Updated on 2025-08-20 GMT+08:00

Purchasing the CNAD 1.0

To enable CNAD protection, you need to purchase a CNAD instance.

For details about the functions and specifications of each CNAD 1.0 edition, see Table 1. Purchase an edition based on service requirements.

Table 1 CNAD editions and specifications

Item

Unlimited Protection Basic Edition

Unlimited Protection Advanced Edition

Billing Mode

Yearly/Monthly

Yearly/Monthly

Protected Objects

Huawei Cloud EIP

Anti-DDoS Service dedicated EIPs

Region

Single-region protection

Single-region protection

Supported Protocol

IPv4 and IPv6

IPv4

Number of Objects

50 to 500

50 to 500

Service Bandwidth

100 Mbit/s to 20 Gbit/s

100 Mbit/s to 10 Gbit/s

Elastic Bandwidth

Daily 95th percentile billing and monthly 95th percentile billing are supported.

If the billing mode of the public network line is yearly/monthly, the daily 95th percentile billing and monthly 95th percentile billing are supported.

Protection Capability

  • Shared unlimited protection, no less than 20 Gbit/s, up to hundreds of Gbit/s.
  • If the service bandwidth exceeds the limit, the protection capability drops and ranges from 10 Gbit/s to 20 Gbit/s.
  • Shared unlimited protection for up to 1 Tbit/s
  • If the service bandwidth exceeds the limit, the protection capability drops and ranges from 10 Gbit/s to 20 Gbit/s.

When using an Anti-DDoS Service dedicated EIP, extreme scenarios such as network fluctuations may result in traffic being redirected to a standby equipment room with lower protection capabilities, thereby reducing overall protection.

Prerequisites

  • The account must have the permissions of the CNAD FullAccess and BSS Administrator roles.
  • You have applied for and can use the service edition.

Go to the Buy DDoS Mitigation page, set Instance Type to Cloud Native Protection 1.0, and click Submit Order in the lower right corner of the page.

Purchasing CNAD 1.0 Instances

You can purchase instances of different editions based on service requirements.

  1. Log in to the AAD console.
  2. In the upper right corner of the page, click Buy DDoS Mitigation.
  3. Set Instance Type to Cloud Native Protection 1.0.
  4. Set Region to Chinese Mainland.
  5. Set Protection Level to Unlimited Protection Basic Edition.
  6. Set the specifications parameters, as shown in Figure 1. Table 2 describes the parameters.

    Figure 1 Setting Unlimited Protection Basic edition specifications
    Table 2 Parameters

    Parameter

    Description

    Region

    Unlimited Protection Basic Edition is available only in the Chinese mainland.

    Resource Location

    Select the region where the protected resources are located.

    CNAD 1.0 can only protect cloud resources in the same region. For example, a CNAD instance in CN East-Shanghai1 can protect only cloud resources in CN East-Shanghai1.

    Protected IP Addresses

    The value must range from 50 to 500 and be a multiple of 5.

    Service Bandwidth

    The service bandwidth indicates clean service bandwidth forwarded to the origin server from the AAD scrubbing center. It is recommended that the service bandwidth be greater than or equal to the egress bandwidth of the origin server.

    You can use the service bandwidth exceeding the specified limit for up to 36 hours each month. If usage exceeds 36 hours, the protection capability will decrease.

    Elastic Bandwidth

    The elastic service bandwidth is supported. When the service traffic exceeds the service bandwidth, the instance can be properly protected.

    Daily 95th percentile billing and monthly 95th percentile billing are supported. For details, see How Is Elastic Bandwidth Charged?

  7. Set Instance Name, Required Duration, and Quantity. In the lower right corner of the page, click Next.

    The Auto Renewal option enables the system to renew your service by the required duration when the service is about to expire.

  8. On the confirmation page, confirm your order and click Submit Order.
  9. On the displayed page, click Pay to pay for the order.

    After the payment is successful, the system switches to the instances page. After the instance status becomes Normal, the instance is created.

Before purchasing the advanced edition, you should know that the Unlimited Protection Advanced edition can protect only exclusive EIPs.

  1. Log in to the AAD console.
  2. In the upper right corner of the page, click Buy DDoS Mitigation.
  3. Set Instance Type to Cloud Native Protection 1.0.
  4. Select a region where the resources to be protected are located.
  5. Set Unlimited Protection Advanced Edition for Protection Level.
  6. Set the specifications parameters. Table 3 describes related parameters.

    Figure 2 Setting specifications of the Unlimited Protection Advanced edition
    Table 3 Parameters

    Parameter

    Description

    Region

    • Chinese mainland: It is applicable to scenarios where service servers are deployed in Chinese mainland. Only dynamic BGP EIPs are supported.
    • Outside the Chinese mainland: It is applicable to scenarios where the service server is deployed in the Asia Pacific region. Only premium BGP EIPs are supported.

    Resource Location

    Select the region where the protected resources are located.

    CNAD 1.0 can only protect cloud resources in the same region. For example, a CNAD instance in CN East-Shanghai1 can protect only cloud resources in CN East-Shanghai1.

    Protected IP Addresses

    The value must range from 50 to 500 and be a multiple of 5.

    Service Bandwidth

    The service bandwidth indicates clean service bandwidth forwarded to the origin server from the AAD scrubbing center. It is recommended that the service bandwidth be greater than or equal to the egress bandwidth of the origin server.

    You can use the service bandwidth exceeding the specified limit for up to 36 hours each month. If usage exceeds 36 hours, the protection capability will decrease.

    Elastic Bandwidth

    The elastic service bandwidth is supported. When the service traffic exceeds the service bandwidth, the instance can be properly protected.

    Daily 95th percentile billing and monthly 95th percentile billing are supported. For details, see How Is Elastic Bandwidth Charged?

  7. Set Instance Name, Required Duration, and Quantity. In the lower right corner of the page, click Next.

    The Auto Renewal option enables the system to renew your service by the required duration when the service is about to expire.

  8. On the confirmation page, confirm your order and click Submit Order.
  9. On the displayed page, click Pay to pay for the order.

    After the payment is successful, the system switches to the instances page. After the instance status becomes Normal, the instance is created.