Document Center
DDoS Protection
DDoS Protection Guide
Basic Concepts
Common DDoS attacks
Alibaba Cloud black hole policies
Traffic scrubbing and black hole
Common DDoS Protection Solutions
Alibaba Cloud best practices for relieving DDoS attacks
Anti-DDoS Basic
Release notes
Product Introduction
What is Anti-DDoS Basic
How Anti-DDoS Basic works
Features
Benefits
Scenarios
Security Credibility
Quick Start
Quick Start
User Guide
Configure a cleaning threshold
Cancel traffic cleaning
View the duration of a black hole
Security credits for Anti-DDoS Basic
Configure DDoS Protection notification settings
View the time when a black hole is enabled for an instance and the reason for enabling the black hole
Connect to a server whose IP address is thrown into the black hole
Black hole triggering thresholds in Anit-DDoS Basic
Anti-DDoS Basic black hole threshold for web hosting
Cloud service specification and cleaning trigger value
ECS stress test guide
Assets
FAQ
Anti-DDoS Basic FAQ
Anti-DDoS Pro & Premium Service
Product Introduction
What is Anti-DDoS Pro
What is Anti-DDoS Premium
DDoS cost protection
Pricing
Anti-DDoS Pro
Billing methods
Anti-DDoS Premium
Billing method
Mainland China Acceleration
Global advanced mitigation
Protection packages
Buy Anti-DDoS Pro instances
Upgrade Anti-DDoS Pro instance configurations
Quick Start
Set up Anti-DDoS Pro using domains
Overview
Step 1: Add a website
Step 2: Change DNS records
Step 3: Configure protection policies
Step 4: View security reports and log data
Set up Anti-DDoS Pro using IPs and ports
Overview
Step 1: Create a port forwarding rule
Step 2: Configure forwarding policies
Step 3: View traffic statistics
Deploy Anti-DDoS Pro
Use domains
Add a website
Modify a website configuration
Delete a website configuration
Export multiple website configurations
Custom non-standard ports
Upload an SSL certificate
Create a custom TLS policy
Website configurations in an XML file
Use ports
Create a port forwarding rule rule
Modify a rule
Delete a rule
Export multiple port forwarding rules
Configure session persistence
Configure health check
Provisioning settings
Modify DNS records to protect application-layer services
Use NS records to set up Anti-DDoS Pro for application-layer services
Modify CNAME records to protect transport-layer services
Modify CNAME records to redirect traffic to the Sec-Traffic manager
Sec-Traffic manager
CNAME reuse
Allow back-to-origin IP addresses to access the origin server
Verify on your local machine whether the forwarding configuration takes effect
Change the public IP address of an ECS origin server
View security overview
View security reports
Protection settings
Protection for infrastructure
Configure an IP blacklist or whitelist
Configure diversion from origin server
Block regions for an Anti-DDoS Pro instance
Deactivate a black hole manually
Protection for website services
Configure intelligent protection
Configure a blacklist and whitelist for a domain
Block regions for a domain
Configure accurate access control rules
Configure frequency control
Protection for non-website services
Configure intelligent protection for Layer-4 services
Create an anti-DDoS policy
Configure static page caching rules
Customize policies for specific scenarios
Query and analysis
Full log
Fields supported by full log
Operation logs
Resource management
Manage instance tags
Best Practices
Managed Security Service
Create an Anti-DDoS Pro alert rule
Create an Anti-DDoS Pro dashboard
Migrate to the latest Anti-DDoS Pro
Configure Anti-DDoS Premium MCA
Monitor black hole events and traffic scrubbing events on Anti-DDoS Pro
API Reference
API overview
Call method
Signature mechanism
Common parameters
Obtain an AccessKey
Instances
DescribeInstanceIds
DescribeInstances
DescribeInstanceDetails
DescribeInstanceSpecs
DescribeInstanceStatistics
ModifyInstanceRemark
Website configuration
DescribeDomains
DescribeWebRules
CreateWebRule
ModifyWebRule
DeleteWebRule
DescribeWebInstanceRelations
AssociateWebCert
ModifyTlsConfig
Port configuration
DescribeNetworkRules
CreateNetworkRules
ConfigNetworkRules
DeleteNetworkRule
DescribeHealthCheckList
ModifyHealthCheckConfig
DescribeHealthCheckStatus
Sec-Traffic manager
DescribeSchedulerRules
CreateSchedulerRule
ModifySchedulerRule
DeleteSchedulerRule
Protection for infrastructure
DescribeAutoCcListCount
DescribeAutoCcBlacklist
AddAutoCcBlacklist
DeleteAutoCcBlacklist
EmptyAutoCcBlacklist
DescribeAutoCcWhitelist
AddAutoCcWhitelist
DeleteAutoCcWhitelist
EmptyAutoCcWhitelist
DescribeUnBlackholeCount
DescribeBlackholeStatus
ModifyBlackholeStatus
Protection for website services
DescribeWebCcProtectSwitch
