Note:
The following instructions apply to customers onboarded after September 10, 2026.
This document describes how to quickly onboard cloud resources (CVM, CLB, EIP, WAF, LH, etc.) to DDoS Defender, helping you maintain business stability during large-scale traffic attacks. The entire process includes four steps: subscribing to a plan, creating a protection, associating protected resources, and configuring protection policies.
Workflow
|
Preparations | Register a Tencent Cloud account, complete identity verification, and confirm the cloud resources that need protection. |
Step 1: Subscribe to a plan | Select the Essential or Premium plan and complete the purchase. |
Step 2: Create a protection | Create a protection and select a protection level. |
Step 3: Associate cloud resources | Associate the cloud resources that need protection with the protection. |
Step 4: Configure protection policies | Enable and configure DDoS protection policies as needed on the protection details page. |
Preparations
A Tencent Cloud account has been registered with identity verification completed.
You already have cloud resources on Tencent Cloud that require protection (one or more of CVM, CLB, EIP, WAF, and LH).
Step 1: Subscribing to a Plan
2. Select a plan edition (Essential or Premium) based on your business protection needs. If you have additional protection requirements, you can also select the corresponding protection-capacity add-on.
3. After selecting the service agreement, complete the payment.
Step 2: Creating a Protection
After subscribing to a plan, you need to create a protection and select a protection level. A protection serves as the carrier for associating protected resources and applying protection policies. For detailed operations, see Creating a Protection. Step 3: Associating Cloud Resources
Associate the cloud resources that require protection (CVM, CLB, EIP, WAF, and LH) with the created protection. After the association is completed, you will obtain the protection capacity under the corresponding protection level. For detailed operations, see Associating Cloud Resources (CVM/CLB/EIP). Step 4: Configuring Protection Policies
Protection policies are used to match traffic that accesses associated protected resources and execute corresponding protection actions. They are centrally managed in the L3/4 DDoS Protection Policy Configuration area on the protection details page. Each sub-policy is displayed as a card and can be enabled and configured individually.
1. Log in to the Anti-DDoS console, select Protections in the left sidebar, and go to the Protections page. Click View Details of the target protection to go to the protection details page. 2. In the L3/4 DDoS Protection Policy Configuration area, find the sub-policy card you want to configure, click Settings on the right side of the card, and go to the configuration page of the sub-policy.
3. Enable sub-policies and configure rules based on your business needs.
Note:
The rules of each sub-policy take effect only when the protected resources are under attack.
Improper policy configuration may cause normal traffic to be mistakenly blocked. We recommend that you verify traffic characteristics based on Attack Events and Attack Trends before making adjustments, and prioritize policies with a smaller impact scope. You have completed the basic configuration for onboarding cloud resources to DDoS Defender.
Next Steps
1. You can view the protection list and its associated protected resources and protection level on the Anti-DDoS console > Protections page.
2. You can continuously view the attack and protection details of a protection through Attack Events and Attack Trends. For detailed operations, see Attack Events and Attack Trends.