After you purchase an Anti-DDoS Pro instance, you can modify the burstable protection bandwidth of the instance based on your business requirements. The burstable protection bandwidth determines the maximum capability of the instance to defend against DDoS attacks, which indicates the peak traffic of the DDoS attacks that the instance can mitigate.
Prerequisites
Background information
An Anti-DDoS Pro instance has both basic protection bandwidth and burstable protection bandwidth. The burstable protection bandwidth must be no less than the basic protection bandwidth. The methods to modify the basic protection bandwidth and burstable protection bandwidth of an Anti-DDoS Pro instance vary based on the billing methods. To modify the basic protection bandwidth, you must upgrade your instance. To modify the burstable protection bandwidth, you can change the bandwidth value in the Anti-DDoS Pro console or upgrade your instance at any time. For more information about the billing methods, see Anti-DDoS Pro billing methods.
- No DDoS attacks occur, or DDoS attacks occur but the attack traffic does not exceed
the basic protection bandwidth.
In this scenario, basic protection can cope with the attacks.
- DDoS attacks occur, and the attack traffic exceeds the burstable protection bandwidth.
In this scenario, the IP address of the attacked asset enters the blackhole filtering state. The asset becomes accessible over the Internet only after the attacks stop and blackhole filtering is deactivated. For more information, see Blackhole filtering policy of Alibaba Cloud.
You can specify the burstable protection bandwidth for your Anti-DDoS Pro instance based on multiple factors. The factors include the traffic volume of the DDoS attacks that your services may encounter and your budget for service protection. You can set the burstable protection bandwidth to the minimum value that is equal to the basic protection bandwidth. In this case, burstable protection is disabled for your Anti-DDoS Pro instance, and no bills are generated for pay-as-you-go resources. The maximum burstable protection bandwidth that you can set varies based on the basic protection bandwidth of an Anti-DDoS Pro instance. For example, if the basic protection bandwidth of an Anti-DDoS Pro instance is 30 Gbit/s, the maximum burstable protection bandwidth of the instance can be set to 300 Gbit/s. If the basic protection bandwidth of an Anti-DDoS Pro instance is greater than or equal to 300 Gbit/s, the maximum burstable protection bandwidth is unlimited.