All Products
Search
Document Center

Elastic IP Address:Best practices for using EIPs protected by Anti-DDoS Pro/Premium

Last Updated:Apr 22, 2024

Elastic IP addresses (EIPs) protected by Anti-DDoS Pro/Premium can mitigate DDoS attacks at the Tbit/s level. EIPs protected by Anti-DDoS Pro/Premium are suitable for scenarios that require high security and low latency, such as large-scale gaming and important livestreaming activities. This topic describes how to purchase and use EIPs protected by Anti-DDoS Pro/Premium.

Limits on using EIPs protected by Anti-DDoS Origin Basic

By default, EIPs can mitigate DDoS attacks at up to 5 Gbit/s. The free mitigation threshold varies with the region. For more information, see View the thresholds that trigger blackhole filtering in Anti-DDoS Origin Basic.

Descriptions

You can select Anti-DDoS Pro/Premium when you create an EIP. EIPs protected by Anti-DDoS Pro/Premium can mitigate DDoS attacks at the Tbit/s level.

You do not need to perform additional configurations for Anti-DDoS Pro/Premium or change your service IP addresses when you use EIPs protected by Anti-DDoS Pro/Premium. EIPs protected by Anti-DDoS Pro/Premium are ideal for scenarios that require high security and low latency, such as large-scale gaming and important livestreaming activities.

原生高防EIP

Billing

Only pay-as-you-go EIPs support Anti-DDoS Pro/Premium. You are charged a security protection fee after you purchase an EIP protected by Anti-DDoS Pro/Premium. The following figure shows the billable items of EIPs protected by Anti-DDoS Pro/Premium.高防EIP计费组成

  • For more information about the bandwidth fee or data transfer fee of a pay-as-you-go EIP, or the billing rules of EIP configuration fees, see Pay-as-you-go EIPs.

  • For more information about the billing rules of security protection, see Billing.

    Note

    The security protection fee is charged additionally and does not affect the billing of EIPs.

Limits

  • Only pay-as-you-go EIPs of the BGP (Multi-ISP) type support Anti-DDoS Pro/Premium.

  • If you specify an IP address pool to create EIPs protected by Anti-DDoS Pro/Premium, the IP address pool must be of the Anti-DDoS Pro/Premium type.

  • You can select Anti-DDoS Pro/Premium only when you create EIPs and IP address pools. You cannot switch the security protection type between Default and Anti-DDoS Pro/Premium for existing EIPs.

  • The following regions support Anti-DDoS Pro/Premium:

    Regions that support EIPs protected by Anti-DDoS Pro/Premium

    Area

    Region

    China

    China (Beijing), China (Zhangjiakou), China (Hangzhou), China (Shanghai), and China (Hong Kong)

    Asia Pacific

    Philippines (Manila), Japan (Tokyo), Singapore, Malaysia (Kuala Lumpur), and Indonesia (Jakarta)

    Europe & Americas

    US (Virginia), US (Silicon Valley), Germany (Frankfurt), and UK (London)

    Regions that support IP address pools of the Anti-DDoS Pro/Premium type

    Area

    Region

    Europe & Americas

    US (Virginia), US (Silicon Valley), and Germany (Frankfurt)

Procedure

image

Allocate EIPs protected by Anti-DDoS Pro/Premium from an IP address pool

  1. Click Anti-DDoS Origin (Pay-As-You-Go) to activate Anti-DDoS Origin (pay-as-you-go) for the Alibaba Cloud account that is used to purchase EIPs protected by Anti-DDoS Pro/Premium.

    If Anti-DDoS Origin (pay-as-you-go) is already activated, skip this step.

    Warning

    Anti-DDoS Origin (pay-as-you-go) is activated on a monthly basis for at least 30 days. You cannot deactivate the service within 30 days after the service is activated. After you activate Anti-DDoS Origin (pay-as-you-go) and add a service to be protected, the billing starts. For more information about the billing rules of security protection, see Billing.

  2. On the EIP buy page, purchase an EIP protected by Anti-DDoS Pro/Premium. For more information, see Apply for an EIP.

    On the buy page:

    • Billing Method: Select Pay-As-You-Go.

    • Line Type: Select BGP (Multi-ISP).

    • Security Protection: Select Anti-DDoS Pro/Premium. 按量付费

    • IP Address Pool: Select Default.

  3. Optional: Log on to the Traffic Security console. On the Network Security > Billing Management page, view the usage. You can also click Change Bandwidth Specification to apply for an adjustment to the bandwidth.

Specify an IP address pool to allocate EIPs protected by Anti-DDoS Pro/Premium

  1. Click Anti-DDoS Origin (Pay-As-You-Go) to activate Anti-DDoS Origin (pay-as-you-go) for the Alibaba Cloud account that is used to purchase EIPs protected by Anti-DDoS Pro/Premium.

    If Anti-DDoS Origin (pay-as-you-go) is already activated, skip this step.

    Warning

    Anti-DDoS Origin (pay-as-you-go) is activated on a monthly basis for at least 30 days. You cannot deactivate the service within 30 days after the service is activated. After you activate Anti-DDoS Origin (pay-as-you-go) and add a service to be protected, the billing starts. For more information about the billing rules of security protection, see Billing.

  2. Create an IP address pool of the Anti-DDoS Pro/Premium type and add CIDR blocks. For more information, see Create an IP address pool and add CIDR blocks.

    On the buy page:

    • Line Type: Select BGP (Multi-ISP).

    • Security Protection: Select Anti-DDoS Pro/Premium.

      高防地址池.png

  3. On the EIP buy page, purchase an EIP protected by Anti-DDoS Pro/Premium. For more information, see Apply for an EIP.

    On the buy page:

    • Billing Method: Select Pay-As-You-Go.

    • Line Type: Select BGP (Multi-ISP).

    • Security Protection: Select Anti-DDoS Pro/Premium. 按量付费

    • IP Address Pool: Select the IP address pool of the Anti-DDoS Pro/Premium type.

  4. Optional: Log on to the Traffic Security console. On the Network Security > Billing Management page, view the usage. You can also click Change Bandwidth Specification to apply for an adjustment to the bandwidth.