tencent cloud

Anti-DDoS

Release Notes and Announcements
Release Notes
Announcements
Product Introduction
Overview
Strengths
Use Cases
Concepts
Blocking Policies
Relevant Products
Comparison of Anti-DDoS Solutions
Purchase Guide
Billing Overview
Purchase Directions
Getting Started
Anti-DDoS Pro
Anti-DDoS Advanced
Operation Guide
Operation Overview
Protection Overview
Usage Limits
Asset Center
Business Connection
Smart Scheduling
Protection Configuration
Security Operations
Service Management
Practical Tutorial
Remote Protection Scheme with Anti-DDoS Pro
Using Anti-DDoS Pro Together with WFA
Suggestions on Stress Tests
Solutions to Real Server IP Exposure
Creating an Anti-DDoS EIP
Configuration Directions and Notes on CC Protection Policies
Syncing Forwarding Rules to New Anti-DDoS Advanced Instances
‌Smart Scheduling of CTCC/CUCC/CMCC Traffic
Troubleshooting
Business IPs Blocked Due to High-traffic Attacks
‌Business IPs Blocked When DDoS Attack Traffic Doesn't Reach the Threshold
How to Fix a 502 Bad Gateway Error
"No ICP filing" Prompted During Domain Name Connection
A public IP suffered DDoS attacks
API Documentation
History
Introduction
API Category
Making API Requests
Anti-DDoS Advanced Instance APIs
Resource List APIs
Protection Configuration APIs
Other APIs
Alarm Notification APIs
Connection Configuration APIs
Intelligent Scheduling APIs
Black hole unblocking APIs
Statistical Report APIs
Data Types
Error Codes
FAQs
Blocking
Attacks
Features
Billing
Service Level Agreement
Product Policy
Privacy Policy
Data Processing And Security Agreement
Glossary
Documentation Anti-DDoSComparison of Anti-DDoS Solutions

Comparison of Anti-DDoS Solutions

PDF
Focus Mode
Font Size
Last updated: 2025-03-17 15:42:59
Based on Tencent's rich experience in security and attack protection in various fields such as social networking, gaming, news, and finance, Anti-DDoS provides a wide variety of security solutions, satisfying your needs in security protection against different DDoS attacks in different business scenarios.

This document describes the basic information and use cases of different Anti-DDoS editions.
Note:
To customize a dedicated security solution, submit a ticket.
Edition
Region scope
Protection scope
How to activate
Billable items
Capability
Configuration
Anti-DDoS Basic
Tencent Cloud users
Tencent Cloud services such as CVM , CLB and NAT Gateway.
No configuration required
Free of charge
A protection capability of 2 Gbps is offer to all users by default. However, if your service is frequently attacked, Tencent Cloud may adjust the basic protection capability based on historical attacks to ensure the overall stability of the Tencent Cloud platform.
Tencent Cloud service IPs are automatically protected with no configuration required.
Beijing, Shanghai, and Guangzhou regions
CVM, CLB, WAF, CBM, BM CLB, NAT IP, EIP, GAAP IP, and customers using a large number of cloud IPs.
Add the IPs to protect in the Anti-DDoS console. See Getting Started.
Billed by the number of protected IPs and service bandwidth
Tencent Cloud provides all-out protection. The maximum protection capability is adjusted dynamically based on the actual network conditions of the region.
Purchase an Anti-DDoS Pro instance and bind it with the IPs of Tencent Cloud resources to protect.
Global Tencent Cloud regions
CVM, private CLB, CBM, NAT Gateway
Create an Anti-DDoS EIP and bind it with the resources you want to protect.See Getting Started.
Chinese mainland: The protection capability adopts the "base protection + elastic protection" mode.
Outside the Chinese mainland: Tencent Cloud Anti-DDoS cleansing center provides all-out protection.
Chinese mainland: Offers BGP lines and non-BGP lines. Both support a Tbps-level protection capability.
Outside Chinese mainland: Up to Tbps-level protection capability. Tencent Cloud Anti-DDoS cleansing center provides all-out protection. The maximum protection capability is adjusted dynamically based on the actual network conditions of the region. A maximum of Tbps-level protection capability is supported.
You can enjoy DDoS protection capability simply by creating an Anti DDoS EIP and binding it to the Anti-DDos Pro instance, with no need to adjust your business.
Global Tencent Cloud regions. This edition is in beta test. To purchase it, contact us.
Applicable to Tencent Cloud services such as CVM, CLB, WAF, CBM, BM CLB, NAT IP, EIP, GAAP IP, and businesses configured with a lot of Tencent Cloud service IPs that need to be protected.
It takes effect after you bind a protected IP in the Anti-DDoS console.
Billed by "the number of protected IPs + business bandwidth"
Up to 50 Gbps
You can enjoy a higher DDoS protection capability simply by purchasing an Anti-DDoS Pro instance and binding it to the Tencent Cloud service IP to be protected, with no need to adjust your business.
All internet users whose business is deployed in the Chinese mainland
Applicable to TCP, UDP, HTTP, and HTTPS businesses (WebSocket is supported by default.)
Traffic is processed by the Anti-DDoS Advanced instance and then forwarded to the real server IP. For more information, see Website Business Connection and Non-Website Business Connection.
Billed by "base protection + elastic protection + business bandwidth + the number of forwarding rules"
HTTP/HTTPS CC protection is supported. Protection lines include BGP lines and non-BGP lines:
BGP lines provide a Tbps-level protection capability.
Non-BGP lines also provide a Tbps-level protection capability.
Create a forwarding rule to bind the Anti-DDoS Advanced IP forwarding rules, you can use an Anti-DDoS Advanced instance as the internet-facing address of the real server to hide your real server.
Regions outside the Chinese mainland
TCP, UDP, HTTP, and HTTPS businesses (WebSocket is supported by default.)
‌Traffic is processed by the Anti-DDoS Advanced instance and then forwarded to the backend real server IP. See ‌Website Business Connection and ‌Non-Website Business Connection.
Billed by "base protection + elastic protection + business bandwidth + the number of forwarding rules"
Up to 400 Gbps
Support HTTP/HTTPS CC protection
Cleansing centers are deployed in Hong Kong (China), Singapore, Seoul, Tokyo, Virginia, Silicon Valley, and Frankfurt.
By configuring forwarding rules, you can use an Anti-DDoS Advanced instance as the internet-facing address of the real server to hide your real server.
Regions outside the Chinese mainland
CVM and CLB
Add the IP to protect in the Anti-DDoS console. See Getting Started.
Billed by "all-out protection + pay-as-you-go bandwidth + quarterly subscription"
A Tbps-level protection capability is provided.
Cleansing nodes are deployed in Hong Kong (China), Singapore, Seoul, Tokyo, Silicon Valley, Virginia, Frankfurt, and Bangkok.
Purchase an Anti-DDoS Advanced instance and bind it with the IPs of the Tencent Cloud resources to be protected.


Help and Support

Was this page helpful?

Help us improve! Rate your documentation experience in 5 mins.

Feedback