All Products
Search
Document Center

Anti-DDoS:Functions and features

Last Updated:Oct 22, 2026

Anti-DDoS Proxy (Chinese Mainland) supports an Anti-DDoS Proxy instance with IPv4 address and an Anti-DDoS Proxy instance with IPv6 address. Anti-DDoS Proxy (Outside Chinese Mainland) supports an Anti-DDoS Proxy instance with IPv4 address only. The following tables compare the service adding methods, mitigation settings, and mitigation analysis capabilities of each instance type.

Service adding methods

Note

Anti-DDoS Proxy instances with IPv6 addresses forward requests from IPv6 clients. Service adding has the following limits: domain-based adding supports IPv4 origin servers only, and port-based adding supports IPv4 or IPv6 origin servers.

Item

Anti-DDoS Proxy (Chinese Mainland)

Anti-DDoS Proxy (Outside Chinese Mainland)

IPv4

IPv6

Use domains

Supported

Supported

Supported

Use ports

Supported

Supported

Supported

Sec-Traffic Manager

Supported

Specifically supported:

  • Cloud service interaction

  • Tiered protection

  • CDN or DCDN interaction

Supported

Specifically supported:

  • Cloud service interaction

  • Tiered protection

  • CDN or DCDN interaction

Supported

Specifically supported:

  • Cloud service interaction

  • Tiered protection

  • CDN or DCDN interaction

  • Secure Chinese Mainland Acceleration (Sec-CMA)

  • Network acceleration

Mitigation settings

After you add your service to Anti-DDoS Proxy, configure mitigation policies at the instance, domain, or port level to improve protection. The following table lists the supported settings.

Item

Sub-item

Anti-DDoS Proxy (Chinese Mainland)

Anti-DDoS Proxy (Outside Chinese Mainland)

IPv4

IPv6

Protection for infrastructure

Configure global mitigation policy

Supported

Supported

Supported

Configure blacklists and whitelists for IP addresses

Supported

Supported

Supported

Configure a location blacklist

Supported

Unsupported

Supported

Deactivate blackhole filtering

Supported

Unsupported

Unsupported

Configure near-origin traffic diversion

Supported

Unsupported

Unsupported

Configure UDP reflection attack mitigation

Supported(Enhanced function plan only)

Unsupported

Supported(Enhanced function plan only)

Protection for website services

Configure intelligent protection

Supported

Supported

Supported

Configure the global mitigation policy feature

Supported

Supported

Supported

Configure blacklists and whitelists for domain names

Supported

Supported

Supported

Configure a location blacklist for domain names

Supported

Supported

Supported

Configure HTTP flood protection

Supported

Supported

Supported

Protection for non-website services

Configure the intelligent protection feature for Layer-4 services

Supported

Unsupported

Supported

False Source

Supported

Supported

Supported

Advanced Attack Mitigation

Supports TCP port services only.

Supported

Supported

Supported

Session Feature Filtering

Supported(Enhanced function plan only)

Unsupported

Unsupported

Speed Limit for Destination

Supported

Supported

Supported

Packet Length Limit

Supported

Supported

Supported

Rate Limit for Source

Supported

Unsupported

Supported

Scenario-specific policies

Supported

Supported

Supported

Mitigation analysis capabilities

The following table lists the supported mitigation analysis capabilities.

Item

Anti-DDoS Proxy (Chinese Mainland)

Anti-DDoS Proxy (Outside Chinese Mainland)

IPv4

IPv6

Attack analysis

Supported

Unsupported

Supported

Statistical report

Supported

Supported

Unsupported

Log analysis

Supported

Supported

Supported

System logs

Supported

Supported

Supported

Operation logs

Supported

Supported

Supported

Query advanced mitigation logs

Supported

Supported

Supported

CloudMonitor Alerts

Supported

Supported

Supported