Anti-DDoS Origin directly protects your Alibaba Cloud assets that have public IP addresses against DDoS attacks, and allows you to add multiple IP addresses and ports for protection without changing your existing network topology.
Purchasing an instance does not automatically protect your assets. After purchase, go to the Instance Management page to add the assets you want to protect as protected objects.
Choose an edition
Anti-DDoS Origin 2.0 is available in two billing models:
| Subscription | Pay-as-you-go | |
|---|---|---|
| Billing | Monthly or yearly flat fee | Billed monthly; minimum 30 days |
| Supported assets | Regular Alibaba Cloud services | Regular Alibaba Cloud services; elastic IP addresses (EIPs) with Anti-DDoS (Enhanced) enabled |
| Mitigation sessions | Inclusive Edition: 2 per month; Enterprise: unlimited | Unlimited |
| Best for | Predictable protection needs with a fixed number of assets | Flexible or trial usage |
For a detailed comparison of features and pricing, see Anti-DDoS Origin 2.0 (Subscription). For pay-as-you-go details, see Anti-DDoS Origin 2.0 (Pay-as-you-go).
Purchase a subscription instance
Go to the Anti-DDoS Origin 2.0 buy page.
Configure the following parameters.
Parameter Description Example Edition Select based on your asset count, distribution, and attack frequency. Choose Inclusive Edition for Small and Medium Enterprises if you have 30 or fewer assets in a single region with no more than 2 DDoS attacks per month. Choose Enterprise if you have more than 30 assets, the assets reside in multiple regions, and both IPv4 and IPv6 addresses are used. EnterpriseProtection Mode Determined by your edition. Inclusive Edition provides 2 best-effort mitigation sessions per month. Enterprise provides unlimited sessions. For details, see Definition of mitigation sessions. Unlimited (Unlimited Sessions/Month)Application Scope Inclusive Edition covers assets in one region only. Enterprise covers all assets in your Alibaba Cloud account across the Chinese mainland and outside. All regionsNetwork Protocol Inclusive Edition protects either IPv4 or IPv6 assets. Enterprise protects both. IPv4 and IPv6Clean Bandwidth The average bandwidth of the service you want to protect. For sizing guidance, see Business scale estimation. 100 Mbit/sIP Addresses The total number of public IP addresses to protect. 10Mitigation Logs Available for Enterprise only. Enable to get full log analysis and traffic reports. EnabledResource Group The resource group for this instance. Select an existing group or create one. For details, see Create a resource group. Default Resource GroupSubscription Duration The validity period of the instance. Select Auto-renewal to renew automatically. 1 MonthClick Buy Now, read and accept the Terms of Service, and then click Pay.
Purchase a pay-as-you-go instance
Anti-DDoS Origin 2.0 (Pay-as-you-go) is billed monthly with a minimum commitment of 30 days. Instances cannot be disabled within the first 30 days. Anti-DDoS Origin charges apply separately from the charges for any other Alibaba Cloud services.
Protect regular Alibaba Cloud services
Go to the Anti-DDoS Origin 2.0 (Pay-as-you-go) buy page and purchase an instance for your account.
Purchase your Alibaba Cloud services as usual. Refer to the documentation for each service.
For elastic IP addresses (EIPs): set the Security Protection parameter to Default.
For other Alibaba Cloud services: no additional configuration is needed.
Protect EIPs with Anti-DDoS (Enhanced) enabled
Only EIPs with Anti-DDoS (Enhanced) enabled are supported under this path.
Go to the Anti-DDoS Origin 2.0 (Pay-as-you-go) buy page and purchase an instance for your account.
When applying for an EIP, set the Security Protection parameter to Anti-DDoS (Enhanced). For details, see Apply for an EIP.
What's next
After purchasing an instance, go to the Instance Management page to view the instance and add the assets you want to protect to the instance as protected objects. See Add an object for protection.