tencent cloud

Use Cases

Anti-DDoS Pro allows you to adjust protection policies and provides three protection levels against DDoS attacks. The protection operations at each level are as described below:

If you need to use the UDP protocol, please contact Tencent Cloud Technical Support to customize a policy and avoid impact on business operations when in strict mode.

By default, your purchased Anti-DDoS Pro instance uses the Normal protection level, which can be changed based on your actual business needs. In addition, you can customize the cleansing threshold. If the attack traffic exceeds the threshold, the cleansing policy will be automatically triggered.

Configuration Sample

This section takes instance "bgp-000006ee" in South China (Guangzhou) as an example to describe the configurations.

1. Log in to the Anti-DDoS Console, select Anti-DDoS Pro > Resource List on the left sidebar, click Single IP Instance, select South China (Guangzhou) in the region selection box, find the single IP instance named "bgp-000006ee", and click Protection Configuration on the right.
2. In the pop-up Anti-DDoS configuration page, enable Protection Status to set the cleansing threshold and protection level.

   The configuration items are visible only when "Protection Status" is . If you disable the protection, the configuration items will be hidden and will not take effect. After you enable the protection again, the items will be visible again and retain the original configurations.

Configuration parameter descriptions:

• Protection status
  Protection is enabled by default. You can enable or disable it as needed and set the duration for disablement. Currently, the duration can only be 1–6 hours. The Anti-DDoS Pro instance will automatically enable protection after the set duration elapses or when the attack traffic bandwidth exceeds 1 million pps or 2 Gbps.
• Cleansing threshold
• It indicates the threshold to trigger cleansing. If the traffic is below the threshold, no cleansing operation will be executed even if attacks are detected.
• After protection is enabled, the Anti-DDoS Pro instance, if just connected to your business, will use the default cleansing threshold value by default. As the business traffic changes, the system will automatically learn to calculate a baseline value. You can set the cleansing threshold based on your business protection needs at any time.

  If you have a clear concept about the threshold, set it as needed; otherwise, please use the default value. Anti-DDoS will automatically learn through AI algorithms and calculate the default threshold for you.

• Protection level
  After protection is enabled, the Anti-DDoS Pro instance, if just connected to your business, will use the Normal protection level by default. You can adjust the level based on your business protection needs at any time.
• Other configuration items
  • Scenario
    You can select and modify a matched scenario from the created ones as needed. When a scenario is selected, the corresponding "advanced policy" will be automatically generated accordingly. For more information on how to create a scenario, please see Configuring Scenarios.
  • Advanced policy
    You can select and modify a matched advanced policy from the created ones based on your business protection characteristics. For more information on how to create an advanced policy, please see Managing Advanced Anti-DDoS Protection Policies.
  • Alarm threshold for DDoS attacks
    You can configure an alarm threshold for new DDoS attacks. If the detected metric exceeds the set threshold, an alarm will be triggered and alarm notifications will be pushed to you. For more information on how to set an alarm threshold, please see Configuring Attack Alarm Thresholds.
  • AI-based enhanced protection for TCP business
    For layer-4 TCP business, Anti-DDoS Pro provides AI-based enhanced protection. After this feature is enabled, through self-learning of business routine characteristics with the aid of AI models, Anti-DDoS Pro can automatically distinguish between business traffic and attack traffic, effectively defending your business against layer-4 CC attacks.

    Currently, AI-based enhanced protection for TCP business is only available to allowed users.