Overview

Last updated: 2021-08-26 12:15:14

    Overview

    Anti-DDoS Advanced (Global Enterprise Edition) is a paid product that enhances DDoS protection capabilities for businesses deployed on Tencent Cloud.

    • Anti-DDoS Advanced (Global Enterprise Edition) owns ten Tencent Cloud entries around the world for handling bandwidth needs with all-out protection, making access to each node as smooth as possible.
    • Anycast provides near-source cleansing and near-source reinjection, with up to TB-level protection capability. It ensures smooth traffic and low latency by cleansing attack traffic and then forwarding normal traffic back to the real server close to the region of your Anti-DDoS Advanced (Global Enterprise Edition) instance deployed. The instance will directly protect the target IP on Tencent Cloud.

    Features

    Multi-dimensional protection

    Protection Type Description
    Malformed packet filtering Filters out frag flood, smurf, stream flood, and land flood attacks as well as malformed IP, TCP, and UDP packets.
    DDoS protection at the network layer Filters out UDP Flood, SYN Flood, TCP Flood, ICMP Flood, ACK Flood, FIN Flood, RST Flood and DNS/NTP/SSDP reflection attacks and null sessions.
    DDoS protection at the application layer Filters out CC attacks and slow HTTP attacks and supports HTTP custom filtering such as host filtering, user-agent filtering, and referer filtering.

    Flexible defense options

    Anti-DDoS Advanced (Global Enterprise Edition) supports switching IPs of the protected object to meet your protection needs for public IPs of Tencent Cloud resources outside the Chinese mainland. The objects that support switching include CVM and CLB.

    Note:

    This service is supported in Moscow, Silicon Valley, Frankfurt, Seoul and Hong Kong (China), and will be available soon in Virginia, Tokyo, Singapore, Bangkok and Mumbai.

    Security protection policy

    Anti-DDoS Advanced (Global Enterprise Edition) provides basic security policies by default on the basis of protection algorithms such as IP profiling, behavior pattern analysis, and AI-based smart recognition, effectively coping with common DDoS attacks. It also offers diverse and flexible protection policies, which can be tailored to your special needs to deal with ever-changing attack tricks.

    Self-Service IP unblocking

    If a protected business IP is blocked when the attack traffic bursts or the protection bandwidth of your Anti-DDoS Advanced (Global Enterprise Edition) instance is too low, you can unblock the IP in a self-service manner in the console.

    Protection statistical reports

    Anti-DDoS Advanced (Global Enterprise Edition) provides multi-dimensional traffic reports and attack protection details to help you stay on top of the protection effects of Anycast Anti-DDoS Advanced (Global Enterprise Edition) instances in a timely and accurate manner.

    Note:

    Only DDoS attack protection reports can be displayed currently. CC attack protection and business reports will be available in the future.