If you want to improve the DDoS mitigation capabilities for the public IP addresses of Alibaba Cloud resources, you can purchase an Anti-DDoS Origin Enterprise instance. The public IP addresses include public IP addresses of Elastic Compute Service (ECS) instances, Server Load Balancer (SLB) instances, and Application Load Balancer (ALB) instances, elastic IP addresses (EIPs), IP addresses of Network Address Translation (NAT) gateways, and IP addresses of Web Application Firewall (WAF) instances.

Prerequisites

  • The real-name verification is completed for your Alibaba Cloud account.
  • The public IP addresses that you want to protect are public IP addresses of Elastic Compute Service (ECS) instances, Server Load Balancer (SLB) instances, and Application Load Balancer (ALB) instances, elastic IP addresses (EIPs), IP addresses of Network Address Translation (NAT) gateways, and IP addresses of Web Application Firewall (WAF) instances.

Background information

Anti-DDoS Origin is offered in two editions: Anti-DDoS Origin Basic and Anti-DDoS Origin Enterprise.
  • By default, Anti-DDoS Origin Basic is activated. Anti-DDoS Origin Basic provides a basic protection capacity of up to 5 Gbit/s against DDoS attacks free of charge for the public IP addresses of Alibaba Cloud resources.
  • Anti-DDoS Origin Enterprise is a paid service that protects the public IP addresses of Alibaba Cloud resources. Anti-DDoS Origin Enterprise provides shared and unlimited protection capacities. You do not need to change your service IP address.

    Unlimited protection defends against DDoS attacks based on the total network capacity of Alibaba Cloud. The unlimited protection capacity increases with the increase of the overall network capacity of Alibaba Cloud. You do not need to pay extra fees for the increase in capacity.

    For more information about the billing methods of Anti-DDoS Origin, see Billing methods of Anti-DDoS Origin.

Procedure

  1. Access the Anti-DDoS Origin buy page by using your Alibaba Cloud account.
  2. On the Anti-DDoS Origin buy page, set Product Type to Anti-DDoS Origin and configure the following parameters.
    Parameter Description
    Mitigation Plan The mitigation plan of the Anti-DDoS Origin instance. Default value: Enterprise. You cannot change the value of this parameter.
    Mitigation Times The mitigation sessions. Default value: Unlimited. You cannot change the value of this parameter.
    IP Version The version of the IP protocol. Valid values: IPV4 and IPV6.
    Region The region where the Anti-DDoS Origin Enterprise instance resides.
    Notice
    • The Anti-DDoS Origin Enterprise instance must reside in the same region as the assets whose public IP addresses you want to protect. The public IP addresses include public IP addresses of Elastic Compute Service (ECS) instances, Server Load Balancer (SLB) instances, and Application Load Balancer (ALB) instances, elastic IP addresses (EIPs), IP addresses of Network Address Translation (NAT) gateways, and IP addresses of Web Application Firewall (WAF) instances.
    • Anti-DDoS Origin Enterprise instances are available only in the Chinese mainland. If you want to purchase an Anti-DDoS Origin Enterprise instance outside the Chinese mainland, submit a ticket or contact the sales personnel.
    Business Scale The average network bandwidth of the business that you want to protect.

    For more information about how to estimate the business scale, see Instance specifications of Anti-DDoS Origin Enterprise.

    The subscription fee of an Anti-DDoS Origin Enterprise instance increases with the business scale. For more information, see Billing methods of Anti-DDoS Origin.

    IP Addresses The total number of public IP addresses that you want to protect. The minimum value that you can specify for this parameter is 100. If you want to protect more public IP addresses, you can increase the value.

    The subscription fee of an Anti-DDoS Origin Enterprise instance increases with the number of public IP addresses. For more information, see Billing methods of Anti-DDoS Origin.

    Resource Group A resource group is a group of resources that belong to an Alibaba Cloud account. You can manage members, permissions, and resources in a resource group. You can select an existing resource group or create a resource group.

    For more information, see Create a resource group.

    Quantity The number of Anti-DDoS Origin Enterprise instances that you want to purchase.
    Duration The validity period of the Anti-DDoS Origin Enterprise instance. You can select Auto-renewal based on your business requirements.
  3. Click Buy Now.
  4. Confirm the order and complete the payment.

Result

After you purchase the Anti-DDoS Origin Enterprise instance, you can view the instance on the Manage Instances page in the Anti-DDoS Origin console. You can add specific public IP addresses that you want to protect to the Anti-DDoS Origin Enterprise instance. For more information, see Add a cloud service to Anti-DDoS Origin Enterprise for protection.