Alibaba Cloud has integrated security technologies and years of experience in DDoS mitigation to develop various commercial anti-DDoS solutions. You can select an anti-DDoS solution based on your business requirements. This topic describes how to select anti-DDoS solutions for different scenarios.
|Scenario||Applicable scope||Description||Mitigation plan|
|High-risk DDoS attacks (We recommend that you use Anti-DDoS Pro or Anti-DDoS Premium.)||
||Anti-DDoS Pro and Anti-DDoS Premium can protect Alibaba Cloud Elastic Compute Service (ECS) instances and servers that are deployed on third-party public clouds from volumetric DDoS attacks. Anti-DDoS Pro and Anti-DDoS Premium can route network traffic to the global anti-DDoS network of Alibaba Cloud by using DNS resolution, scrub the traffic of volumetric and resource exhaustion attacks, and hide the IP addresses of origin servers.||Select a mitigation plan of Anti-DDoS Pro or Anti-DDoS Premium based on the following
|Low-risk DDoS attacks on large-scale services (We recommend that you use Anti-DDoS Origin.)||
||Anti-DDoS Origin improves the DDoS mitigation capabilities for the Alibaba Cloud services that are assigned with public IP addresses. Anti-DDoS Origin uses the native protection network of Alibaba Cloud to mitigate volumetric DDoS attacks without changing the IP addresses of origin servers.||
Select a mitigation plan of Anti-DDoS Origin based on the following descriptions:
|DDoS attacks on mobile applications (We recommend that you use GameShield.)||
||GameShield can mitigate volumetric DDoS attacks and HTTP flood attacks in the gaming industry. GameShield integrates the lightweight Alibaba Cloud Security SDKs to eliminate DDoS attacks, HTTP flood attacks, and TCP flood attacks that are specific to the gaming industry faced by mobile applications.||None|
|Service type||Anti-DDoS Pro and Anti-DDoS Premium||Anti-DDoS Origin||GameShield|
DDoS attack types
- : indicates that mitigation is supported
- : indicates that mitigation is not supported
|Attack type||Anti-DDoS Pro and Anti-DDoS Premium||Anti-DDoS Origin||GameShield|
|Malformed packet attacks|
|Transport layer DDoS attacks|
|Domain Name Service (DNS) attacks||
Anti-DDoS Pro and Anti-DDoS Premium scrub DNS attacks. If you want to protect DNS servers from DNS attacks, you must use anti-DDoS technologies that are specific to DNS services.
Anti-DDoS Origin scrubs DNS attacks. If you want to protect DNS servers from DNS attacks, you must use anti-DDoS technologies that are specific to DNS services.
|Connection-based DDoS attacks||Anti-DDoS Origin will soon be available to mitigate connection-based DDoS attacks.|
|Application-layer attacks||Anti-DDoS Origin will soon be available to mitigate application-layer attacks.|