Edition Differences

Deployment Modes

Anti-DDoS Service can be deployed in two modes.

Transparent mode: This mode directly improves the anti-DDoS capability of your assets on Huawei Cloud.

Proxy mode: Your server IP address is hidden behind AAD high-defense IP addresses, which defend your server against DDoS attacks, ensuring your service continuity.

**Table 1** Differences between the transparent mode and the proxy mode
Item	Transparent	Proxy
Billing	Yearly/Monthly	Yearly/Monthly
Edition	Anti-DDoS (free) CNAD Unlimited Protection - Basic Edition CNAD Unlimited Protection - Advanced Edition	AAD AAD International
Application scenarios	Services whose servers are deployed on Huawei Cloud and can be accessed through public IP addresses	Services whose servers are deployed on Huawei Cloud or non-Huawei Cloud and can be accessed through the public network
Protected objects	IP	IP addresses or domain names
Advantages	Transparent access, directly protecting server addresses Huawei cloud native network, low latency	Hide the server address from external networks. AAD scrubbing center provides strong protection. Applicable to Huawei Cloud and non-Huawei Cloud scenarios

Edition Specifications

**Table 2** Edition specifications
Item	CNAD Basic	CNAD Unlimited Protection - Basic Edition	CNAD Unlimited Protection - Advanced Edition	CNAD Advanced - Cloud Native Protection 2.0	AAD - Website Protection
Billing Mode	Free	Yearly/Monthly	Yearly/Monthly	Instances are billed in yearly/monthly mode. Service bandwidth is billed in yearly/monthly or pay-per-use mode.	Yearly/Monthly
Access mode	Transparent access	Transparent access	Transparent access	Transparent access	DNS resolution
Network	Native network	Cloud native network and fully dynamic BGP (static BGP not supported).	Cloud native network, multi-line BGP	Cloud native network and fully dynamic BGP (static BGP not supported).	Multi-line BGP
Protected objects	Huawei Cloud EIPs	Huawei Cloud EIPs	Huawei Cloud exclusive EIPs	Huawei Cloud EIPs	Domain names accessible to the Internet (Huawei Cloud + on-premises)
Protocol	IPv4 and IPv6	IPv4 and IPv6	IPv4	IPv4 and IPv6	IPv4 and IPv6
Objects	Unlimited	50-500	50-500	50-1000	50-200
Service bandwidth	N/A	100Mbps-20Gbps	100Mbps-40Gbps	100Mbps-20Gbps	100Mbps-2Gbps

An AAD instance supports only one IP protocol (IPv4 or IPv6). If you need multiple protocols, purchase multiple AAD instances.

Protection Capabilities Supported by Each Edition

**Table 3** Protection capabilities supported by each edition
Item	CNAD Basic (free)	CNAD Unlimited Protection - Basic Edition	CNAD Unlimited Protection - Advanced Edition	AAD - Website Protection	AAD - IP Protection
Protection capability	Chinese mainland region: no higher than 5 GB Regions outside the Chinese mainland: no more than 500 MB	Shared protection for not less than 20 Gbit/s of traffic	Shared protection for up to 1 Tbit/s of traffic	1 Tbit/s (multiple instances can be accumulated)	1T
DDoS protection	Scrubbing threshold	Blacklist or whitelist Scrubbing threshold Protocol blocking Watermarking	Blacklist or whitelist Scrubbing threshold Protocol blocking Watermarking Connection protection	Blacklist or whitelist Cross-border blocking UDP blocking NOTICE: Currently, the international edition can only be configured offline.	Blacklist or whitelist Cross-border blocking UDP blocking NOTICE: Currently, the international edition can only be configured offline.
Application protection	N/A	Exclusive WAF support	Exclusive WAF support	3000 QPS by default If the QPS is greater than 3000, Huawei Cloud WAF or exclusive WAF are required.	Exclusive WAF support