After you purchase an Anti-DDoS Pro instance, you can modify the burstable protection bandwidth of the instance based on your business requirements. The burstable protection bandwidth determines the maximum capability of the instance to defend against DDoS attacks, which indicates the peak traffic of the DDoS attacks that the instance can mitigate.

Prerequisites

An Anti-DDoS Pro instance is purchased. For more information, see Purchase mitigation plans for Anti-DDoS Pro and Anti-DDoS Premium.
Notice The burstable protection bandwidth is available only for Anti-DDoS Pro instances. By default, an Anti-DDoS Premium instance provides unlimited advanced protection, and no burstable protection bandwidth is required for the instance.

Background information

An Anti-DDoS Pro instance has both basic protection bandwidth and burstable protection bandwidth. The burstable protection bandwidth must be no less than the basic protection bandwidth. The methods to modify the basic protection bandwidth and burstable protection bandwidth of an Anti-DDoS Pro instance vary based on the billing methods. To modify the basic protection bandwidth, you must upgrade your instance. To modify the burstable protection bandwidth, you can change the bandwidth value in the Anti-DDoS Pro console or upgrade your instance at any time. For more information about the billing methods, see Anti-DDoS Pro billing methods.

A high burstable protection bandwidth indicates the high peak traffic of DDoS attacks that the instance can mitigate. Burstable protection is triggered only when DDoS attacks occur and the peak attack traffic is between the basic protection bandwidth and burstable protection bandwidth. On the day after the attacks stop, a bill is generated for the pay-as-you-go resources that are used by your Anti-DDoS Pro instance to provide burstable protection. No costs are generated for the resources that are used for burstable protection in the following scenarios:
  • No DDoS attacks occur, or DDoS attacks occur but the attack traffic does not exceed the basic protection bandwidth.

    In this scenario, basic protection can cope with the attacks.

  • DDoS attacks occur, and the attack traffic exceeds the burstable protection bandwidth.

    In this scenario, the IP address of the attacked asset enters the blackhole filtering state. The asset becomes accessible over the Internet only after the attacks stop and blackhole filtering is deactivated. For more information, see Blackhole filtering policy of Alibaba Cloud.

You can specify the burstable protection bandwidth for your Anti-DDoS Pro instance based on multiple factors. The factors include the traffic volume of the DDoS attacks that your services may encounter and your budget for service protection. You can set the burstable protection bandwidth to the minimum value that is equal to the basic protection bandwidth. In this case, burstable protection is disabled for your Anti-DDoS Pro instance, and no bills are generated for pay-as-you-go resources. The maximum burstable protection bandwidth that you can set varies based on the basic protection bandwidth of an Anti-DDoS Pro instance. For example, if the basic protection bandwidth of an Anti-DDoS Pro instance is 30 Gbit/s, the maximum burstable protection bandwidth of the instance can be set to 300 Gbit/s. If the basic protection bandwidth of an Anti-DDoS Pro instance is greater than or equal to 300 Gbit/s, the maximum burstable protection bandwidth is unlimited.

Procedure

  1. Log on to the Anti-DDoS Pro console.
  2. In the top navigation bar, select Mainland China.
    If you select this region, the Anti-DDoS Pro console appears.
  3. In the left-side navigation pane, choose Assets > Instances.
  4. Find the required instance and click the Edit icon icon next to Protection Bandwidth in the Status column.
  5. In the Change Burstable Bandwidth dialog box, select a value and click OK.
    You can view the new protection bandwidth of the instance in the Status column. Burstable ***G indicates that the current burstable protection bandwidth of the instance is *** Gbit/s.

References

FAQ about the billing of burstable protection