Help Center> Anti-DDoS> Service Overview> Concepts> Scrubbing Principle and Black Hole Threshold
Updated on 2022-02-22 GMT+08:00

Scrubbing Principle and Black Hole Threshold

HUAWEI CLOUD Anti-DDoS mitigates DDoS attacks and is enabled by default.

Scrubbing Principle

Anti-DDoS monitors service traffic in real time. Once an attack is detected, it diverts service traffic to the HUAWEI CLOUD Anti-DDoS scrubbing system, which identifies the traffic from that IP address, discards the attack traffic, and forwards legitimate traffic to the target IP address.

Black Hole Threshold

The black hole threshold refers to the basic attack mitigation capacity provided by HUAWEI CLOUD. When the scale of attack exceeds the threshold, HUAWEI CLOUD executes a black hole policy to block the IP address.

Anti-DDoS provides a 500 Mbit/s mitigation capacity against DDoS attacks free of charge. For applications threatened by attack traffic larger than 500 Mbit/s, it is a better choice to purchase the Advanced Anti-DDoS service on HUAWEI CLOUD to expand protection capacity.