tencent cloud

Anti-DDoS Advanced (Global Enterprise Edition) supports blocking the source traffic accessing Anti-DDoS instances based on specified protocols, such as ICMP, TCP, UDP, and other protocols. After the configuration is completed, all matched access requests will be directly blocked. Due to the connectionless feature of UDP protocol (unlike TCP, which requires a three-way handshake process), it has natural security vulnerabilities. If you do not have UDP businesses, we recommend blocking the UDP protocol.

Prerequisite

You have purchased an Anti-DDoS Advanced (Global Enterprise Edition) instance and set the object to protect.

Directions

1. Log in to the Anti-DDoS Advanced (Global Enterprise Edition) console and select Anti-DDoS Advanced > Configurations > DDoS Protection.
2. Select an Anti-DDoS Advanced instance ID in the list on the left, such as "xxx.xx.xx.xx bgpip-000003n2".
   
3. Click Set in the Block by protocol section.
4. Click Create. On the pop-up page, enter the instance ID, configure the settings you need, and then click OK.
   
5. After the rule is created, it is added to the list. You can turn the settings on or off as needed.