Anti-DDoS Proxy lets you adjust instance specifications and billing settings at any time. Supported operations vary by instance type.
| Operation | Anti-DDoS Proxy (Chinese Mainland) | Anti-DDoS Proxy (Outside Chinese Mainland) |
|---|---|---|
| Modify burstable protection bandwidth | Yes | No |
| Configure burstable clean bandwidth | Yes | No |
| Configure burstable QPS | Yes | Yes |
| Upgrade | Yes | Yes |
| Renew | Yes | Yes |
| Purchase global advanced mitigation sessions | Yes (Advanced mitigation plan only) | Yes (Insurance, Sec-CMA, and Sec-CMA (Basic) plans only) |
| Manage tags | Yes | No |
Modify the burstable protection bandwidth
Each Anti-DDoS Proxy (Chinese Mainland) instance has a basic protection bandwidth and an optional burstable protection bandwidth. The burstable protection bandwidth must be greater than or equal to the basic protection bandwidth.
If no burstable protection bandwidth is set, the basic protection bandwidth caps DDoS mitigation.
If a burstable protection bandwidth is set, that value caps DDoS mitigation instead.
To raise the basic protection bandwidth, upgrade the instance. To change the burstable protection bandwidth, update the value in the console or upgrade the instance.
Log on to the Anti-DDoS Proxy console.
In the left-side navigation pane, choose Assets > Instances.
Find the instance and click the
icon to the right of Protection Bandwidth: in the Instance Status column.In the Modify Burstable Clean Bandwidth dialog box, select a value and click OK.
The maximum burstable protection bandwidth depends on the basic protection bandwidth. If the available maximum does not meet your needs, increase the basic protection bandwidth by upgrading the instance.
Configure the burstable clean bandwidth
When service traffic spikes occasionally, enable the burstable clean bandwidth feature to prevent packet loss when peak traffic exceeds the instance's clean bandwidth.
Limits
Maximum clean bandwidth by instance type:
| Instance type | Mitigation plan | Maximum clean bandwidth |
|---|---|---|
| Anti-DDoS Proxy (Chinese Mainland) | Profession, Advanced | 20 Gbit/s |
| Anti-DDoS Proxy (Outside Chinese Mainland) | Insurance, Unlimited | 5 Gbit/s |
| Anti-DDoS Proxy (Outside Chinese Mainland) | CMA | 1 Gbit/s |
| Anti-DDoS Proxy (Outside Chinese Mainland) | Sec-CMA, Sec-CMA (Basic) | 500 Mbit/s |
Default burstable clean bandwidth: The burstable clean bandwidth defaults to nine times the clean bandwidth, subject to the maximum clean bandwidth limit.
Example: A Chinese Mainland Profession plan instance with 3 Gbit/s clean bandwidth and a 20 Gbit/s maximum gets a burstable clean bandwidth of 17 Gbit/s.
Metering method change rules:
Changes take effect at 00:00 on the first day of the next month.
The metering method can be changed up to three times per calendar month; the last selection takes effect.
The metering method cannot be changed on the last day of a calendar month.
Disable limit: The burstable clean bandwidth feature can be disabled only once per month.
The feature is automatically disabled when:
The instance expires (expired instances stop providing services).
The Alibaba Cloud account has an overdue payment (all pay-as-you-go services become unavailable). To resume, renew the instance or settle the overdue payment, then re-enable the feature.
Enable the burstable clean bandwidth feature
Log on to the Anti-DDoS Proxy console.
In the top navigation bar, select the region of your instance.
Anti-DDoS Proxy (Chinese Mainland): Select Chinese Mainland.
Anti-DDoS Proxy (Outside Chinese Mainland): Select Outside Chinese Mainland.
In the left-side navigation pane, choose Assets > Instances.
Find the instance and click the
icon to the right of Instance Specification in the Burstable Clean Bandwidth column.In the Burstable Clean Bandwidth dialog box, turn on Enable Burstable Clean Bandwidth, configure the Metering Method and Burstable Clean Bandwidth parameters, and click OK.
Modify the burstable clean bandwidth
Log on to the Anti-DDoS Proxy console.
In the top navigation bar, select the region of your instance.
Anti-DDoS Proxy (Chinese Mainland): Select Chinese Mainland.
Anti-DDoS Proxy (Outside Chinese Mainland): Select Outside Chinese Mainland.
In the left-side navigation pane, choose Assets > Instances.
Find the instance and click the
icon to the right of Instance Specification in the Burstable Clean Bandwidth column.In the Burstable Clean Bandwidth dialog box, change the Metering Method or Burstable Clean Bandwidth value and click OK. After a metering method change, the message (The metering method is changed and the new metering method takes effect next month.) appears.
