Document Center
DDoS Protection
Announcements & Updates
Release notes
System upgrades
[System upgrade] Anti-DDoS Premium is upgraded on July 7, 2020
[System upgrade] Anti-DDoS Premium is upgraded on June 25, 2020
[System upgrade] Anti-DDoS Pro is upgraded on June 4, 2020
[System upgrade] Anti-DDoS Premium is upgraded on May 7, 2020
[System upgrade] Anti-DDoS Premium is upgraded in April and May 2020
[System upgrade] Anti-DDoS Premium is upgraded on April 23, 2020
[System upgrade] Anti-DDoS Premium is upgraded on April 22, 2020
[System upgrade] Anti-DDoS Premium is upgraded on February 28, 2020
[System upgrade] Anti-DDoS Pro is upgraded on January 14 and 16, 2020
[System upgrade] Anti-DDoS Pro of the previous version is upgraded on January 7 and 9, 2020
[System upgrade] Anti-DDoS Pro no longer provides traffic forwarding services for instances that have expired for more than seven days from January 6, 2020
[System upgrade] Anti-DDoS Pro of the previous version is upgraded on December 24, 2019
[System upgrade] Anti-DDoS Premium is upgraded on December 25 and 31, 2019
[System upgrade] Anti-DDoS Premium and GameShield are upgraded on December 19, 2019
[System upgrade] Anti-DDoS Pro is upgraded on December 15, 2019
[System upgrade] Anti-DDoS Pro of the previous version is upgraded on December 27, 2019
[System upgrade] Anti-DDoS Pro is upgraded on December 18, 2019
[System upgrade] Anti-DDoS Premium is upgraded on December 5 and 6, 2019
[System upgrade] Anti-DDoS Pro of the previous version is upgraded on December 6, 2019
[System upgrade] Anti-DDoS Premium is upgraded on December 17, 2019
[System upgrade] Anti-DDoS Premium is upgraded on November 28, 2019
[System upgrade] Anti-DDoS Premium is upgraded on November 21, 2019
[System upgrade] Anti-DDoS Premium is upgraded on November 14, 2019
[System upgrade] Anti-DDoS Premium is upgraded on October 25, 2019
[System upgrade] Anti-DDoS Premium is upgraded on May 15, 2020
Updates
[Update] The protection bandwidth of Anti-DDoS Pro of the previous version is adjusted on June 30, 2020
[Update] The protection bandwidth of Anti-DDoS Pro of the previous version is adjusted on December 26, 2019
Product notices
[Notice] Anti-DDoS Pro of the previous version is discontinued from the market
[Notice] Anti-DDoS Pro of the previous version is discontinued from the market
[Notice] APIs in the previous version of Anti-DDoS Pro are deprecated at 00:00:00 (UTC+8) on June 30, 2020
[Notice] The Security Reports feature in the previous version of Anti-DDoS Pro is deprecated on April 29, 2020
DDoS Protection Guide
Introduction to DDoS attacks
Best practices for mitigating DDoS attacks
Blackhole filtering policy of Alibaba Cloud
View black hole triggering thresholds in Anit-DDoS Origin Basic
Terms
Product Introduction
Overview
Anti-DDoS Origin
What is Anti-DDoS Origin?
Scenarios
What are Anti-DDoS Pro and Anti-DDoS Premium?
