Overview
Anti-DDoS offers comprehensive, efficient, and professional DDoS protection capabilities, providing businesses with various DDoS solutions such as Anti-DDoS Basic, Anti-DDoS Pro, and Anti-DDoS Advanced to combat DDoS attacks. Through ample and high-quality DDoS protection resources, combined with continuously evolving "self-research + AI Intelligent Identification" cleaning algorithms, it ensures the stable and secure operation of user businesses. Protection scenarios cover industries such as gaming, internet, video, finance, and government.
Product Package
Anti-DDoS Pro Package
Anti-DDoS Pro (Standard)
Anti-DDoS Pro (standard version) is designed for Tencent Cloud users whose businesses are deployed domestically.
Tencent Cloud provides full protection, with the highest protection capability dynamically adjusted according to the actual network situation in each region. There is no need to change the ip address; after purchasing, you only need to bind the ip that needs protection to use it.
Anti-DDoS Pro (Enterprise Edition)
Anti-DDoS Pro (corporate version) is designed for Tencent Cloud users whose businesses are deployed both domestically and internationally.
It has T-level protection capabilities both domestically and internationally, and it can only take effect after creating and binding a high-protection EIP. Suitable for businesses with high requirements for business security. Rich protection capabilities can be flexibly selected and configured according to needs, and purchased in combination to control business protection costs.
Chinese mainland region: The protection capability adopts a combination of baseline protection and elastic protection.
Region outside Chinese mainland: Utilize the capabilities of Tencent Cloud's high-protection scrubbing center for full protection.
Note:
Chinese mainland regions: Beijing, Shanghai, Guangzhou.
Regions outside Chinese mainland: Hong Kong (China), Singapore, Tokyo, Jakarta, Silicon Valley, Frankfurt, Virginia, São Paulo.
Full protection: Aiming to successfully defend against every DDoS attack, it integrates the current local cleaning center capabilities to fully resist attacks. Both at home and abroad have T-level protection capabilities.
Anti-DDoS Pro (Inclusive Edition)
Anti-DDoS Pro (inclusive edition) is designed for Tencent Cloud users whose businesses are deployed domestically.
It has the full protection capability of up to 60Gbps domestically. There is no need to change the ip address; after purchasing, you only need to bind the ip that needs protection to use it. It is a protection product specially designed for SMEs in the scenario of cloud asset attack blocking.
Users of Anti-DDoS Pro (inclusive edition) 10Gbps version will have three self-service unlocking opportunities per month. If exceeded three times in a month, unlocking operations will not be available.
Users of Anti - DDoS Pro (inclusive edition) with 30Gbps and 60Gbps specifications are provided with three self - service unlocking chances per day. After exceeding three times on the same day, unlocking operations cannot be carried out.
Anti-DDoS Pro (Lite Edition)
Anti-DDoS Pro (lightweight version) is an exclusive high-protection product for Tencent Cloud Lighthouse users.
It has the full protection capability of up to 10Gbps domestically. There is no need to change the ip address; after purchasing, you only need to bind the ip that needs protection to use it. It is a lightweight protection product specially customized for Tencent Cloud Lighthouse.
DDoS High Defense IP
Anti-DDoS Advanced (Chinese Mainland), Anti-DDoS Advanced (Global Standard)
Anti-DDoS Advanced is a paid protection service launched for businesses such as gaming, Internet and finance that suffer from large-volume DDoS attacks resulting in unavailable user services. By configuring Anti-DDoS Advanced, direct the business ip to Anti-DDoS Advanced or resolve the DNS domain name of the business to the CNAME address for traffic attraction. All public network traffic will first pass through the high-protection cluster. Attack traffic will be cleaned and filtered in the high-protection cleaning center, and normal access traffic will be forwarded to the business origin server, thereby ensuring the stable availability of the origin server business.
Anti-DDoS Advanced uses the public network proxy access method and supports protocols such as TCP, UDP, HTTP, HTTPS and HTTP2, covering various businesses such as finance, ecommerce and gaming.
Anti-DDoS Advanced (Global Enterprise Edition)
Anti-DDoS Advanced (Global Enterprise Edition) is a paid product that enhances DDoS protection capabilities for businesses deployed on Tencent Cloud.
Anti-DDoS Advanced (global enterprise) provides 10 Tencent Cloud entries around the world, sharing the bandwidth pressure of each individual entry and providing full protection services. Maximize the smooth access of nodes in various places.
Anycast achieves near-origin filtering and near-origin reinjection, providing global T-level protection capabilities. The normal business traffic after passing through each cleaning node will be reinjected to the server near the origin, ensuring the smoothness and low latency of the business traffic. Anti-DDoS Advanced (global enterprise) directly takes effect on IPs on Tencent Cloud.
Product Features
Multiple Types Of Protection
Protection Category | Description |
Malformed packet filtering | Filter Frag Flood, Smurf, Stream Flood, Land Flood attacks, filter malformed IP packets, malformed TCP packets, malformed UDP packets. |
Network layer DDoS attack protection | Filter UDP Flood, SYN Flood, TCP Flood, ICMP Flood, ACK Flood, FIN Flood, RST Flood, DNS/NTP/SSDP and other reflection attacks, null connections. |
Application layer DDoS attack protection | Filter CC attacks, support HTTP custom feature filtering such as host filtering, user-agent filtering, referer filtering. |
Note:
Application-layer DDoS protection is only supported by Anti-DDoS Advanced IP.
Bind and Switch Protection Objects
Anti-DDoS supports protection object IP switching to meet your needs for protecting different cloud resource public IP addresses. The supported switching objects include CVM, CLB, WAF, NAT Gateway, etc.
Security Protection Policy
Anti-DDoS provides basic security policies by default. The policies are based on attack profile, behavior pattern analysis, AI intelligent identification and other protection algorithms to effectively deal with common DDoS attack behaviors. At the same time, it provides diverse and flexible DDoS protection policies. You can set them flexibly according to the special business characteristics to cope with the constantly changing attack methods.
Block Self-Service Removal
When the attack traffic suddenly increases or the protection bandwidth of Anti-DDoS is small, causing the business IP connected to the high defense to be blocked, you can unblock it through the console by yourself.
Protection Statistics Report
Anti-DDoS Pro provides multi-dimensional traffic reports and detailed attack protection information, helping you understand the protection effectiveness of Anti-DDoS Pro in a timely and accurate manner.
Anti-DDoS Advanced provides visibility into statistical data of DDoS and CC attacks and forwarding traffic, keeping you updated on your business security. It also supports automatic packet capture to locate exceptions.
Anti-DDoS Advanced (global enterprise) provides multi-dimensional traffic reports and detailed attack protection information, helping you understand the protection effectiveness of overseas Anycast Anti-DDoS Advanced in a timely and accurate manner.
Customization Of Cleaning Mode
DDoS Anti-DDoS IP supports multiple protection levels and provides a custom cleansing threshold, allowing users to flexibly adjust based on attack conditions, swiftly respond to various types of DDoS attacks, and fully meet the diverse business needs of different users.