Anti-DDoS:Add an object for protection

Method 1: Automatically add assets

Anti-DDoS Origin can automatically add an asset to an instance when the asset comes under attack.

Limits

Automatic protection rules

Enable automatic addition

1. Log on to the Traffic Security console.

2. In the top navigation bar, select the resource group and All Regions.

3. In the left-side navigation pane, choose Network Security > Anti-DDoS Origin > Protected Objects.

4. On the Protected Objects page, select the instance, then click Enable under Protection Status by Attack Status and configure when assets are automatically added.

   

Method 2: Manually add assets

Use this method to add a specific asset to an instance immediately, without waiting for an attack.

Supported asset and instance combinations

Add an asset

For Anti-DDoS Origin 2.0 (Pay-as-you-go) instances, EIPs with Anti-DDoS (Enhanced) enabled are added automatically after purchase. To manage them, go to the EIP with Anti-DDoS (Enhanced) Enabled tab on the Protected Objects page. When multi-account management is enabled, EIPs with Anti-DDoS (Enhanced) enabled that are purchased by member accounts are also automatically added for protection and can be viewed on the same tab.

1. Log on to the Traffic Security console.

2. In the top navigation bar, select the resource group and the region.

   • Anti-DDoS Origin 1.0 (Subscription): Select the specific region where the instance resides.

   • Anti-DDoS Origin 2.0 (Subscription) and 2.0 (Pay-as-you-go): Select All Regions.

3. In the left-side navigation pane, choose Network Security > Anti-DDoS Origin > Protected Objects.

4. On the Protected Objects page, select the instance and click Add Object for Protection.

5. In the Add Object for Protection dialog box, select the appropriate tab and add the asset.

   • Add Asset: Select an asset from your Alibaba Cloud account.

   • Add Manually: Enter the public IP address of the asset.

   • Add Assets of Members (available when multi-account management is enabled): Select assets from member accounts.

6. Click Confirm.

View protected object details

1. Log on to the Traffic Security console.

2. In the top navigation bar, select the resource group and the region.

   • Anti-DDoS Origin 1.0 (Subscription): Select the specific region where the instance resides.

   • Anti-DDoS Origin 2.0 (Subscription) and 2.0 (Pay-as-you-go): Select All Regions.

3. In the left-side navigation pane, choose Network Security > Anti-DDoS Origin > Protected Objects.

4. Select the instance to view the mitigation settings for all assets it protects.

The following tables describe the columns in the asset list.

Assets that are assigned public IP addresses and WAF instances

Column	Description
IP	The asset protected by the instance.
Owner account of asset	The Alibaba Cloud account to which the asset belongs. Displayed only when multi-account management is enabled, the current account is the management account, and the instance is Anti-DDoS Origin 2.0 Enterprise.
Traffic scrubbing threshold	The minimum bandwidth that triggers traffic scrubbing, measured in Mbit/s and PPS. For details, see Configure traffic scrubbing thresholds.
Asset region	The region where the asset resides.
Asset type	The type of the asset.
Status	The security status: Normal or Blackhole Filtering Triggered. To deactivate blackhole filtering manually, click Deactivate Blackhole Filtering in the Actions column and confirm. For more information, see View information about blackhole filtering events.
Mitigation policy	The mitigation policy attached to the asset. Default means no custom policy is attached and the instance's default mitigation capability is active. Click the policy name to view details on the Mitigation Settings page.
Cross-border traffic blocking	Whether cross-border traffic blocking is enabled.
Actions	Delete: Remove the asset. Deactivate Blackhole Filtering: Available only when the status is Blackhole Filtering Triggered. View Applied Policy: View the attached mitigation policy.

EIPs with Anti-DDoS (Enhanced) enabled

Column	Description
IP	The EIP with Anti-DDoS (Enhanced) enabled.
Owner account of asset	The Alibaba Cloud account to which the EIP belongs. Displayed only when multi-account management is enabled and the current account is the management account.
Traffic scrubbing threshold	The minimum bandwidth that triggers traffic scrubbing, measured in Mbit/s and PPS. For details, see Configure traffic scrubbing thresholds.
Asset region	The region where the EIP resides.
Asset type	Fixed value: EIP with Anti-DDoS (Enhanced) Enabled.
Ports	The number of ports with port-specific mitigation policies. Click the icon to expand the EIP and view its configured ports.
Status	The security status: Normal or Blackhole Filtering Triggered. To deactivate blackhole filtering manually, click Deactivate Blackhole Filtering in the Actions column and confirm. For more information, see View information about blackhole filtering events.
Mitigation policy	The mitigation policy attached to the EIP. Default means no custom policy is attached and the instance's default mitigation capability is active. Click the policy name to view details on the Mitigation Settings page.
Cross-border traffic blocking	Whether cross-border traffic blocking is enabled.
Actions	Add Port: Add a port. Deactivate Blackhole Filtering: Available only when the status is Blackhole Filtering Triggered. View Applied Policy: View the attached mitigation policy.

Remove a protected object

1. On the Protected Objects page, select the instance.

2. In the asset list, find the asset and click Delete in the Actions column.

3. In the Delete Protected Object dialog box, review the prompt and click OK.