The Overview page of Traffic Security provides detailed insights into the protection of Alibaba Cloud assets against DDoS attacks. This enables you to customize Anti-DDoS strategies based on your network vulnerabilities to enhance security. This topic describes how to view and interpret the information displayed on the Overview page of the Traffic Security console.
Usage note
If you have enabled the multi-account management feature for your Alibaba Cloud account and your account is one of the member accounts, the Overview page will only show information about the assets owned by the management account. It will not include details about assets belonging to member accounts. For more information, see Use the multi-account management feature.
The assets displayed on this page are those assigned public IP addresses, including ECS, SLB, EIP (including EIPs attached to NAT Gateway), IPv6 gateway, Simple Application Server, WAF, GA, and AnyCastEIP.
View anti-DDoS data
Go to the Overview page of the Traffic Security console.
View details about the protection of Alibaba Cloud assets against DDoS attacks.
Anti-DDoS item
Description
DDoS-related Security Posture of Alibaba Cloud Within Last Year
Displays the number of DDoS attacks targeting Alibaba Cloud assets in the past year, along with the peak attack throughput measured in bits per second. This data can be viewed on a monthly basis.
DDoS-related Security Posture Within Current Account
Shows the number of assets under this Alibaba Cloud account that are currently in blackhole filtering or traffic scrubbing status, along with those that have been attacked in the past three months. For assets in blackhole filtering or traffic scrubbing status, you can click Handle Now to deploy an anti-DDoS solution.
Scenario 1: You have purchased an Anti-DDoS Origin instance
Select the purchased Anti-DDoS Origin instance and click Add for Protection in the Actions column to include your assets in the protection scope. For more details, see Add an object for protection.
Scenario 2: You have not purchased an Anti-DDoS Origin instance
Choose a suitable Anti-DDoS solution based on your business needs. For more guidance, see Scenario-specific anti-DDoS solutions.
Protection Status
Provides insights into the security status of your assets. This helps you configure an anti-DDoS solution based on identified vulnerabilities and enhance overall defense levels.
IP Address Protection Status
This indicates the number of protected assets, the total asset count, and the protection coverage rate. If you have unprotected assets, click Enable Protection Now to set up protection. For more information, see Use the mitigation settings feature.
Traffic Protection Status
This shows the peak attack throughput encountered by your Anti-DDoS Origin instance. If this value exceeds the instance's protection capacity, consider upgrading the instance type. For details on upgrading, see Upgrade an instance.
Anti-DDoS Services and Solutions
Alibaba Cloud offers a range of Anti-DDoS solutions. For details on selecting the right solution, see Scenario-specific anti-DDoS solutions.
Historical Attack Analysis Within Account
Facilitates the analysis of the overall trend of network attacks on your assets over the past year. This helps you evaluate potential threats to your business and assess your security needs.
Attack Trend: Provides basic information on traffic attacks, including Traffic Scrubbing Sessions, Blackhole Filtering Event, IP Addresses Under Traffic Scrubbing, and IP Address Under Blackhole Filtering.
Hotspot Assets: Identifies the assets that have been most frequently targeted over the past year.
We recommend implementing a more robust security solution for these highly targeted assets. For more information, see Best practices for mitigating DDoS attacks.
Peak Attack Throughput: Charts the trend of peak attack throughput.
Attacked Duration: Charts the trend of attack durations.
FAQ and Best Practices
Provides quick access to understanding and effectively utilizing Anti-DDoS products.
References
Offers links to the latest developments in traffic security and equips you with more background information in this domain.
Reference
For more information on blackhole filtering, see Blackhole filtering policy of Alibaba Cloud.