Note:
Customers onboarded after September 10, 2026 are subject to the following instructions. If you are an existing Anti-DDoS Pro or Anti-DDoS Advanced customer, see historical documentation. What to Do If Protected Resources of DDoS Defender Are Blocked?
After subscribing to DDoS Defender service, a single Tencent Cloud root account has 3 self-service unblocking opportunities per day. If the self-service unblocking operations exceed 3 times in a day, the account cannot perform further self-service unblocking. The system resets the self-service unblocking quota at midnight every day, and unused self-service unblocking opportunities on a given day do not carry over to the next day.
If the unblocking quota is used up:
For resources not bound to a DDoS Defender plan (Standard Protection level), bind a plan and upgrade to the Advanced Protection or Ultimate Protection level to increase protection capacity and unblock resources earlier.
For resources already bound to a DDoS Defender plan, you can wait for the system to unblock them automatically. We also recommend upgrading the plan edition or purchasing additional protection capacity add-ons to increase protection capacity for the next attack.
Why Are Resources Blocked?
Tencent Cloud triggers blocking when the attack traffic targeting a protected resource exceeds its current protection capacity, to prevent the attack from affecting other unaffected users on the cloud platform. For details on trigger conditions and principles, see Blocking Policy. How Long Does a Block Last?
The blocking duration is 2 hours by default and can be up to 24 hours. The actual duration is affected by factors such as whether the attack persists, its frequency, and traffic volume. For details, see Blocking Policy. Why Can't a Block Be Lifted Immediately?
Typically, a DDoS attack lasts for a period of time and does not stop immediately after blocking is triggered. The exact duration varies. The Tencent Cloud security team sets the default blocking duration based on the results of big data analysis.
Because blocking takes effect on the carrier network side, Tencent Cloud cannot monitor whether attack traffic has stopped after a resource is blocked. If the block is lifted while the attack is still ongoing, the resource will be blocked again. During the period between lifting the block and the next block taking effect, attack traffic directly enters Tencent Cloud's basic network and may affect other users in the cloud. In addition, blocking is a service purchased by Tencent Cloud from carriers, and the number and frequency of unblocking operations are limited.
Why Are There Limits on Self-Service Unblocking?
Blocking is a service that Tencent Cloud purchases from carriers. Carriers impose explicit limits on unblocking time and frequency, so the blocking status cannot be manually lifted frequently.