Use Anti-DDoS Origin Enterprise to protect an asset from DDoS attacks

When DDoS attacks on an Alibaba Cloud asset exceed the mitigation capability of Anti-DDoS Origin Basic, purchase an Anti-DDoS Origin Enterprise instance. The instance uses all available protection capacity in the same region as your asset to defend against attacks automatically.

Prerequisites

Before you begin, ensure that you have:

The public IP address of the asset under attack
The region where the asset is deployed

Step 1: Purchase an Anti-DDoS Origin Enterprise instance

Go to the Anti-DDoS Origin buy page.

Configure the following parameters.

Parameter	Description
Product Type	Select Anti-DDoS Origin.
Mitigation Plan	Fixed at Enterprise. Cannot be changed.
IP Version	Select IPV4 or IPV6 based on your asset's IP address type.
Region	Select the region where your asset is deployed. The instance must be in the same region as the asset.
Business Scale	Enter the average network bandwidth of the service to protect. To estimate an appropriate value, see Business scale estimation.
IP Addresses	Enter the number of public IP addresses to protect. Minimum value: 100. If you want to protect more public IP addresses, you can increase the value.
Mitigation Logs	Enable to access full log analysis and traffic reports. Valid values: On and Off. Note This feature is in public preview and is free of charge during the preview period. After you enable it, Mitigation Analysis (Beta) appears in the left-side navigation pane.
Resource Group	Select an existing resource group or create one. For details, see Create a resource group.
Duration	Select a validity period. Enable Auto-renewal if needed.

Click Buy Now and complete the payment.

After you purchase the Anti-DDoS Origin Enterprise instance, you can go to the Manage Instances page to view the instance and add the public IP addresses that you want to protect. For more information, see Add an object for protection.

Step 2: Add the public IP address of your asset

Add the public IP address to your Anti-DDoS Origin Enterprise instance using either of the following methods.

Method 1: From the Protected Objects page

Log on to the Traffic Security console.
In the left-side navigation pane, choose Network Security > Anti-DDoS Origin > Protected Objects.
In the top navigation bar, select the resource group and region of your instance.
On the Protected Asset IP page, select the Anti-DDoS Origin Enterprise instance you purchased, then click Add Protected Asset.
If this is your first time using Anti-DDoS Origin Enterprise, follow the on-page instructions to complete authorization for the assets in your Alibaba Cloud account.
In the Add Protected Asset dialog box, enter the public IP address of your asset and click OK.
- The IP address must belong to an asset within your Alibaba Cloud account and must be in the same region as the instance. - Separate multiple IP addresses with commas (,).

Method 2: From the Manage Instances page

On the Manage Instances page, find the instance and click Add Protected Asset in the Actions column.

Add Protected Asset appears only if no IP addresses have been added to the instance yet. If IP addresses are already added, click Manage in the Actions column to go to the Protected Asset IP page, then click Add Protected Asset.

Result

After the IP address is added, go to the Assets page. Hover over the value in the Mitigation Capabilities column to view the protection capacity the instance provides for the asset.

What's next

After protecting your asset, consider these additional steps to complete your setup:

Add an object for protection — add more assets to the same instance
Review Mitigation Analysis (Beta) in the console to monitor attack traffic and mitigation logs (requires Mitigation Logs to be enabled)