How Do I Check Whether the Inbound Traffics Are Routed Through Anti-DDoS Devices?

Anti-DDoS provides anti-DDoS only for HUAWEI CLOUD EIPs. Anti-DDoS devices are deployed at the egresses of data centers.

Figure 1 Network topology

Anti-DDoS only enables protection for inbound traffics from external network.

• If you access the EIP from an external network, the inbound traffics are routed through the public network routes. You can check whether the traffics are forwarded from the public network routes on the VM bound to the EIP. If yes, the access traffics are routed through Anti-DDoS devices.
  If inbound traffics are routed through Anti-DDoS devices, the following information is displayed when the EIP is threatened by DDoS attacks:

  • Traffic cleaning records exist on the Anti-DDoS console.
  • An alarm notification is sent by SMS or Email.
• If you access the EIP from the intranet, the inbound traffics are not routed through public network routes. As a result, the traffics are not routed through Anti-DDoS devices.

  For example, if you apply for two EIPs in two different regions of HUAWEI CLOUD, the access traffics between the two EIPs will not be routed through Anti-DDoS.