Alibaba Cloud Security Anti-DDoS Pro service is an attack protection service designed by the Alibaba Cloud research and development team. It provides DDoS, HTTP flood, and WAF protection services, and is capable to defend against three to seven layers of DDoS attacks such as SYN flood, UDP flood, ACK flood, ICMP flood, DNS query flood, NTP reply flood, HTTP flood attack, and Web application attacks.
After purchasing the Anti-DDoS Pro service, you must resolve your domain name to the Anti-DDoS Pro IP and set forwarding rules to Anti-DDoS Pro. For web service, the domain name needs to be directed to the Anti-DDoS IP, and for non-web service, the service IP needs to be replaced with the Anti-DDoS Pro IP.
This configuration directs all public network traffic to the Anti-DDoS server room. The user access traffic is forwarded to the origin site IP by using port protocol forwarding. Meanwhile, the malicious attack traffic is cleaned and filtered through the Anti-DDoS Pro service, and normal traffic is returned to the origin site IP. This entire process ascertains the stable access to the origin site IP and protects services.