This document describes how to connect a website application to an Anti-DDoS Advanced instance and verify the forwarding configuration.
Currently, website businesses support access from only the Beijing, Shanghai, and Guangzhou regions but not regions outside Mainland China.
On the Add forwarding rule page, configure the following parameters as needed and click OK.
|Business Scenario||Related Operations|
|Websites containing only HTTP protocol||Select **HTTP**.|
|Websites containing only HTTPS protocol||
- From left to right, the pasted contents are the domain name, protocol, real server IP (real server domain name is not supported currently), and real server port. The real server IP and real server port are separated with ":", and the rest are separated with space. Only one forwarding rule can be entered per line.
- The number of forwarding rules to be added in batches cannot exceed the current available quota.
To prevent service unavailability that occurs when the real server blocks the intermediate IP of Anti-DDoS Advanced, you are recommended to configure allowlist policies for the real server infrastructure, including firewall, web application firewall, intrusion protection system (IPS), and traffic management system, and disable the protection features of the host firewall and other security software programs (such as Safedog) on the real server or set allowlist policies for them, so that the intermediate IP will not be affected by the security policies of the real server.
You can log in to the Anti-DDoS Console, select Anti-DDoS Advanced > Resource List on the left sidebar, find the row of the target Anti-DDoS Advanced instance, and click its ID/Name to view its detailed intermediate IP range on the Basic Information page that pops up.
After the forwarding configuration is completed, the protected IP of Anti-DDoS Advanced will forward the packets from the relevant port to the corresponding real server port based on the forwarding rules.
To ensure the stability of your business, a local test is recommended. The verification method is as follows:
hostsfile to forward local requests to the protected website to the protected IP.
C:\Windows\System32\drivers\etcon your local compute and add the following content at the end:
<Protected IP address> <Domain name of the protected website>
pingcommand on the protected domain name on the local computer.
hostsfile, the forwarding is successful.
If the resolved IP address is still the real server IP address, try running the
ipconfig/flushdnscommand on Windows Command Prompt to clear the local DNS cache.
hosts, check whether the domain name can be accessed.
If the verification still fails with the correct method, please log in to the Anti-DDoS Console and check whether the configuration is correct. If the problem persists after you fix any incorrect configuration items, please contact Tencent Cloud technical support.
Before using Anti-DDoS Advanced, you need to configure the A record of your business domain name's DNS with a protected IP, so that all user access requests to your site will pass through Anti-DDoS Advanced first before arriving at the real server (that is, all traffic will be first forwarded to Anti-DDoS Advanced before getting to the real server).