tencent cloud

Feedback

Comparison of Anti-DDoS Protection Schemes

Last updated: 2022-04-28 11:25:07

Based on Tencent's many years of practical experience in security and attack protection in various fields such as social networking, gaming, news, and finance, Anti-DDoS provides a rich set of comprehensive security solutions, satisfying your needs in security protection against different DDoS attacks in different business scenarios.

This document describes the basic information and use cases of different Anti-DDoS solutions.

Note:

To customize a dedicated security solution, please submit a ticket for assistance.

Product Name Applicable User Protected Object Connection Method Billing Mode Protection Capability Configuration Description
Anti-DDoS Basic Tencent Cloud resources only It is applicable to Tencent Cloud services such as CVM and CLB. No configuration required Free of charge
  • It mainly protects the businesses of Tencent Cloud users that are unlikely to be attacked and where attack traffic does not exceed the free basic protection capability. If you need a higher protection capability, we recommend you use Anti-DDoS Pro.
  • By default, general users can enjoy protection capability of up to 2 Gbps, while VIP users up to 10 Gbps. If your business is frequently attacked, Tencent Cloud will adjust the basic DDoS protection capability based on historical attacks to ensure the overall stability of the Tencent Cloud platform.
  • Up to 2 Gbps protection capability outside the Chinese mainland is provided for all users.
  • Tencent Cloud service IPs are automatically protected with no configuration required.
    Anti-DDoS Pro Tencent Cloud users in Beijing, Shanghai, and Guangzhou regions only It is applicable to Tencent Cloud services such as CVM, CLB, WAF, CPM, BM CLB, NAT IP, EIP, GAAP IP, and applications configured with a lot of Tencent Cloud service IPs that need to be protected. It takes effect after a protected IP is bound in the Anti-DDoS console. For more information, please see Getting Started. It is billed by the number of protected resources.
  • Tencent Cloud provides an all-out protection. The maximum protection capability is adjusted dynamically based on the actual network conditions of the region.
  • HTTP CC protection is supported.
  • You can enjoy a higher DDoS protection capability simply by purchasing an Anti-DDoS Pro instance and binding it to the Tencent Cloud service IP to be protected with no need to adjust your business.
    Anti-DDoS Advanced (in the Chinese mainland) Users whose businesses are deployed in the Chinese mainland TCP, UDP, HTTP, and HTTPS businesses are supported (WebSocket is supported by default). The traffic is sent to the proxy through the Anti-DDoS Advanced instance and then forwarded to the backend real server IP. For more information, please see Accessing Website Applications and Accessing Non-website Applications. It is billed by base protection bandwidth, elastic protection bandwidth, forwarding bandwidth, and the number of forwarding rules. HTTP/HTTPS CC protection is supported. Protective lines include BGP line and non-BGP line:
  • BGP line provides TB-level protection capability.
  • Non-BGP line provides up to 1 Tbps protection capability.
  • By configuring connection based on a forwarding rule, you can use an Anti-DDoS Advanced instance as the address to provide your business and hide your real server.
    Anti-DDoS Advanced (outside the Chinese mainland) Users whose businesses are deployed outside the Chinese mainland TCP, UDP, HTTP, and HTTPS businesses are supported (WebSocket is supported by default). The traffic is sent to the proxy through the Anti-DDoS Advanced instance and then forwarded to the backend real server IP. For more information, please see Accessing Website Applications and Accessing Non-website Applications. It is billed by base protection bandwidth, elastic protection bandwidth, forwarding bandwidth, and the number of forwarding rules.
  • Currently, up to 400 Gbps protection capability is provided.
  • HTTP/HTTPS CC protection is supported.
  • The cleansing centers are deployed in regions such as Hong Kong (China), Taiwan (China), Singapore, Seoul, Tokyo, Virginia, Silicon Valley, and Frankfurt.
  • By configuring connection based on a forwarding rule, you can use an Anti-DDoS Advanced instance as the address to provide your business and hide your real server.
    Anti-DDoS Advanced (enterprises outside the Chinese mainland) Users whose businesses are deployed outside the Chinese mainland It is applicable to Tencent Cloud services such as CVM and CLB. It takes effect after a protected IP is bound in the Anti-DDoS console. For more information, please see Getting Started. It is flexibly billed by full protection capability, pay-as-you-go business bandwidth and quarterly business bandwidth.
  • Tbps-level protection capability is provided.
  • The cleansing nodes are deployed in regions such as Hong Kong (China), Singapore, Seoul, Tokyo, Mumbai, Silicon Valley, Virginia, Moscow, Frankfurt, and Bangkok.
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support