tencent cloud

When you receive a DDoS attack alarm message or notice any issue with your business, you need to view details of the attacks, including the traffic and current protection effect. Enough information is critical for you to take measures in time to keep your business running smoothly.
The statistical reports in the Anti-DDoS Advanced Console provide rich information to help you easily stay up to date with the current business and attack conditions.

Viewing DDoS Protection Details

1. Log in to the Anti-DDoS Console.
2. Select Anti-DDoS Advanced > Statistical Report.
3. On the DDoS Protection tab, set the query period and select the region, line, target instance, and protected IP to check whether the instance has been attacked.

   You can query the attack traffic and DDoS attack events in the last 180 days.

   • View the information of attacks suffered by the selected Anti-DDoS Advanced instance within the queried period, such as the trends of attack traffic bandwidth/attack packet rate. When the instance is under attack, you can intuitively view the attack bandwidth peak in the bandwidth trend diagram.
   • View how the attacks distribute across different attack traffic protocols, attack packet protocols, and attack types.
     • Attack Traffic Protocol Distribution displays how the attacks suffered by the selected Anti-DDoS Advanced instance distribute across different attack traffic protocols within the queried period.
     • Attack Packet Protocol Distribution displays how the attacks suffered by the selected Anti-DDoS Advanced instance distribute across different attack packet protocols within the queried period.
     • Attack Type Distribution displays how the attacks suffered by the selected Anti-DDoS Advanced instance distribute across different attack types within the queried period.
       
     • Attack Source Distribution: in the Attack Source Distribution section, you can view the distribution of DDoS attack sources in and outside Mainland China within the queried period, so that you can take further protective measures based on the displayed information.
   • In DDoS Attack Records, you can view details of the DDoS attack events within the queried period, including the start time, duration, type, and status of each attack event.
     • You can download DDoS attack packets to analyze and trace the attacks.
     • Click Attack Details to view the maximum packet rate, maximum attack traffic bandwidth, and total amount of traffic cleansed during the DDoS attack event.
     • Click Attack Source Info to view the attack source IP addresses, source regions, generated attack traffic, and attack packet size.

       Attack source information is sampled data, which is randomly collected for statistics. The data will be displayed around 2 hours after an attack ends.

Viewing CC Protection Conditions

1. Log in to the Anti-DDoS Console.

2. Select Anti-DDoS Advanced > Statistical Report.

3. Click the CC Protection tab, set the query period, and select the region, line, target instance, and protected IP to check whether the instance has been attacked.

   You can query the number of attack requests and CC attack events in the last 180 days.

   • You can select Today to view the trend in the number of attack requests to the selected Anti-DDoS Advanced instance. You can check whether the total number of requests is far higher than the normal QPS, whether the attack QPS has a value, and whether the value is extremely high.
   • If the protected IP is under CC attack, the system will record the attack start time, end time, attacked domain names, attacked URLs, total request peak, attack request peak, and attack sources.
     • Total request peak: the peak of the total request traffic the Anti-DDoS Advanced instance receives when the attack occurs.
     • Attack request peak: the peak number of requests blocked by the instance when the attack occurs.

Viewing Business Traffic Conditions

1. Log in to the Anti-DDoS Console.
2. Select Anti-DDoS Advanced > Statistical Report.
3. Click the Scenarios tab, set the query period, and select the region, line, target instance, and protected IP to view the inbound/outbound business traffic bandwidth trend, inbound/outbound business packet rate trend, and new connections or concurrent connections trend in the selected period. In addition, you can view the peaks of inbound/outbound business traffic bandwidth and inbound/outbound business packet rate.
   • Number of concurrent connections: the total number of connections that exist in the system at a time point.
   • Number of new connections: the number of TCP connections that are established in the system in one second.

     You can query the business information in the last 180 days.