tencent cloud

Anti-DDoS Advanced (Global Enterprise Edition) supports precise protection for connected web businesses. With the precise protection, you can configure protection policies combining multiple conditions of common HTTP fields, such as URI, UA, Cookie, Referer, and Accept to screen access requests. For the requests matched the conditions, you can configure CAPTCHA to verify the requesters or a policy to automatically drop or allow the requests. Precise protection is available for policy customization in various use cases to precisely defend against CC attacks.

Prerequisite

You have purchased an Anti-DDoS Advanced (Global Enterprise Edition) instance and set the object to protect.

Directions

1. Log in to the Anti-DDoS Advanced (Global Enterprise Edition) console and select Anti-DDoS Advanced > Configurations > CC Protection.
2. Select an Anti-DDoS Advanced instance ID in the list on the left, such as "bgp-00xxxxxx".
   
3. Click Set in the Precise Protection section.
4. Click Create. On the pop-up page, enter the required fields and click OK.
   

Parameter description:

• For "Domain Name", select a domain name.
• For "Match Condition", set a match condition to identify requests that use HTTP fields. The following HTTP fields are supported:

  Match Field	Field Description	Logic
  URI	The URI of an access request.	Equals to, includes, or does not include.
  UA	The identifier and other information of the client browser that initiates an access request.	Equals to, includes, or does not include.
  Cookie	The cookie information in an access request.	Equals to, includes, or does not include.
  Referer	The source website of an access request, from which the access request is redirected.	Equals to, includes, or does not include.
  Accept	The data type to be received by the client that initiates the access request.	Equals to, includes, or does not include.

• For "Match Action", set to "CAPTCHA", "Block" or "Allow".
  • If "CAPTCHA" is selected, requests that matched the specified conditions will be verified via CAPTCHA.
  • If "Block" is selected, requests that matched the specified conditions will be blocked.
  • If "Allow" is selected, requests that matched the specified conditions will be allowed.

5. After the rule is created, it is added to the rule list. You can click Configuration on the right of the rule to modify it.