All Products
Search
Document Center

Anti-DDoS:Differences between the Standard and Enhanced function plans

Last Updated:May 09, 2025

Anti-DDoS Proxy (Chinese Mainland) and Anti-DDoS Proxy (Outside Chinese Mainland) provide the Standard and Enhanced function plans. You can select a function plan based on your needs. This topic describes the differences between the two plans.

Feature differences

The table below highlights the differences between the plans. A √ indicates support for the feature, while a × indicates it is not supported.

Related services

Feature

Description

Standard

Enhanced

CDN or DCDN interaction feature

Accelerates access while providing DDoS mitigation.

×

Application layer protection

Configures application layer protection in port forwarding settings to defend against application layer attacks that do not use HTTP or HTTPS protocols.

×

Mitigation settings

Feature

Description

Standard

Enhanced

Static page caching

Accelerates website access.

×

UDP reflection attack protection

Takes effect only for UDP traffic and allows you to filter out common UDP reflection attacks with one click.

×

Packet feature filtering

Distinguishes between normal and attack traffic by analyzing packet payloads for better protection. It also allows the configuration of access control rules based on application-layer protocols.

×

Blacklist and whitelist (for domain names)

Blocks or allows access requests from specified IP addresses without applying any protection policies.

  • Each Alibaba Cloud account can add a maximum of 200 IP addresses and CIDR blocks to all blacklists and 200 to all whitelists for domain names.

  • Each Alibaba Cloud account can add up to 2,000 IP addresses and CIDR blocks to all blacklists and 2,000 to all whitelists for domain names.

Near-origin traffic diversion

Blocks traffic from outside the Chinese mainland on China Telecom and China Unicom lines in your business and drops the traffic near the attack source.

10 times/Alibaba Cloud account

10 times/month/Alibaba Cloud account

HTTP flood protection policy

Enhances identification and blocking of HTTP flood attacks through targeted analysis and rule configuration of HTTP fields.

  • Accurate access control policies: 20

  • Frequency control policies: 20

  • Accurate access control policies: 100

  • Frequency control policies: 100

Price differences

The price of an instance using the Enhanced function plan is USD 1,145 per month higher than that of the Standard function plan with the same specifications.

Upgrade and downgrade

An instance on the Standard function plan can be upgraded to the Enhanced plan, but an Enhanced plan instance cannot be downgraded to Standard.