When Anti-DDoS detects a flood attack on your server, it automatically places the affected IP address into the Cleaning state and begins filtering unusual traffic. If you confirm that the traffic is legitimate — for example, a planned sales event or a traffic spike from your own systems — cancel scrubbing to restore normal traffic flow.
Each Alibaba Cloud account can cancel traffic scrubbing a maximum of three times per day.
Background
Traffic scrubbing is the real-time monitoring of data streams that enter a server to promptly detect unusual traffic, such as DDoS attacks. It filters unusual traffic to ensure service availability without affecting normal business operations.
Prerequisites
Before you begin, ensure that you have:
A target asset with a public IP address
The asset in the Cleaning state
Cancel scrubbing
Log on to the Traffic Security console.
In the left-side navigation pane, click Event Center.
In the Actions column of the target event, click View Details.
On the IP Address Details page, click Cancel Traffic Scrubbing.
What to do next
After canceling, raise the scrubbing threshold to reduce the chance of scrubbing triggering again during high-traffic periods. For example, you may need to handle increased traffic during special events or sales promotions.
The maximum threshold depends on your cloud service instance specifications. If the maximum configurable threshold is too low for your needs, upgrade your instance.
For instructions, see Set scrubbing thresholds.