Modify back-to-origin settings

Enable origin redundancy for a port forwarding rule to improve disaster recovery (DR) for the back-to-origin link of Anti-DDoS Proxy / Anti-DDoS Proxy.

Background information

Origin redundancy lets you predefine IP addresses for a primary and a secondary origin server. You can switch between them at any time to direct traffic from your Anti-DDoS Proxy / Anti-DDoS Proxy instance to the configured IP addresses. If a back-to-origin link fails, manually switch to the backup link to keep your service accessible.

Limits

If your origin server is deployed on Alibaba Cloud, you can add only origin servers that belong to your current Alibaba Cloud account.
After you enable origin redundancy, you cannot edit the corresponding port forwarding rule.

Prerequisites

A non-website service is added to Anti-DDoS Proxy. For more information, see Manage forwarding rules.

Enable origin redundancy

Log on to the Anti-DDoS Proxy console.
In the top navigation bar, select the region of your instance.
- Anti-DDoS Proxy (Chinese Mainland): Choose the Chinese Mainland region.
- Anti-DDoS Proxy (Outside Chinese Mainland): Choose the Outside Chinese Mainland region.
In the left-side navigation pane, choose Onboarding > Port Config.
Above the forwarding rule list, select your Anti-DDoS Proxy / Anti-DDoS Proxy instance. Find the target port forwarding rule, and then click Back-to-origin Settings in the Actions column.
In the Back-to-origin Settings dialog box, configure the settings and click OK.
1. Turn on the Origin Redundancy switch. In the Note dialog box that appears, click OK.
  
  Note
  When you enable origin redundancy, the back-to-origin IP addresses in the port forwarding rule become the primary origin server addresses by default, and the primary origin server is enabled.
2. Enter the IP addresses for the primary and secondary origin servers, and then select the origin server to enable.
  
  You can enter up to 20 IP addresses for each origin server. Separate multiple IP addresses with commas (,).

If your primary back-to-origin link fails, you can select Use Secondary Origin Server in the back-to-origin settings to switch to the backup back-to-origin link.

Disable origin redundancy

If you no longer need origin redundancy, turn off the Origin Redundancy switch in Back-to-origin Settings. After you disable origin redundancy, you can edit the forwarding rule to modify the back-to-origin IP address. For more information, see Configure port forwarding rules.

Note

After you disable origin redundancy, the IP addresses of the currently active origin server become the default back-to-origin IP addresses for the forwarding rule. For example, if the secondary origin server is active when you disable the feature, the forwarding rule continues to use its IP addresses.