All Products
Search
Document Center

Anti-DDoS:Purchase an Anti-DDoS Origin instance of a paid edition

Last Updated:Jan 17, 2024

This topic describes how to purchase an Anti-DDoS Origin instance of a paid edition.

Background information

Anti-DDoS Origin paid editions directly protect your Alibaba Cloud assets that are assigned public IP addresses and allow you to add multiple IP addresses and ports for protection without the need to change your existing resource deployment. In the following sections, Alibaba Cloud assets that are assigned public IP addresses are referred to as assets. Anti-DDoS Origin paid editions are classified into the following editions based on billing methods:

  • Subscription

    • Anti-DDoS Origin 2.0 (recommended): Anti-DDoS Origin Inclusive Edition for Small and Medium Enterprises and Anti-DDoS Origin 2.0 Enterprise. Compared with Anti-DDoS Origin 1.0, Anti-DDoS Origin 2.0 provides Inclusive Edition for Small and Medium Enterprises that offers two sessions of best-effort protection. Anti-DDoS Origin 2.0 Enterprise can protect the Alibaba Cloud assets that belong to the current Alibaba Cloud account in all regions. We recommend that you purchase an Anti-DDoS Origin 2.0 instance.

    • Anti-DDoS Origin 1.0: Anti-DDoS Origin 1.0 Enterprise that can protect Alibaba Cloud assets in only one region.

  • Pay-as-you-go

    Anti-DDoS Origin (Pay-as-you-go) supports only elastic IP addresses (EIPs) with Anti-DDoS (Enhanced ) enabled.

    Note

    Compared with Anti-DDoS Origin (Subscription), Anti-DDoS Origin (Pay-as-you-go) provides higher DDoS mitigation capabilities at the Tbit/s level.

For more information about the billing methods, see Anti-DDoS Origin 2.0 (Subscription), Billing of Anti-DDoS Origin Enterprise, and Pay-as-you-go.

Anti-DDoS Origin 2.0 instances

Assets that can be protected

Elastic Compute Service (ECS) instances, Server Load Balancer (SLB) instances, elastic IP addresses (EIPs), EIPs that are associated with NAT gateways, IPv6 gateways, simple application servers, Web Application Firewall (WAF) instances, and Global Accelerator (GA) instances.

Procedure

  1. Visit the Anti-DDoS Origin 2.0 buy page.

  2. Configure the following parameters to purchase an Anti-DDoS Origin 2.0 instance.

  3. Parameter

    Description

    Edition

    • Anti-DDoS Origin 2.0 instance of Inclusive Edition for Small and Medium Enterprises: If you have no more than 30 assets that are assigned public IP addresses, the assets reside in the same region, and no more than two DDoS attacks occur on the assets per month, you can select this instance type.

    • Anti-DDoS Origin 2.0 Enterprise instance: If you have more than 30 assets that are assigned public IP addresses, the assets reside in multiple regions, and both IPv4 addresses and IPv6 addresses are used, you can select this instance type.

    Protection Mode

    • Inclusive Edition for Small and Medium Enterprises: Insurance (2 Sessions/Month). Two best-effort protection sessions are provided each month. For more information about best-effort protection sessions, see Definition of advanced mitigation sessions.

    • Enterprise: Unlimited (Unlimited Sessions/Month). Unlimited best-effort protection sessions are provided each month.

    Application Scope

    • Inclusive Edition for Small and Medium Enterprises: An instance can protect Alibaba Cloud assets that belong to the current Alibaba Cloud account in only one region.

    • Enterprise: An instance can protect all Alibaba Cloud assets that belong to the current Alibaba Cloud account in and outside the Chinese mainland.

    Network Protocol

    The IP version of the instance.

    • Inclusive Edition for Small and Medium Enterprises: An instance can protect only IPv4 or IPv6 assets.

    • Enterprise: An instance can protect both IPv4 and IPv6 assets.

    Clean Bandwidth

    The average network bandwidth of the service that you want to protect.

    For more information about how to estimate your business scale, see Business scale estimation.

    IP Addresses

    The total number of public IP addresses that you want to protect.

    Mitigation Logs

    Specifies whether to enable the mitigation logs feature, which provides full log analysis and reports for protected traffic. Only Anti-DDoS Origin Enterprise supports the mitigation logs feature.

    Resource Group

    The resource group of the instance. A resource group is a group of resources that belong to an Alibaba Cloud account. You can manage members, permissions, and resources in a resource group. You can select an existing resource group or create a resource group.

    For more information, see Create a resource group.

    Subscription Duration

    The validity period of the instance. You can select Auto-renewal based on your business requirements.

  4. Click Buy Now, read and select Terms of Service, and then click Pay to complete the payment.

EIPs with Anti-DDoS (Enhanced Edition) enabled

  1. Visit the EIP buy page to purchase an EIP with Anti-DDoS (Enhanced Edition) enabled.

    Important
    • An EIP with Anti-DDoS (Enhanced Edition) enabled is billed on a monthly basis. The minimum subscription duration is 30 days. You cannot disable the EIP with Anti-DDoS (Enhanced Edition) enabled within the first 30 days.

    • After you purchase an EIP with Anti-DDoS (Enhanced Edition) enabled, you are charged for the protection mode. This does not affect the billing of the EIP.

  2. Select Anti-DDoS (Enhanced Edition) for the Security Protection parameter when you purchase an EIP with Anti-DDoS (Enhanced Edition) enabled. For more information, see Apply for an EIP. 按量付费

Anti-DDoS Origin 1.0 instances

Assets that can be protected

Elastic Compute Service (ECS) instances, Server Load Balancer (SLB) instances, elastic IP addresses (EIPs), EIPs that are associated with NAT gateways, IPv6 gateways, simple application servers, Web Application Firewall (WAF) instances, and Global Accelerator (GA) instances.

Procedure

  1. Visit the Anti-DDoS Origin 1.0 buy page.

  2. Configure the following parameters to purchase an Anti-DDoS Origin 1.0 instance.

    Parameter

    Description

    Mitigation Plan

    The mitigation plan of the instance. The value is fixed as Enterprise.

    IP Version

    The IP version of the instance. An instance can protect only IPv4 or IPv6 assets.

    Region

    The region in which the instance resides.

    Important

    You must select the region in which the assets that you want to protect reside.

    Business Scale

    The average network bandwidth of the service that you want to protect.

    For more information about how to estimate your business scale, see Business scale estimation.

    IP Addresses

    The total number of public IP addresses that you want to protect. The minimum value that you can specify for this parameter is 100. If you want to protect more public IP addresses, you can increase the value.

    Mitigation Logs

    Specifies whether to enable the mitigation logs feature, which provides full log analysis and reports for protected traffic.

    Resource Group

    The resource group of the instance. A resource group is a group of resources that belong to an Alibaba Cloud account. You can manage members, permissions, and resources in a resource group. You can select an existing resource group or create a resource group.

    For more information, see Create a resource group.

    Duration

    The validity period of the instance. You can select Auto-renewal based on your business requirements.

  3. Click Buy Now, read and select Terms of Service, and then click Pay to complete the payment.

What to do next

After you purchase an instance, you can go to the Instance Management page to view the instance and add the assets that you want to protect to the instance as protected objects. For more information, see Add an object for protection.