Connection Attack Protection

Recent Pages

Connection Attack Protection

Last updated: 2024-07-01 11:33:59

Anti-DDoS can automatically trigger blocking policies to block suspicious connection . With Max abnormal connections from source IP enabled, a source IP that frequently sends a large number of messages with abnormal connection status will be added to the blocklist. The source IP will be blocked for 15 minutes. After that, it will recover access to the business.
Note:
The Lighthouse edition does not support custom DDoS protection configurations.
The following fields are supported:
New connections from source IP: It limits the rate of new connections from source IP addresses.
Concurrent connections from source IP: It limits the number of active TCP connections from source IP addresses at any time point.
New connections to destination IP: It limits the rate of new connections to destination IP addresses.
Concurrent connections to destination IP: It limits the number of active TCP connections to destination IP addresses at any time point.
Max abnormal connections from source IP: It limits the maximum number of abnormal connections from source IP addresses.
Directions
1. Log in to the new Anti-DDoS console and click DDoS Protection on the left sidebar.
2. Select an Anti-DDoS instance ID in the list on the left, such as "bgp-00xxxxxx".
﻿
3. In the Connection attack protection section, click Set.
4. On the pop-up page, click Create, enable Connection flood protection and Abnormal connection protection, and click OK.
﻿
5. After the rule is created, it is added to the attack protection list. To modify the rule, click Configure in the Operation column on the right.
﻿
﻿