ModifyWebAIProtectSwitch
ModifyWebAIProtectMode
ModifyWebIpSetSwitch
ConfigWebIpSet
EnableWebCC
DisableWebCC
ConfigWebCCTemplate
EnableWebCCRule
DisableWebCCRule
DescribeWebCCRules
CreateWebCCRule
ModifyWebCCRule
DeleteWebCCRule
ModifyWebPreciseAccessSwitch
DescribeWebPreciseAccessRule
ModifyWebPreciseAccessRule
DeleteWebPreciseAccessRule
Protection for non-website services
DescribePortAutoCcStatus
ModifyPortAutoCcStatus
DescribeNetworkRuleAttributes
ModifyNetworkRuleAttribute
Investigation
DescribeDDoSEvents
DescribePortFlowList
DescribePortConnsList
DescribePortConnsCount
DescribePortMaxConns
DescribeDomainAttackEvents
DescribeDomainQPSList
DescribeDomainStatusCodeList
Error code
Anti-DDoS Pro Service (Old)
Product Introduction
What is Anti-DDoS Pro
How Anti-DDoS Pro works
Features
Benefits
Scenarios
Pricing
Purchase guide
Billing method
Renew an instance
Description of overdue status
Improve protection capability
Quick Start
Web service
Implement Anti-DDoS Pro for a website
Enable Anti-DDoS Pro instances
Step 1. Set up HTTP protection
(Optional) Step 1: Set up HTTPS protection
Step 2. Whitelist local IP subnet
Step 3. Verify local settings
Step 4. Update DNS settings
Non-Web service
Implement Anti-DDoS Pro for a non-web service
Step 1. Set up layer 4 port protection
Step 2. Whitelist local IP subnet
Step 3. Verify local settings
(Optional) Step 4. Update DNS settings
User Guide
Provisioning guide
Website service provisioning with CNAME
Non-website service provisioning with CNAME
Description of CNAME access
Enable CNAME auto switch
Modify origin IP in provisioning settings
Modify domain's forwarding line and origin settings
Description of Anti-DDoS Pro ISP line resolution
Layer-7 Protection Settings
HTTP(S) flood protection mode
Blacklist and whitelist settings
Deactivate black hole
Flow block
Layer-4 Protection Settings
Layer-4 cleaning mode
DDoS defense police settings for non-website service
Health check settings for non-website service
Session persistence settings for non-website services
Instance management
Disable and remove certain lines
Change ECS IP
Reporting
View the security report
Set alarm notifications for DDoS events
Logging
Full log
Operation log
Managed Security Service of DDoS Protection
Best Practice
Configure a multi-line Anti-DDoS Pro instance to pass traffic back to multiple origin sites
How can origins outside Alibaba Cloud get clients’ real IP addresses?
How to determine the attack type by using Anti-DDoS Pro?
How to migrate the service from the original Anti-DDoS Pro instance to a new one?
What measures I must take if the source IP gets exposed
Obtain the real IP address of a visitor
Protect origin sites that use Anti-DDoS Pro
FAQ
API Reference
API overview
Calling methods
Common parameters
Reporting
DescribeBizFlow
DescribeDdosAttackTypeChart
DescribeDdosPeakFlow
DescribeDdosFlowProportionDiagram
DescribeDdosAttackEvents
DescribeDdosAttackEventSourceIps
DescribeCcEvents
Web service
DescribeBackSourceCidr
DescribeDomainConfigPage
DescribeDomainSecurityConfig
ListCcCustomedRule
CreateDomain
DeleteDomain
CreateTransmitLine
ModifyTransmitLine
DeleteTransmitLine
ModifyIpCnameStatus
ModifyRealServers
ConfigSwitchPriority
ModifyDomainProxy
ModifyDomainBlackWhiteList
ModifyCcStatus
ModifyCcTemplate
ModifyCcCustomStatus
CreateCcCustomedRule
UpdateCcCustomedRule
DeleteCcCustomedRule
Non-web service
DescribeDdosIpConfig
DescribePortRulePage
CreatePortRule
UpdatePortRule
DeletePortRule
DescribeHealthCheckConfig
ModifyPersistenceTimeOut
ModifyHealthCheckConfig
Modifyddosprotectconfig
Instances
DescribeInstancePage
General Reference
Guidelines for the use of documentation
Alibaba Cloud documentation
Instructions for open source documentation
Open-Source Documentation Code of Conduct
Editing Open-Source Documentation
Alibaba Cloud console
Regions and zones
Service limits
Create an AccessKey
ICP Filing
Glossary
all-products-head
This Product
This Product
All Products
DDoS Protection
DDoS Protection
All Products
DDoS Protection Guide
Download PDF
Basic Concepts
Common DDoS Protection Solutions
Show more
Show less
Anti-DDoS Basic
Download PDF
Release notes
Product Introduction
Quick Start
User Guide
FAQ
Show more
Show less
Anti-DDoS Pro & Premium Service
Download PDF
Product Introduction
Pricing
Quick Start
Deploy Anti-DDoS Pro
View security overview
View security reports
Protection settings
Query and analysis
Resource management
Best Practices
API Reference
Show more
Show less
Anti-DDoS Pro Service (Old)
Download PDF
Product Introduction
Pricing
Quick Start
User Guide
Best Practice
FAQ
API Reference
Show more
Show less
Free Trial
Free Trial