Using Intelligent CC Policies to Defend Against CC Attacks

Limitations and Constraints

This function is in the internal test phase and is available only to some users. If you want to use it, submit a service ticket.

Prerequisites

Basic Web Protection has been enabled for website services. For details, see Enabling Basic Web Protection.

Enabling Intelligent CC

1. Log in to the management console.
2. Select a region in the upper part of the page, click in the upper left corner of the page, and choose Security & Compliance > Anti-DDoS Service. The Anti-DDoS Service Center page is displayed.
3. In the navigation pane on the left, choose Advanced Anti-DDoS > Protection Policies. The Protection Policies page is displayed.
   Figure 1 Advanced Anti-DDoS protection policies
   

4. Click the Web CC Protection tab.
5. After selecting the region and object to be protected, click Set under Intelligent CC.
   Figure 2 Intelligent CC
   

6. Set the protection policy as required, as shown in Table 1.
   Figure 3 Setting Intelligent CC
   

   Table 1 Parameter description

   Parameter	Description
   Schema	Warning: Records log but does not block malicious requests. Protection: Block malicious requests and records logs.
   Severity	Lenient: Only known malicious attacks are blocked. This mode is suitable for large-scale websites and ensures that normal requests are not mistakenly blocked. Normal: Ideal for scenarios with stable request volumes and redundant server processing performance. When detecting malicious attacks, with intelligent protection enabled, the impact on normal services is little. In this case, you are advised to use this level. Strict: Suitable for scenarios where website performance is poor and protection needs to be stringent. However, some legitimate requests may be mistakenly blocked.

7. On the Web CC Protection page, set Intelligent CC to to enable protection.