Scenario-specific anti-DDoS solutions
Pre-sales FAQ
Pricing
Billing methods of Anti-DDoS Origin
Billing methods of Anti-DDoS Pro
Anti-DDoS premium billing methods
Billing methods of the Insurance and Unlimited mitigation plans
Mainland China Acceleration billing methods
Billing methods for global advanced mitigation
Sec-MCA billing methods
Function plan
Anti-DDoS Origin User Guide
View the Overview page of Traffic Security
Assets
Use Traffic Security Manager
Purchase an Anti-DDoS Origin Enterprise instance
Use the service monitoring feature
View information on the Attack Analysis page
On-demand protection
Enable traffic rerouting to an on-demand instance
Enable the Automatic (NetFlow) mode
Cleaning settings
Configure a traffic scrubbing threshold
Cancel traffic cleaning
Cloud service specification and cleaning trigger value
Perform a stress test on an ECS instance
Instances
Add a cloud service to Anti-DDoS Origin Enterprise for protection
View security reports
View operations logs
Upgrade instance types
Specify an alias
Mitigation settings (public preview)
Configure cross-border traffic blocking
Configure policies
Mitigation analysis (public preview)
Enable mitigation analysis
Query mitigation logs
View mitigation reports
Fields in logs
Black hole policies
View the duration of blackhole filtering
Connect to an ECS instance for which blackhole filtering is triggered
Deactivate blackhole filtering
View the time when a black hole is enabled for an instance and the reason for enabling the black hole
Anti-DDoS Basic black hole threshold for web hosting
Best Practices
Configure alert notifications for DDoS attack events
Activate Anti-DDoS Origin to protect IP addresses from DDoS attacks
Upgrade Anti-DDoS Origin to Anti-DDoS Pro or Anti-DDoS Premium
Best practices for automatic deactivation of blackhole filtering
Use Anti-DDoS Origin Enterprise and Anti-DDoS Pro
Use Anti-DDoS Origin and WAF
Use Anti-DDoS Origin and SLB
Use an on-demand Anti-DDoS Origin instance to enable automatic protection for your assets
Anti-DDoS Pro & Premium User Guide
Purchase an Anti-DDoS Pro or Anti-DDoS Premium instance
Quick Start
Set up Anti-DDoS Pro using domains
Overview
Step 1: Add forwarding rules
Step 2: Configure service traffic forwarding
Step 3: Configure protection policies
Step 4: View the protection data of your website services
Set up Anti-DDoS Pro using IPs and ports
Overview
Step 1: Create a port forwarding rule
Step 2: Configure port forwarding and DDoS mitigation policies
Step 3: View the protection data of a port
Check the security overview
Provisioning
Use domains
Add a website
Verify the forwarding configuration on your local machine
Modify the back-to-origin settings for a website
Edit a website configuration
Delete a website configuration
Export multiple website configurations at a time
Specify non-standard ports for protection
Upload an HTTPS certificate
Customize a TLS policy
Mark back-to-origin requests
Website configurations in an XML file
Use the CNAME reuse feature
Use ports
Create forwarding rules
Verify the forwarding configuration on your local machine
Modify the back-to-origin settings for a port
Edit forwarding rules
Delete forwarding rules
Export multiple port configurations
Configure a health check
Configure session persistence
Provisioning settings
Change DNS records to protect website services
Enable NS Mode Access to protect a website
Modify the CNAME record to protect a non-website service
Change the CNAME record to redirect traffic to Sec-Traffic Manager
Sec-Traffic Manager
Overview
Create a cloud service interaction rule
Create a tiered protection rule
Create a CDN or DCDN interaction rule
Create a network acceleration rule
Create a Sec-MCA rule
