DDoS Protection Processing Order

フォーカスモード

フォントサイズ

最終更新日: 2026-01-26 15:50:42

DDoS protection provides flexible DDoS custom protection policy for your business protection needs. You can configure flexible policies based on special business characteristics to handle ever-changing attack techniques. For layer 4 proxy instances, it supports the following custom rule configuration capability:
Protection Module
Feature Description
IP Blocklist and Allowlist
Limit access to EdgeOne sites via IP blocklist and allowlist match when attacking.
Port filtering
Limit access to EdgeOne sites by restricting specified ports with custom port rules during DDoS attacks.
Protocol blocking
Configurable to only allow users through specified protocol to access EdgeOne site.
Connection attack protection
Support for protection against connection-based attacks, with auto-block for clients showing abnormal connect behavior.
Feature filtering
Support custom policies targeting the characteristics of IP, TCP, and UDP packet headers or payloads in DDoS attacks.
Regional block
Limit access to EdgeOne sites via matching region in DDoS attacks.
Note:
1. L3/4 DDoS protection policies are only available for L4 proxy instances with advanced or ultimate protection levels. They cannot be configured for other scenarios.
2. When access traffic matches policies of multiple protection modules at the same time, EO will process them by the module order shown in the table.

ヘルプとサポート

この記事はお役に立ちましたか？

営業担当者にお問い合わせいただくかチケットを提出してサポートを求めることができます。

フィードバック

tencent cloud

Tencent Cloud EdgeOne

DDoS Protection Processing Order

ヘルプとサポート

Protection Module	Feature Description
IP Blocklist and Allowlist	Limit access to EdgeOne sites via IP blocklist and allowlist match when attacking.
Port filtering	Limit access to EdgeOne sites by restricting specified ports with custom port rules during DDoS attacks.
Protocol blocking	Configurable to only allow users through specified protocol to access EdgeOne site.
Connection attack protection	Support for protection against connection-based attacks, with auto-block for clients showing abnormal connect behavior.
Feature filtering	Support custom policies targeting the characteristics of IP, TCP, and UDP packet headers or payloads in DDoS attacks.
Regional block	Limit access to EdgeOne sites via matching region in DDoS attacks.