Disable the burstable clean bandwidth feature
Log on to the Anti-DDoS Proxy console.
In the top navigation bar, select the region of your instance.
Anti-DDoS Proxy (Chinese Mainland): Select Chinese Mainland.
Anti-DDoS Proxy (Outside Chinese Mainland): Select Outside Chinese Mainland.
In the left-side navigation pane, choose Assets > Instances.
Find the instance and click the
icon to the right of Instance Specification in the Burstable Clean Bandwidth column.In the Burstable Clean Bandwidth dialog box, turn off Enable Burstable Clean Bandwidth and click OK.
Configure the burstable QPS
When service queries per second (QPS) occasionally spikes, enable the burstable QPS feature to prevent packet loss when peak QPS exceeds the instance's clean QPS.
Limits
Burstable QPS can be up to three times the clean QPS, subject to the following hard limits. If clean QPS already exceeds these limits, the feature cannot be enabled.
Burstable QPS caps:
| Instance type | IP version | Maximum burstable QPS |
|---|---|---|
| Anti-DDoS Proxy (Chinese Mainland) | IPv4 | 300,000 |
| Anti-DDoS Proxy (Chinese Mainland) | IPv6 | 100,000 |
| Anti-DDoS Proxy (Outside Chinese Mainland) | IPv4 and IPv6 | 150,000 |
QPS-to-connection mappings: When burstable QPS is enabled, connection capacity scales with QPS.
| QPS | New connections | Concurrent connections |
|---|---|---|
| 0 < QPS ≤ 5,000 | 5,000 | 100,000 |
| 5,000 < QPS ≤ 10,000 | 10,000 | 200,000 |
| 10,000 < QPS ≤ 30,000 | 30,000 | 500,000 |
| 30,000 < QPS ≤ 50,000 | 50,000 | 1,000,000 |
| 50,000 < QPS ≤ 100,000 | 80,000 | 1,500,000 |
| 100,000 < QPS ≤ 150,000 | 100,000 | 2,000,000 |
| 150,000 < QPS ≤ 200,000 (Chinese Mainland only) | 150,000 | 3,000,000 |
| 200,000 < QPS ≤ 300,000 (Chinese Mainland only) | 200,000 | 4,000,000 |
Metering method change rules:
Only the Metering Method parameter can be changed; Burstable QPS Specifications is read-only.
Changes take effect at 00:00 on the first day of the next month.
The metering method cannot be changed on the last day of a calendar month.
Disable limit: The burstable QPS feature can be disabled only once per month.
The feature is automatically disabled when:
The instance expires.
The Alibaba Cloud account has an overdue payment. To resume, renew the instance or settle the overdue payment, then re-enable the feature.
Enable the burstable QPS feature
Log on to the Anti-DDoS Proxy console.
In the top navigation bar, select the region of your instance.
Anti-DDoS Proxy (Chinese Mainland): Select Chinese Mainland.
Anti-DDoS Proxy (Outside Chinese Mainland): Select Outside Chinese Mainland.
In the left-side navigation pane, choose Assets > Instances.
Find the instance and click the
icon to the right of Instance Specification in the Burstable QPS column.In the Burstable QPS dialog box, turn on Enable Burstable QPS, configure the Metering Method parameter, and click OK.
Modify the burstable QPS settings
Log on to the Anti-DDoS Proxy console.
In the top navigation bar, select the region of your instance.
Anti-DDoS Proxy (Chinese Mainland): Select Chinese Mainland.
Anti-DDoS Proxy (Outside Chinese Mainland): Select Outside Chinese Mainland.
In the left-side navigation pane, choose Assets > Instances.
Find the instance and click the
icon to the right of Instance Specification in the Burstable QPS column.In the Burstable QPS dialog box, change the Metering Method value and click OK. After the change, the message (The metering method is changed and the new metering method takes effect next month.) appears.
Disable the burstable QPS feature
Log on to the Anti-DDoS Proxy console.
In the top navigation bar, select the region of your instance.
Anti-DDoS Proxy (Chinese Mainland): Select Chinese Mainland.
Anti-DDoS Proxy (Outside Chinese Mainland): Select Outside Chinese Mainland.
In the left-side navigation pane, choose Assets > Instances.
Find the instance and click the
icon to the right of Instance Specification in the Burstable QPS column.In the Burstable QPS dialog box, turn off Enable Burstable QPS and click OK.
Upgrade an instance
Upgrading an instance increases its specifications, including the function plan, clean bandwidth, and the number of protected domain names and ports. After upgrading, you pay the price difference for the remaining validity period.
