This topic describes how to integrate an application based on a CNAME in GameShield. We recommend that you configure protection for a game by using a system-specific SDK. This method provides extra features, such as unlimited defense against Distributed Denial of Service (DDoS) attacks and complete immunity to Challenge Collapsar (CC) attacks. For more information, see the SDK integration documentation.

Overview

Advantage: easy and quick integration of games and provides intelligent analysis of traffic and auto-scheduling in the case that the black hole triggering threshold is exceeded.

Disadvantage: GameShield nodes are directly exposed to unauthorized users on the Internet and the failover time is compromised.

Note We recommend that you configure protection by using an SDK rather than a CNAME to benefit from all the protection capabilities that are provided by GameShield. You can use a CNAME as an alternative method to configure protection.

Obtain a CNAME

Prerequisite: You have completed Step 1: Create a Game.

When you create a game, a node group is automatically created for the game. You can go to the game management page and view a list of nodes on the Basic Settings tab. A node group represents an endpoint. The name of a node group is the CNAME of a game for which you want to configure protection.

Node Group ID

Intelligent DNS resolution is automatically enabled on a node group after the node group is created. You can click Scheduling Management in the Operation column of a node group ID. In the Scheduling Management dialog box, turn on or off the CNAME Scheduling switch to enable or disable intelligent DNS resolution for a CNAME.

CNAME Scheduling

Logic for CNAME intelligent scheduling

Default route: A Border Gateway Protocol (BGP) route takes precedence over a single-line route. A single-line route is one of the following routes: China Telecom route, China Unicom route, and China Mobile route. If a BGP route exists, the BGP route is applied and a maximum of two IP addresses are allocated for each route. If no BGP route exists, a single-line route is applied and a maximum of six IP addresses are allocated.

China Telecom route: If a China Telecom route exists, the route takes precedence over other routes and a maximum of two IP addresses are allocated for the route.

China Unicom route: If a China Telecom route exists, the route takes precedence over other routes and a maximum of two IP addresses are allocated for the route.

China Mobile route: If a China Mobile route exists, the route takes precedence over other routes to be applied and a maximum of two IP addresses are allocated for the route.

Note
  • The nodes that reach the black hole triggering threshold are removed. DNS resolution is automatically adjusted based on the preceding logic.
  • If all nodes exceed the black hole triggering threshold, the scheduling logic and traffic routing for all nodes remains unchanged.

Verify the result of intelligent DNS resolution

You can verify the result of intelligent resolution by visiting https://www.speedtest.net/.