou), China (Shanghai), and China (Hong Kong)
Asia Pacific	Philippines (Manila), Japan (Tokyo), Singapore, Malaysia (Kuala Lumpur), and Indonesia (Jakarta)
Europe & Americas	US (Virginia), US (Silicon Valley), Germany (Frankfurt), and UK (London)

Regions that support IP address pools of the Anti-DDoS Pro/Premium type

Area	Region
China	China (Hong Kong)
Asia Pacific	Philippines (Manila), Japan (Tokyo), Singapore, Malaysia (Kuala Lumpur), and Indonesia (Jakarta)
Europe & Americas	US (Virginia), US (Silicon Valley), Germany (Frankfurt), and UK (London).

Procedure

Allocate EIPs protected by Anti-DDoS Pro/Premium from an IP address pool

Click Anti-DDoS Origin (Pay-As-You-Go) to activate Anti-DDoS Origin (pay-as-you-go) for the Alibaba Cloud account that is used to purchase EIPs protected by Anti-DDoS Pro/Premium.
If Anti-DDoS Origin (pay-as-you-go) is already activated, skip this step.
Warning
Anti-DDoS Origin (pay-as-you-go) is activated on a monthly basis for at least 30 days. You cannot deactivate the service within 30 days after the service is activated. After you activate Anti-DDoS Origin (pay-as-you-go) and add a service to be protected, the billing starts. For more information about the billing rules of security protection, see Billing.
On the EIP buy page, purchase an EIP protected by Anti-DDoS Pro/Premium. For more information, see Apply for an EIP.
On the buy page:
- Billing Method: Select Pay-As-You-Go.
- Line Type: Select BGP (Multi-ISP).
- Security Protection: Select Anti-DDoS Pro/Premium.
- IP Address Pool: Select Default.
Optional: Log on to the Traffic Security console. On the Traffic Security > Network Security > Anti-DDoS Origin > Billing Management page, click Details to apply for an adjustment to the bandwidth.

Specify an IP address pool to allocate EIPs protected by Anti-DDoS Pro/Premium

Click Anti-DDoS Origin (Pay-As-You-Go) to activate Anti-DDoS Origin (pay-as-you-go) for the Alibaba Cloud account that is used to purchase EIPs protected by Anti-DDoS Pro/Premium.
If Anti-DDoS Origin (pay-as-you-go) is already activated, skip this step.
Warning
Anti-DDoS Origin (pay-as-you-go) is activated on a monthly basis for at least 30 days. You cannot deactivate the service within 30 days after the service is activated. After you activate Anti-DDoS Origin (pay-as-you-go) and add a service to be protected, the billing starts. For more information about the billing rules of security protection, see Billing.
Create an IP address pool of the Anti-DDoS Pro/Premium type and add CIDR blocks. For more information, see Create an IP address pool and add CIDR blocks.
On the buy page:
- Line Type: Select BGP (Multi-ISP).
- Security Protection: Select Anti-DDoS Pro/Premium.
On the EIP buy page, purchase an EIP protected by Anti-DDoS Pro/Premium. For more information, see Apply for an EIP.
On the buy page:
- Billing Method: Select Pay-As-You-Go.
- Line Type: Select BGP (Multi-ISP).
- Security Protection: Select Anti-DDoS Pro/Premium.
- IP Address Pool: Select the IP address pool of the Anti-DDoS Pro/Premium type.
Optional: Log on to the Traffic Security console. On the Network Security > Billing Management page, view the usage. You can also click Change Bandwidth Specification to apply for an adjustment to the bandwidth.