Edition Differences

Deployment Modes

Anti-DDoS Service can be deployed in two modes.

Transparent mode: This mode directly improves the anti-DDoS capability of your assets on Huawei Cloud.

Proxy mode: Your server IP address is hidden behind AAD high-defense IP addresses, which defend your server against DDoS attacks, ensuring your service continuity.

**Table 1** Differences between the transparent mode and the proxy mode
Item	Transparent	Proxy
Billing	Yearly/Monthly	Yearly/Monthly
Edition	Anti-DDoS (free) CNAD Unlimited Protection - Basic Edition CNAD Unlimited Protection - Advanced Edition	AAD AAD International
Application scenarios	Services whose servers are deployed on Huawei Cloud and can be accessed through public IP addresses	Services whose servers are deployed on Huawei Cloud or non-Huawei Cloud and can be accessed through the public network
Protected objects	IP	IP addresses or domain names
Advantages	Transparent access, directly protecting server addresses Huawei cloud native network, low latency	Hide the server address from external networks. AAD scrubbing center provides strong protection. Applicable to Huawei Cloud and non-Huawei Cloud scenarios

Edition Specifications

**Table 2** Edition specifications
Item	CNAD Basic (free)	CNAD Unlimited Protection - Basic Edition	CNAD Unlimited Protection - Advanced Edition	AAD - Website Protection
Billing Mode	Free	Yearly/Monthly	Yearly/Monthly	Yearly/Monthly
Deployment mode	Transparent	Transparent	Transparent (Exclusive EIPs)	Proxy
Network	Native network	Native network	Scrubbing center BGP	Scrubbing center BGP
Protected objects	Huawei Cloud EIPs	Huawei Cloud EIPs	Huawei Cloud exclusive EIPs NOTE: After purchasing the CNAD Unlimited Protection - Advanced, contact the Anti-DDoS team to obtain the permission to purchase exclusive EIPs.	Domain names accessible to the Internet (Huawei Cloud + on-premises)
Protocol	IPv4 and IPv6	IPv4 and IPv6	IPv4	IPv4 or IPv6
Protected objects	Protected IP addresses	Protected IP addresses	Protected IP addresses	Protected domain names
Objects	Unlimited	50-500	50-500	50-200
Service bandwidth	N/A	100Mbps-20Gbps	100Mbps-40Gbps	100Mbps-2Gbps

An AAD instance supports only one IP protocol (IPv4 or IPv6). If you need multiple protocols, purchase multiple AAD instances.

Protection Capabilities Supported by Each Edition

**Table 3** Protection capabilities supported by each edition
Item	CNAD Basic (free)	CNAD Unlimited Protection - Basic Edition	CNAD Unlimited Protection - Advanced Edition	AAD - Website Protection	AAD - IP Protection
Protection capability	Chinese mainland region: no higher than 5 GB Regions outside the Chinese mainland: no more than 500 MB	Shared protection for not less than 20 Gbit/s of traffic	Shared protection for up to 1 Tbit/s of traffic	1 Tbit/s (multiple instances can be accumulated)	1T
DDoS protection	Scrubbing threshold	Blacklist or whitelist Scrubbing threshold Protocol blocking Watermarking	Blacklist or whitelist Scrubbing threshold Protocol blocking Watermarking Connection protection	Blacklist or whitelist Cross-border blocking UDP blocking NOTICE: Currently, the international edition can only be configured offline.	Blacklist or whitelist Cross-border blocking UDP blocking NOTICE: Currently, the international edition can only be configured offline.
Application protection	N/A	Exclusive WAF support	Exclusive WAF support	3000 QPS by default If the QPS is greater than 3000, Huawei Cloud WAF or exclusive WAF are required.	Exclusive WAF support