After you add public IP assets as protected objects, Anti-DDoS Native protects them with a default mitigation policy. You can create custom mitigation policies based on your business characteristics to allow or drop service traffic with specific characteristics. After a DDoS attack, you can view the attack traffic characteristics in mitigation logs or attack analysis details, and then adjust your custom mitigation policies to improve DDoS protection. This topic describes the custom mitigation policies of Anti-DDoS Native.
Mitigation policy types
Mitigation policies include IP-specific and port-specific mitigation policies. If you configure both, mitigation actions are performed on traffic in sequence: first by the IP-specific mitigation policy, then by the port-specific mitigation policy.
Policy type | Applicable public IP assets | Description |
IP-specific mitigation policy |
| Mitigates volumetric DDoS attacks at the network and transport layers. When traffic matches a mitigation rule, the specified mitigation action is performed. |
Port-specific mitigation policy | Applicable only to assets of enhanced cloud services (currently, only Anti-DDoS Advanced EIP is available). | Mitigates TCP connection resource exhaustion attacks on non-website services (non-web application-layer flood attacks). Supports fine-grained detection and filtering of application-layer characteristics, and allows or drops service traffic with specific characteristics. |
Supported regions for mitigation policies
Mitigation Settings is free. However, the supported features and regions are limited. For details, see the following table. If Mitigation Settings cannot meet your business requirements, Contact us.
In this topic, √ indicates supported and × indicates not supported.
Public IP asset type | Region | IP-specific mitigation policy | Port-specific mitigation policy |
Assets of standard cloud services | Chinese mainland | √ | × |
Regions outside the Chinese mainland | Supported regions: China (Hong Kong), US (Virginia), US (Silicon Valley), Germany (Frankfurt), UK (London), Japan (Tokyo), Singapore, Indonesia (Jakarta), and Malaysia (Kuala Lumpur). | × | |
Assets of enhanced cloud services | Chinese mainland | √ | Supported only in the China (Hangzhou) region. |
Regions outside the Chinese mainland | Supported regions: China (Hong Kong), US (Virginia), US (Silicon Valley), Germany (Frankfurt), UK (London), Japan (Tokyo), Singapore, Indonesia (Jakarta), and Malaysia (Kuala Lumpur). | × | |
Off-cloud IDC assets (Anti-DDoS BYOIP) | Regions outside the Chinese mainland | × | × |
References
To view mitigation logs and attack analysis details, see Query mitigation logs and Attack analysis.
For the attack types that Anti-DDoS services can mitigate, see How to select an Anti-DDoS product.