Updated on 2024-01-19 GMT+08:00

Application Scenarios

CNAD Basic protects public IP addresses on Huawei Cloud only from DDoS attacks.

CNAD Basic devices are deployed at egresses of data centers. Figure 1 shows the network topology.

Figure 1 Network topology

The detection center monitors network access traffic based on security policies you configure. If an attack is detected, data is diverted to scrubbing devices for real-time defense. Abnormal traffic is cleaned, and normal traffic is forwarded.

Anti-DDoS provides 500 Mbit/s of mitigation capability against DDoS attacks for free. If access traffic to a public IP address exceeds the specified black hole threshold (500 Mbit/s for free Anti-DDoS), CNAD Basic redirects all traffic destined for the IP address to a black hole. This means legitimate traffic will be discarded. To get more DDoS mitigation capabilities, Huawei Cloud Advanced Anti-DDoS (AAD) is recommended.