Share one Anti-DDoS Pro or Anti-DDoS Premium instance among multiple cloud resources
Allow back-to-origin IP addresses to access the origin server
Change the public IP address of an ECS origin server
Configure Anti-DDoS Premium MCA
Configure Anti-DDoS Premium Sec-MCA
Resource management
Overview
Modify the burstable protection bandwidth of an instance
Upgrade an instance
Renew an instance
Manage tags of instance
Apply for and use Anti-DDoS plans
Purchase global advanced mitigation
Query and analysis
View information on the Attack Analysis page
Log analysis
Overview
Fields supported by full log
Quick start
Query and analyze logs
Query log reports
View operations logs
Query advanced mitigation logs
CloudMonitor alerts
Create threshold-triggered alert rules in the CloudMonitor console
Configure an alert rule for Anti-DDoS Pro or Anti-DDoS Premium
Monitor attack events that occur on Anti-DDoS Pro or Anti-DDoS Premium
Create an Anti-DDoS dashboard
Protection settings
Protection for infrastructure
Configure the IP address blacklist and whitelist for an Anti-DDoS Pro or Anti-DDoS Premium instance
Use the feature of UDP Reflection Attacks Protection
Configure diversion from the origin server
Configure blocked regions
Deactivate blackhole filtering
Connect to an ECS instance for which blackhole filtering is triggered
Protection for website services
Use the intelligent protection feature
Configure blacklists and whitelists for domain names
Configure blocked regions for domain names
Configure accurate access control rules
Configure frequency control
Protection for non-website services
Configure intelligent protection
Create an anti-DDoS protection policy
Configure the speed limit for source IP addresses
Configure static page caching
Create custom mitigation policies for specific scenarios
Best practices
Best practices to add a service to Anti-DDoS Pro or Anti-DDoS Premium
Add a website to both Anti-DDoS Pro or Anti-DDoS Premium and WAF
Obtain the actual source IP addresses of requests
Obtain the actual source IP addresses of requests to an origin server that is not deployed on Alibaba Cloud
Switch service traffic to a new Anti-DDoS Pro or Anti-DDoS Premium instance
Configure ACLs for the origin server
Best practices to configure an ECS instance as the origin server of a non-website service
Handle exposure of the origin IP address
API Reference
Anti-DDoS Origin
API reference (2017-11-20)
List of operations by function
Make API requests
Common parameters
On-demand instances
DescribeOnDemandInstance
ModifyOnDemaondDefenseStatus
DescribeTopTraffic
API reference (2018-07-20)
List of operations by function
Make API requests
Common parameters
Instances
DescribeRegions
DescribeInstanceList
DescribeInstanceSpecs
DescribeExcpetionCount
DescribePackIpList
ModifyRemark
CheckGrant
Protection
AddIp
DeleteIp
DeleteBlackhole
Charts and logs
DescribeDdosEvent
DescribeOpEntities
DescribeTraffic
DescribeOnDemandDdosEvent
On-demand instances
DescribeOnDemandInstanceStatus
SetInstanceModeOnDemand
CreateSchedruleOnDemand
QuerySchedruleOnDemand
ConfigSchedruleOnDemand
DeleteSchedruleOnDemand
Tags
ListTagKeys
ListTagResources
UntagResources
TagResources
Mitigation analysis
GetSlsOpenStatus
CheckAccessLogAuth
ListOpenedAccessLogInstances
Anti-DDoS Pro & Premium
List of operations by function
Make API requests
Request signatures
Common parameters
Obtain an AccessKey pair
Create an Anti-DDoS Pro or Anti-DDoS Premium instance by calling an API operation
Instances
DescribeInstanceIds
DescribeInstances
DescribeInstanceStatus
DescribeInstanceDetails
DescribeInstanceSpecs
DescribeInstanceStatistics
ModifyInstanceRemark
DescribeElasticBandwidthSpec
ModifyElasticBandWidth
