Function Overview

Huawei Cloud provides a range of anti-DDoS security protection solutions to meet your requirements. Huawei Cloud Anti-DDoS Service (AAD) has three sub-services: Cloud Native Anti-DDoS Basic (CNAD Basic), Cloud Native Anti-DDoS Advanced (CNAD Advanced), and Advanced Anti-DDoS.

CNAD Basic is enabled for your Huawei Cloud services by default. It is free of charge and provides 2 Gbit/s defense against DDoS attacks. Its maximum defense capacity is 5 Gbit/s (depending on the available bandwidth on Huawei Cloud). It can provide basic protection for public IP addresses (IPv4 and IPv6) on Huawei Cloud.

CNAD Advanced improves the anti-DDoS capability of Huawei Cloud services such as ECS, ELB, WAF, and EIP. Its protection strength is not lower than 20 Gbit/s.

AAD uses High-defense IP address to proxy origin server IP addresses. All public network traffic is diverted to High-defense IP address, and workloads on the origin servers are protected against DDoS attacks.

You can view protection logs on the DDoS Mitigation Center to learn about the security status of your services.

CNAD Basic and CNAD Advanced protect your IPv6 and IPv4 addresses.

You will receive notifications when your service is under a DDoS attack. You can configure how the notifications are sent to you.

CNAD Advanced and AAD support one-click blocking of User Datagram Protocol (UDP) communication.

Advanced Anti-DDoS supports one-click blocking of overseas traffic.

If the DDoS bandwidth on an IP address exceeds the configured threshold, traffic scrubbing of CNAD Basic or CNAD Advanced will be triggered to ensure service availability.

CNAD Advanced and AAD allow you to configure an IP address blacklist and whitelist to block and allow access from specific IP addresses, thereby restricting users who access your services.