Instance upgrades are irreversible. Downgrading is not supported.
Log on to the Anti-DDoS Proxy console.
In the top navigation bar, select the region of your instance.
Anti-DDoS Proxy (Chinese Mainland): Select Chinese Mainland.
Anti-DDoS Proxy (Outside Chinese Mainland): Select Outside Chinese Mainland.
In the left-side navigation pane, choose Assets > Instances.
Find the instance and click Upgrade in the Actions column.
On the Upgrade page, increase the specifications as needed. Read the Terms of Service, click Buy Now, and complete the payment.
Renew an instance
Renew an instance before it expires to retain its configurations and avoid service disruption. Once an instance is released, it cannot be renewed.
Renewal windows
| Instance type | Renew before expiration | Grace period after expiration |
|---|---|---|
| Anti-DDoS Proxy (Chinese Mainland) | Any time | Up to 7 calendar days |
| Anti-DDoS Proxy (Outside Chinese Mainland) | Any time | Up to 30 calendar days |
Renewing within the grace period preserves service traffic forwarding.
Manually renew an instance
Log on to the Anti-DDoS Proxy console.
In the top navigation bar, select the region of your instance.
Anti-DDoS Proxy (Chinese Mainland): Select Chinese Mainland.
Anti-DDoS Proxy (Outside Chinese Mainland): Select Outside Chinese Mainland.
In the left-side navigation pane, choose Assets > Instances.
Find the instance and click Actions in the Renew column.
On the Renew page, set the Subscription parameter to specify the renewal duration. Read and select Terms of Service, click Buy Now, and complete the payment.
Enable auto-renewal
Auto-renewal can only be enabled at least two calendar days before expiration. If the instance expires tomorrow, renew it manually instead.
After auto-renewal is enabled, Alibaba Cloud automatically deducts fees nine calendar days before the expiration date.
Log on to the Anti-DDoS Proxy console.
In the top navigation bar, choose Expenses > Renewal Management.
On the Manual tab, find the instance and click Enable Auto Renewal in the Actions column.
In the Enable Auto Renewal dialog box, configure the Unified Auto Renewal Cycle parameter and click Auto Renew.
After enabling auto-renewal, view and manage settings on the Auto tab. To stop auto-renewal, switch the instance back to manual renewal on the Auto tab.
Purchase global advanced mitigation sessions
Global advanced mitigation sessions extend DDoS defense when the free monthly sessions provided with an instance are exhausted, preventing service interruptions.
For Anti-DDoS Proxy (Chinese Mainland) Advanced mitigation plan instances, use the Anti-DDoS Proxy (Chinese Mainland) console.
For Anti-DDoS Proxy (Outside Chinese Mainland) Insurance and Sec-CMA mitigation plan instances, use the Anti-DDoS Proxy (Outside Chinese Mainland) console.
The following steps show how to purchase sessions for an Outside Chinese Mainland instance.
Log on to the Anti-DDoS Proxy console.
In the top navigation bar, select the region of your instance.
Anti-DDoS Proxy (Chinese Mainland): Select Chinese Mainland.
Anti-DDoS Proxy (Outside Chinese Mainland): Select Outside Chinese Mainland.
In the left-side navigation pane, choose Assets > Instances.
In the upper-right corner of the Instances page, click Purchase.
On the Global Advanced Mitigation page, set Product to Insurance or Sec-MCA, and set Mitigation Quantity to the number of sessions to purchase.
Click Buy Now and complete the payment.
After purchase, the available session counts for Insurance and Sec-CMA plan instances appear above the instance list. Click Details to view purchase time, expiration time, and usage.
Manage tags
Tags consist of a key-value pair. Use them to group instances by purpose or attribute, making it easier to classify and search across multiple instances.
Each instance supports up to 20 tags. Tag keys must be unique per instance. Adding a tag with a duplicate key overwrites the existing value.
Add a tag
Log on to the Anti-DDoS Proxy console.
In the left-side navigation pane, choose Assets > Instances.
Find the instance and click the
icon in the Tag column.In the Configure Tags dialog box, add a tag and click OK:
To use an existing tag, select a key and value from the tag list.
To create a tag, specify Tag Key and Tag Value, then click OK.
Search by tag
On the Instances page, select a tag key and tag value in the Tag box to filter instances.
Remove a tag
Tags can be removed from only one instance at a time. If a removed tag is not applied to any other instance, the tag is deleted.
Log on to the Anti-DDoS Proxy console.
In the left-side navigation pane, choose Assets > Instances.
Find the instance and click the
icon in the Tag column.In the Configure Tags dialog box, click the
icon next to the tag and click OK.