DescribeDefenseCountStatistics
ReleaseInstance
Website configuration
DescribeDomains
DescribeWebRules
CreateWebRule
ModifyWebRule
DeleteWebRule
DescribeWebInstanceRelations
DescribeCerts
AssociateWebCert
DescribeWebCustomPorts
ModifyTlsConfig
ModifyHttp2Enable
DescribeWebAccessMode
ModifyWebAccessMode
DescribeCnameReuses
ModifyCnameReuse
DescribeL7RsPolicy
ConfigL7RsPolicy
Port configuration
DescribeNetworkRules
CreateNetworkRules
ConfigNetworkRules
DeleteNetworkRule
DescribeHealthCheckList
ModifyHealthCheckConfig
DescribeHealthCheckStatus
ConfigLayer4RuleBakMode
ConfigLayer4RulePolicy
ConfigLayer4Remark
DescribeLayer4RulePolicy
Sec-Traffic manager
DescribeSchedulerRules
CreateSchedulerRule
ModifySchedulerRule
DeleteSchedulerRule
Protection for infrastructure
DescribeAutoCcListCount
DescribeAutoCcBlacklist
AddAutoCcBlacklist
DeleteAutoCcBlacklist
EmptyAutoCcBlacklist
DescribeAutoCcWhitelist
AddAutoCcWhitelist
DeleteAutoCcWhitelist
EmptyAutoCcWhitelist
DescribeUnBlackholeCount
DescribeBlackholeStatus
ModifyBlackholeStatus
DescribeNetworkRegionBlock
ConfigNetworkRegionBlock
DescribeBlockStatus
ModifyBlockStatus
DescribeUnBlockCount
ConfigUdpReflect
DescribeUdpReflect
Protection for website services
DescribeWebCcProtectSwitch
ModifyWebAIProtectSwitch
ModifyWebAIProtectMode
ModifyWebIpSetSwitch
ConfigWebIpSet
EnableWebCC
DisableWebCC
ConfigWebCCTemplate
EnableWebCCRule
DisableWebCCRule
DescribeWebCCRules
CreateWebCCRule
ModifyWebCCRule
DeleteWebCCRule
ModifyWebPreciseAccessSwitch
DescribeWebPreciseAccessRule
ModifyWebPreciseAccessRule
DeleteWebPreciseAccessRule
ModifyWebAreaBlockSwitch
DescribeWebAreaBlockConfigs
ModifyWebAreaBlock
Protection for non-website services
DescribePortAutoCcStatus
ModifyPortAutoCcStatus
DescribeNetworkRuleAttributes
ModifyNetworkRuleAttribute
Custom scenario policy
DescribeSceneDefensePolicies
CreateSceneDefensePolicy
ModifySceneDefensePolicy
DeleteSceneDefensePolicy
DescribeSceneDefenseObjects
AttachSceneDefenseObject
DetachSceneDefenseObject
EnableSceneDefensePolicy
DisableSceneDefensePolicy
Static page caching
ModifyWebCacheSwitch
ModifyWebCacheMode
ModifyWebCacheCustomRule
DeleteWebCacheCustomRule
DescribeWebCacheConfigs
Attack analysis
DescribeAttackAnalysisMaxQps
DescribeDDosEventMax
DescribeDDosAllEventList
DescribeDDosEventArea
DescribeDDosEventAttackType
DescribeDDosEventIsp
DescribeDDosEventSrcIp
Monitoring reports
DescribeDDoSEvents
DescribePortFlowList
DescribePortConnsList
DescribePortConnsCount
DescribePortMaxConns
DescribePortAttackMaxFlow
DescribePortViewSourceCountries
DescribePortViewSourceIsps
DescribePortViewSourceProvinces
DescribeDomainAttackEvents
DescribeDomainQPSList
DescribeDomainStatusCodeList
DescribeDomainOverview
DescribeDomainStatusCodeCount
DescribeDomainTopAttackList
DescribeDomainViewSourceCountries
DescribeDomainViewSourceProvinces
DescribeDomainViewTopCostTime
DescribeDomainViewTopUrl
DescribeDomainQpsWithCache
Log analysis
DescribeSlsOpenStatus
DescribeSlsAuthStatus
DescribeLogStoreExistStatus
DescribeSlsLogstoreInfo
ModifyFullLogTtl
DescribeWebAccessLogDispatchStatus
DescribeWebAccessLogStatus
EnableWebAccessLogConfig
DisableWebAccessLogConfig
DescribeWebAccessLogEmptyCount
EmptySlsLogstore
System configuration and logs
DescribeStsGrantStatus
DescribeBackSourceCidr
DescribeOpEntities
DescribeDefenseRecords
DescribeAsyncTasks
CreateAsyncTask
DeleteAsyncTask
Tag
DescribeTagKeys
DescribeTagResources
CreateTagResources
DeleteTagResources
Location parameters
Error codes
FAQ
FAQ overview
Pre-sales FAQ
FAQ about Anti-DDoS Origin
FAQ about Anti-DDoS Pro and Anti-DDoS Premium
FAQ about the billing of burstable protection
all-products-head
This Product
This Product
All Products
All Products
Show more
Show less