tencent cloud

All product documents
Anti-DDoS
Documentation Anti-DDoSOperation GuideProtection ConfigurationDDoS ProtectionDDoS Protection Levels
DDoS Protection Levels
Download PDF
Last updated: 2024-07-01 11:33:59
DDoS Protection Levels
Last updated: 2024-07-01 11:33:59
Download PDF

Use cases

Anti-DDoS provides three available protection levels for you to adjust protection policies against different DDoS attacks. The details are as follows:
Protection level
Protection action
Description
Loose
Filters SYN and ACK data packets with explicit attack attributes.
Filters TCP, UDP, and ICMP data packets that are not compliant with the protocol specification.
Filters UDP data packets with explicit attack attributes.
This protection level uses a loose cleansing policy and defends against only explicit attack packets.
We recommend that you choose this protection level when normal requests are blocked. Complex attack packets may bypass the security system.
Medium
Filters SYN and ACK data packets with explicit attack attributes.
Filters TCP, UDP, and ICMP data packets that are not compliant with the protocol specification.
Filters UDP data packets with explicit attack attributes.
Filters common UDP-based attack packages.
Actively verifies the source IP addresses of some access attempts.
This protection level uses a cleansing policy that is suitable for most businesses and capable of defending against common attacks.
This is the default protection level.
Strict
Filters SYN and ACK data packets with explicit attack attributes.
Filters TCP, UDP, and ICMP data packets that are not compliant with the protocol specification.
Strictly checks and filters UDP data packets with explicit attack attributes and UDP-based attack packets.
Actively verifies the source IP addresses of some access attempts.
Filters ICMP attack packages.
The cleansing policy is strict. We recommend you use this level when attack packets bypass the security system in the Normal mode.

Directions

1. Log in to the new Anti-DDoS console and click DDoS Protection on the left sidebar.
2. Select an Anti-DDoS instance ID in the list on the left, such as "bgp-00xxxxxx".

3. In the DDoS protection level section, choose a protection level.
Was this page helpful?
You can also Contact Sales or Submit a Ticket for help.
Yes
No

Feedback

Contact Us

Contact our sales team or business advisors to help your business.

Contact Us
Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 available.

Submit a Ticket
7x24 Phone Support
Hong Kong, China
+852 800 906 020 (Toll Free)
United States
+1 844 606 0804 (Toll Free)
United Kingdom
+44 808 196 4551 (Toll Free)
Canada
+1 888 605 7930 (Toll Free)
Australia
+61 1300 986 386 (Toll Free)
EdgeOne hotline
+852 300 80699
More local hotlines coming soon