Elastic IP addresses (EIPs) protected by Anti-DDoS Pro/Premium can mitigate DDoS attacks at the Tbit/s level. EIPs protected by Anti-DDoS Pro/Premium are suitable for scenarios that require high security and low latency, such as large-scale gaming and important livestreaming activities. This topic describes how to purchase and use EIPs protected by Anti-DDoS Pro/Premium.
Limits on using EIPs protected by Anti-DDoS Origin Basic
By default, EIPs can mitigate DDoS attacks at up to 5 Gbit/s. The free mitigation threshold varies with the region. For more information, see View the thresholds that trigger blackhole filtering in Anti-DDoS Origin Basic.
Descriptions
You can select Anti-DDoS Pro/Premium when you create an EIP. EIPs protected by Anti-DDoS Pro/Premium can mitigate DDoS attacks at the Tbit/s level.
You do not need to perform additional configurations for Anti-DDoS Pro/Premium or change your service IP addresses when you use EIPs protected by Anti-DDoS Pro/Premium. EIPs protected by Anti-DDoS Pro/Premium are ideal for scenarios that require high security and low latency, such as large-scale gaming and important livestreaming activities.

Billing rules
Only pay-as-you-go EIPs support Anti-DDoS Pro/Premium. You are charged a security protection fee after you purchase an EIP protected by Anti-DDoS Pro/Premium. The following figure shows the billable items of EIPs protected by Anti-DDoS Pro/Premium.
For more information about the bandwidth fee or data transfer fee of a pay-as-you-go EIP, or the billing rules of EIP configuration fees (public IP retention fees), see Pay-as-you-go EIPs.
For more information about the billing rules of security protection, see Billing.
NoteThe security protection fee is charged additionally and does not affect the billing of EIPs.
Procedure
Allocate EIPs protected by Anti-DDoS Pro/Premium from an IP address pool
Click Anti-DDoS Origin (Pay-As-You-Go) to activate Anti-DDoS Origin (pay-as-you-go) for the Alibaba Cloud account that is used to purchase EIPs protected by Anti-DDoS Pro/Premium.
If Anti-DDoS Origin (pay-as-you-go) is already activated, skip this step.
WarningAnti-DDoS Origin (pay-as-you-go) is activated on a monthly basis for at least 30 days. You cannot deactivate the service within 30 days after the service is activated. After you activate Anti-DDoS Origin (pay-as-you-go) and add a service to be protected, the billing starts. For more information about the billing rules of security protection, see Billing.
On the EIP buy page, purchase an EIP protected by Anti-DDoS Pro/Premium. For more information, see Apply for an EIP.
On the buy page:
Billing Method: Select Pay-as-you-go.
Line Type: Select BGP (Multi-ISP).
Security Protection: Select Anti-DDoS (Enhanced).

IP Address Pool: Select Default.
Optional: Log on to the Traffic Security console. On the page, click Details to apply for an adjustment to the bandwidth.
Specify an IP address pool to allocate EIPs protected by Anti-DDoS Pro/Premium
Click Anti-DDoS Origin (Pay-As-You-Go) to activate Anti-DDoS Origin (pay-as-you-go) for the Alibaba Cloud account that is used to purchase EIPs protected by Anti-DDoS Pro/Premium.
If Anti-DDoS Origin (pay-as-you-go) is already activated, skip this step.
WarningAnti-DDoS Origin (pay-as-you-go) is activated on a monthly basis for at least 30 days. You cannot deactivate the service within 30 days after the service is activated. After you activate Anti-DDoS Origin (pay-as-you-go) and add a service to be protected, the billing starts. For more information about the billing rules of security protection, see Billing.
Create an IP address pool of the Anti-DDoS Pro/Premium type and add CIDR blocks. For more information, see Create an IP address pool and add CIDR blocks.
On the buy page:
Line Type: Select BGP (Multi-ISP).
Security Protection: Select Anti-DDoS (Enhanced).

On the EIP buy page, purchase an EIP protected by Anti-DDoS Pro/Premium. For more information, see Apply for an EIP.
On the buy page:
Billing Method: Select Pay-as-you-go.
Line Type: Select BGP (Multi-ISP).
Security Protection: Select Anti-DDoS (Enhanced).

IP Address Pool: Select the IP address pool of the Anti-DDoS Pro/Premium type.
Optional: Log on to the Traffic Security console. On the page, view the usage. You can also click Change Bandwidth Specification to apply for an adjustment to the bandwidth.