Comparison of Anti-DDoS Protection Schemes

Last updated: 2020-07-07 17:19:07

Based on Tencent's many years of practical experience in security and attack protection in various fields such as social networking, gaming, news, and finance, Anti-DDoS provides a rich set of comprehensive security solutions, satisfying your needs in security protection against different DDoS attacks in different business scenarios.

This document describes the basic information and use cases of different Anti-DDoS solutions.

If you want to customize a dedicated security solution, please submit a ticket for assistance.

Product Name Applicable User Projected Object Connection Method Billing Mode Protection Capability Configuration Description
Anti-DDoS Basic Tencent Cloud resources only It is applicable to Tencent Cloud services such as CVM and CLB. General users can enjoy security protection of 2 Gbps, while VIP users 10 Gbps. No configuration is required. Free of charge.
  • It mainly protects the businesses of Tencent Cloud users that are unlikely to be attacked and where attack traffic does not exceed the free basic protection capability. If you need a higher protection capability, you are recommended to use Anti-DDoS Pro.
  • By default, general users can enjoy protection of 2 Gbps, while VIP users 10 Gbps. If your business is frequently attacked, Tencent Cloud will adjust the basic DDoS protection capability based on historical attacks to ensure the overall stability of the Tencent Cloud platform.
Tencent Cloud service IPs are automatically protected with no configuration required.
Anti-DDoS Pro Tencent Cloud resources in Beijing, Shanghai, and Guangzhou regions only It is applicable to Tencent Cloud services such as CVM, CLB, WAF, NAT IP, EIP, and GAAP IP and users who have a lot of Tencent Cloud service IPs that need to be protected. It takes effect after a protected IP is bounded in the Anti-DDoS Console. For more information, please see Getting Started. It is billed by protected times and number of protected resources.
  • Tencent Cloud provides at least 30 Gbps DDoS protection capability within the purchased protected times. The maximum protection capability is adjusted dynamically based on the actual network conditions of the region.
  • HTTP CC protection is supported.
You can enjoy a higher DDoS protection capability simply by purchasing an Anti-DDoS Pro instance and binding the Tencent Cloud service IP to be protected with no need to adjust your business.
Anti-DDoS Advanced
(in Mainland China)
All internet users whose businesses are deployed in Mainland China TCP, UDP, HTTP, and HTTPS businesses are supported (WebSocket is supported by default). The traffic is sent to the proxy through the Anti-DDoS Advanced instance and then forwarded to the backend real server IP. For more information, please see Website Business Connection and Non-website Business Connection. It is billed by base protection bandwidth, elastic protection bandwidth, forwarding bandwidth, and number of forwarding rules. HTTP/HTTPS CC protection is supported.
Protective lines include BGP line and non-BGP line:
  • BGP line provides an up to 300 Gbps protection capability.
  • Non-BGP line provides an up to 1 Tbps protection capability.
By configuring connection based on a forwarding rule, you can use an Anti-DDoS Advanced instance as the address to provide your business and hide your real server.
Anti-DDoS Advanced
(outside Mainland China)
All internet users whose businesses are deployed outside Mainland China TCP, UDP, HTTP, and HTTPS businesses are supported (WebSocket is supported by default). The traffic is sent to the proxy through the Anti-DDoS Advanced instance and then forwarded to the backend real server IP. For more information, please see Website Business Connection and Non-website Business Connection. It is billed by base protection bandwidth, elastic protection bandwidth, forwarding bandwidth, and number of forwarding rules.
  • Currently, an up to 400 Gbps protection capability is provided.
  • HTTP/HTTPS CC protection is supported.
  • The cleansing centers are deployed in regions such as Hong Kong (China), Taiwan (China), Singapore, Seoul, Tokyo, and Virginia.
By configuring connection based on a forwarding rule, you can use an Anti-DDoS Advanced instance as the address to provide your business and hide your real server.

Was this page helpful?

Was this page helpful?

  • Not at all
  • Not very helpful
  • Somewhat helpful
  • Very helpful
  • Extremely helpful
Send Feedback
Help