Help & DocumentationAegis Anti-DDoSOperations GuideBinding a Protected Domain Name to a Protective IP

Binding a Protected Domain Name to a Protective IP

Last updated: 2018-12-21 12:02:31

PDF


In the Aegis Anti-DDoS Console, select "Business Domain Name List" in the left pane, and click "Create a business and a domain name" in the right to automatically generate a protected domain name. You can access the protection service by pointing the CNAME of your business domain name to a protected domain name.

Flowchart

Process for Binding a Protected Domain Name to a Protective IP

  1. Create a business
    a. Click Business Domain Name List and then click Create a business and a domain name.
    1
    b. Enter the relevant information and click Create. After successful creation, the business and the free protected domain name are generated in "Business Domain Name List".
    2
  2. Add a protective IP
    a. In the business domain name list management page, click "Add IP" to go to the business details page.
    3
    b. Click "Add IP" under "Settings of IP resources and resolution" in the "Business Details" page.
    4
    c. Select a protective IP and click OK.
    5
  3. Enable domain name resolution
    After adding a protective IP, enable "Domain Name Resolution". The protected domain name provides intelligent resolution, i.e. the source IP of the end user is resolved to the IP of the corresponding line. For example, China Telecom users will be resolved to the protective IP for China Telecom, while China Unicom users will be resolved to the protective IP for China Unicom. If the protective IP of a line is blocked due to excessive attacks, it will be automatically resolved to another available protective IP.
    If "BGP Line First" is enabled, and a BGP line IP is bound, the protected domain name will preferentially schedule all business requests to be resolved to the BGP IP address. (Other non-BGP IPs with resolution enabled are in stand by.) If the BGP protective IP is jammed due to heavy-traffic attacks, the system will intelligently schedule business requests to non-BGP protective IPs with resolution enabled to provide high-bandwidth protection. After the BGP protective IP is unblocked, the system will schedule all business requests to it.
  4. Point the CNAME of the primary domain name to the protected domain name
    After line resolution is enabled, the business' primary domain name can be intelligently resolved to the protective IP by pointing the CNAME to the protected domain name.
    You can verify whether the domain name can be resolved to the protective IP using ping or nslookup locally.