Alibaba Cloud provides you with various anti-DDoS solutions. You can select an appropriate solution based on your business needs. This topic describes the anti-DDoS solutions and application scenarios.

The anti-DDoS solutions include Anti-DDoS Origin Basic, Anti-DDoS Origin Enterprise, Anti-DDoS Pro, Anti-DDoS Premium, and GameShield. Anti-DDoS Origin Basic is provided free of charge. The following table describes these solutions.

Note If you want a customized security solution, contact pre-sales customer service to consult Alibaba Cloud security architects.
Solution Overview Scenario Protection capability
Anti-DDoS Origin Basic Anti-DDoS Origin Basic can defend against up to 5 Gbit/s of DDoS attacks free of charge for public IP addresses of Alibaba Cloud services, such as ECS, SLB, WAF, and EIP. Business that has basic requirements on security. Anti-DDoS Origin Basic is automatically enabled after you purchase an Alibaba Cloud service. We recommend that you use other security solutions for additional protection if your business requires high security. The maximum protection capability is 5 Gbit/s. For more information, see Editions.
Anti-DDoS Origin Enterprise Anti-DDoS Origin Enterprise improves the protection capability for Alibaba Cloud services, such as ECS, SLB, WAF, and EIP.

You can apply the protection capability of Anti-DDoS Origin Enterprise to Alibaba Cloud services with a simple configuration.

  • Business that is latency-sensitive, such as online videos and live Q&A.
  • Business whose ports, domain names, and IP addresses are frequently attacked.
 Anti-DDoS Origin Enterprise supports unlimited protection. For more information, see unlimited protection.
Anti-DDoS Pro and Anti-DDoS Premium Anti-DDoS Pro and Anti-DDoS Premium protect servers on the Internet against volumetric DDoS attacks. These servers may be deployed on Alibaba Cloud or provided by a third party.

After the configuration, you can forward your business traffic to Anti-DDoS Pro or Anti-DDoS Premium for scrubbing. Only normal traffic is forwarded to the origin server. This ensures the stability and reliability of the origin server.

  • Financial, e-commerce, and portal websites.
  • Internet egresses of government networks, portals, and open platforms.
  • Important live streaming and sales promotions.
  • Business that encounters attacks and blackmailing from competitors.
  • Mobile apps that encounter spam user registration, brushing, and fraudulent traffic.
GameShield GameShield protects against DDoS and HTTP flood attacks in the gaming industry.

The same as Anti-DDoS Pro or Anti-DDoS Premium, GameShield can defend against Tbit/s of DDoS attacks. It can also defend against TCP-based HTTP flood attacks that are specific to the gaming industry.

  • Gaming business that encounters heavy-traffic bandwidth suppression.
  • Gaming business that encounters attacks from a large number of zombies over a long period of time.
GameShield provides Tbit/s of protection capability.