tencent cloud

Feedback

Comparison of Anti-DDoS Protection Schemes

Last updated: 2023-06-25 14:36:33

Based on Tencent's many years of practical experience in security and attack protection in various fields such as social networking, gaming, news, and finance, Anti-DDoS provides a rich set of comprehensive security solutions, satisfying your needs in security protection against different DDoS attacks in different scenarios.

This document describes the basic information and use cases of different Anti-DDoS protection schemes.

Note:

To customize a dedicated security solution, please submit a ticket.

Product Applicable User Protected Target Connection Method Billing Mode Protection Capability Configuration
Anti-DDoS Basic Tencent Cloud users Applicable to Tencent Cloud services such as CVM and CLB No configuration required Free of charge By default, all users can enjoy protection capability of up to 2 Gbps. If your application is frequently attacked, Tencent Cloud will adjust the basic protection capability based on historical attacks to ensure the overall stability of the Tencent Cloud platform. Tencent Cloud service IPs are automatically protected with no configuration required.
Anti-DDoS Pro (Standard) Tencent Cloud users in Beijing, Shanghai, and Guangzhou regions It is applicable to Tencent Cloud services such as CVM, CLB, WAF, CBM, BM CLB, NAT IP, EIP, GAAP IP, and applications configured with a lot of Tencent Cloud service IPs that need to be protected. It takes effect after a protected IP is bound in the Anti-DDoS console. For more information, see Getting Started. It is billed by the number of protected IPs and application bandwidth. Tencent Cloud provides an all-out protection. The maximum protection capability is adjusted dynamically based on the actual network conditions of the region. You can enjoy a higher DDoS protection capability simply by purchasing an Anti-DDoS Pro instance and binding it to the Tencent Cloud service IP to be protected with no need to adjust your application.
Anti-DDoS Pro (Enterprise) Tencent Cloud users in and outside the Chinese mainland It is applicable to Anti DDoS EIP, which can be bound with cloud resources such as CVM, private CLB, CBM, NAT Gateway. It takes effect only after binding with an Anti DDoS EIP. For details, see Getting Started.
  • Chinese mainland: Base protection + elastic protection
  • Outside Chinese mainland: Tencent Cloud Anti-DDoS cleansing center provides an all-out protection
  • Chinese mainland: Protection lines include BGP lines and non-BGP lines, which all provide Tbps-level protection capability
  • Outside Chinese mainland: Tencent Cloud Anti-DDoS cleansing center provides an all-out protection. The maximum protection capability is adjusted dynamically based on the actual network conditions of the region. A maximum of Tbps-level protection capability is provided.
  • You can enjoy DDoS protection capability simply by creating an Anti DDoS EIP and binding it with the Anti-DDos Pro instance, with no need to adjust your application.
    Anti-DDoS Pro (Customized) Tencent Cloud users in and outside the Chinese mainland. Anti-DDoS Pro (Customized) is in beta test currently. To purchase it, please contact us. It is applicable to Tencent Cloud services such as CVM, CLB, WAF, CBM, BM CLB, NAT IP, EIP, GAAP IP, and applications configured with a lot of Tencent Cloud service IPs that need to be protected. It takes effect after a protected IP is bound in the Anti-DDoS console. It is billed by the number of protected IPs and application bandwidth. Tencent Cloud provides an all-out protection. The maximum protection capability is 50 Gbps. You can enjoy a higher DDoS protection capability simply by purchasing an Anti-DDoS Pro instance and binding it to the Tencent Cloud service IP to be protected, with no need to adjust your application.
    Anti-DDoS Advanced (Chinese mainland) All Internet users whose applications are deployed in the Chinese mainland Applicable to TCP, UDP, HTTP, and HTTPS (WebSocket is supported by default) The traffic is sent to the proxy through the Anti-DDoS Advanced instance and then forwarded to the backend real server IP. For more information, see Website Business Connection and Non-website Business Connection. Billed by base protection bandwidth+ elastic protection bandwidth + application bandwidth + forwarding rules HTTP/HTTPS CC protection is supported. Protection lines include BGP lines and non-BGP lines:
  • BGP lines provide a maximum of Tbps protection capability.
  • Non-BGP lines provide a maximum of Tbps protection capability.
  • By configuring connection based on a forwarding rule, you can use an Anti-DDoS Advanced instance as the address to provide your service and hide your real server.
    Anti-DDoS Advanced (Outside Chinese mainland) All Internet users whose applications are deployed outside the Chinese mainland Applicable to TCP, UDP, HTTP, and HTTPS (WebSocket is supported by default) The traffic is sent to the proxy through the Anti-DDoS Advanced instance and then forwarded to the backend real server IP. For more information, see Website Business Connection and Non-website Business Connection. Billed by base protection bandwidth + elastic protection bandwidth + application bandwidth + forwarding rules
  • Up to 400 Gbps protection capability is provided.
  • HTTP/HTTPS CC protection is supported.
  • The cleansing centers are deployed in regions such as Hong Kong (China), Singapore, Seoul, Tokyo, Virginia, Silicon Valley, and Frankfurt.
  • By configuring connection based on a forwarding rule, you can use an Anti-DDoS Advanced instance as the address to provide your service and hide your real server.
    Anti-DDoS Advanced (Global Enterprise) Tencent Cloud users whose applications are deployed outside the Chinese mainland Applicable to Tencent Cloud services such as CVM and CLB It takes effect after a protected IP is bound in the Anti-DDoS console. For more information, see Getting Started. Billed by all-out protection bandwidth + pay-as-you-go application bandwidth + quarterly application bandwidth
  • Tbps-level protection capability is provided.
  • The cleansing nodes are deployed in regions such as Hong Kong (China), Singapore, Seoul, Tokyo, Mumbai, Silicon Valley, Virginia, Moscow, Frankfurt, and Bangkok.
  • You can enjoy a higher DDoS protection capability by purchasing an Anti-DDoS Advanced instance and associating the instance IP with the Tencent Cloud service to be protected.
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support