Anti-DDoS is based on Tencent's cumulative security attack and defense and practical experience in various fields such as social, gaming, news, and finance. It provides a wide selection of security solutions to satisfy your security protection needs to handle various DDoS attacks in different business scenarios.
This document describes the basic information and use cases of different Anti-DDoS protection solutions.
Note:
Product name | Applicable Users | Protected Object | Access Method | Billing Mode | Protection Capability | Configuration Features | Self-Service Unblocking |
Anti-DDoS Basic | Only for Tencent Cloud users. | Suitable for Tencent Cloud products, such as CVM, CLB, and NAT Gateway. | No configuration required. | Free. | All customers are, by default, provided with DDoS protection capability of up to 2 Gbps. | No configuration required. Protection is enabled automatically for the IPs of Tencent Cloud resources. | None |
Only for Tencent Cloud users in Beijing, Shanghai, and Guangzhou regions. | Suitable for Tencent Cloud products, including CVM, CLB, WAF, CBM, Blackstone Cloud Load Balancer, NAT IP, EIP, GAAP IP, etc. It also applies to users who have a large number of Cloud services IPs requiring protection. | The protected IP will take effect after being bound on the DDoS protection console. For more information, see Quick Start. | Billing based on the protected IP number and business scale. | Tencent Cloud provides all-out protection. The highest protection capability is dynamically adjusted according to the actual network conditions of each region. | No need to change service. After purchase, just bind the IP of Tencent Cloud resources that need protection, and you can have higher protection against DDoS. | 3 times daily | |
For Tencent Cloud users inside/outside Chinese mainland. | Suitable for Tencent Cloud Anti-DDoS EIP. The Anti-DDoS EIP supports binding cloud resources, including CVM, private network CLB, CBM, and NAT Gateway. | You need to create an Anti-DDoS EIP and bind it before it can finally take effect. For more details, see Quick Start. | Chinese mainland: The protection capability adopts a way of baseline protection + Elastic Protection. Overseas regions: Use the capabilities of Tencent Cloud Anti-DDoS cleansing center for all-out protection. | Chinese mainland: Protection routes are divided into two kinds: BGP line and non-BGP lines, both of which can provide Tbps-level protection capability. Overseas regions: Leverage the capabilities of Tencent Cloud Anti-DDoS cleansing center for all-out protection. The highest protection capability is dynamically adjusted according to the actual network conditions of each region. Support up to T-level protection. | No need to change service. Create an anti-DDoS EIP and bind it to an anti-DDoS instance. After the EIP is bound to a business resource, it has protection against DDoS. | 3 times daily | |
Limited to users inside/outside Chinese mainland of Tencent Cloud. Currently in beta. (The end time of the beta test will be notified separately. To purchase, contact us.) | Suitable for Tencent Cloud products, including CVM, CLB, WAF, CBM, Blackstone Cloud Load Balancer, NAT IP, EIP, GAAP IP, etc. It also applies to users who have a large number of Cloud services IPs requiring protection. | The protected IP will take effect after being bound on the DDoS protection console. | Billing based on the protected IP number and business scale. | Tencent Cloud provides all-out protection. The highest protection capability does not exceed 50 Gbps. | No need to change service. After purchase, just bind the IP of Tencent Cloud resources that need protection, and you can have higher protection against DDoS. | ||
Only for Tencent Cloud users in Beijing, Shanghai, Guangzhou, Chengdu, and Nanjing. | Applicable only to Tencent Cloud Lighthouse. | The protected IP will take effect after being bound on the DDoS protection console. For more information, see Quick Start. | Billing based on "single IP + highest protection capability + protection validity period". | Tencent Cloud provides all-out protection. The highest protection capability does not exceed 10 Gbps. | No need to change service. It takes effect after binding the IP of the lightweight server that needs protection after purchase. | 3 times per month | |
Oriented to business, it is for all Internet users deployed in the Chinese mainland. | Supports TCP, UDP, HTTP and HTTPS services (websocket supported by default). | After being proxied by the Anti-DDoS IP, it is forwarded to the backend origin server IP. For more details, see Website Access Service and Non-Website Business Access. | Billing based on the combination method of "guaranteed protection + Elastic Protection + bandwidth + number of forwarding rules". | Support HTTP/HTTPS CC Protection. Protection routes are divided into two kinds: BGP line and non-BGP lines. BGP line provides Tbps-level protection capability at most. Non-BGP lines can provide Tbps-level protection capability at most. | Integrate by configuring forwarding rules. Use the Anti-DDoS IP as the external service address of the origin server to hide the user's origin server. | 3 times daily | |
Oriented to business, it is for all Internet users deployed outside the Chinese mainland. | Supports TCP, UDP, HTTP and HTTPS services (websocket supported by default). | After being proxied by the Anti-DDoS IP, it is forwarded to the backend origin server IP. For more details, see Website Access Service and Non-Website Business Access. | Billing based on the combination of "baseline protection + Elastic Protection + bandwidth + number of forwarding rules". | Currently, the highest protection capability of up to 400 Gbps can be provided. Support HTTP/HTTPS CC Protection. Scrubbing centers are deployed in Hong Kong (China), Singapore, Seoul, Tokyo, Virginia, Frankfurt, etc. | Integrate by configuring forwarding rules. Use the Anti-DDoS IP as the external service address of the origin server to hide the user's origin server. | 3 times daily | |
Oriented to business, it is for Tencent Cloud users deployed outside the Chinese mainland. | Suitable for partial Tencent Cloud products, including CVM, CLB. | The protected IP will take effect after being bound on the DDoS protection console. For more information, see Quick Start. | Use the flexible pay-as-you-go mode of "all-out protection + pay-as-you-go business bandwidth + quarterly sales". | Provide global Tbps-level protection capability. The coverage areas of the cleanse nodes include: Hong Kong (China), Singapore, Seoul, Tokyo, Virginia, Frankfurt, Bangkok. | After purchase, just associate the instance IP with the Tencent Cloud resources that need protection, and you can have higher protection against DDoS. | 3 times daily |