What's New

1

Optimized Advanced Anti-DDoS purchase page

• On the pages for purchasing and changing specifications, the sequence of parameters is adjusted. The Service Bandwidth, Elastic Bandwidth, and Increase Elastic Bandwidth parameters are now positioned above Basic Protection Bandwidth.

• Modified the verification rules. Reset the options of basic protection bandwidth and elastic protection bandwidth.

Commercial use

Purchasing AAD Instances

Modifying Instance Specifications

1

Optimized billing rules for elastic service bandwidth

The elastic service bandwidth is calculated based on the average of sampled values.

Commercial use

How Is the Elastic Service Bandwidth Charged?

2

OS adapted to support real IP address retrieval through TOA

Huawei Cloud EulerOS 2.0 (DJCP 2.0 L3, 64-bit, Arm) newly supports real IP address retrieval through TCP Option Address (TOA).

Commercial use

Using the TOA Module to Obtain the Actual Source IP Addresses of Requests

3

Auditable Advanced Anti-DDoS operations added in CTS

More than 90 operation metrics that can be audited by Cloud Trace Service (CTS) are added for Advanced Anti-DDoS.

Commercial use

AAD Operations Supported by CTS

4

New APIs

An API for creating an Advanced Anti-DDoS instance is added.

Commercial use

AAD APIs

5

Secondary verification for deletion operations

Secondary verification is added for the deletion of domain names and forwarding rules.

Commercial use

Deleting Domain Names

Managing Forwarding Rules

6

Batch export of domain names and protected objects

The protected objects of CNAD Advanced and the domain names of Advanced Anti-DDoS can be exported in batches.

Commercial use

Exporting Protected Objects

Exporting Protected Domain Names

1

Released the SME edition for CNAD 2.0.

SME edition for CNAD 2.0 is available in the Chinese mainland.

Commercial use

Purchasing the CNAD 2.0

1

Filtering attack source information in alarm notifications

The attack source information in the alarm notifications of CNAD Advanced can be masked.

Commercial use

Enabling Alarm Notifications for DDoS Attacks

2

QPS-based billing

AAD instances can be billed by QPS.

Commercial use

Purchasing AAD Instances

3

Elastic service bandwidth billing

Elastic service bandwidth of CNAD Advanced can be billed by daily 95th percentile or monthly 95th percentile.

Commercial use

Purchasing a CNAD Instance

4

Attack filtering policies

CNAD Advanced now includes an attack filtering policy, offering users a set of standard filtering rules to address common attacks, including UDP reflection attacks.

Commercial use

Filtering Attacks Based on One-Click Rate Limiting Rules

5

Geo-blocking function enhancement

CNAD Advanced's geo-blocking feature enables one-click blocking of Hong Kong, Macao, and Taiwan (China), along with the capability to define custom blocking regions.

Commercial use

Blocking Traffic From Specified Locations

6

Cloud Eye monitoring metrics

CNAD Advanced supports new Cloud Eye monitoring metrics, such as SYN packet rate and FIN packet rate.

Commercial use

CNAD Monitoring Metrics

7

GEIP asset protection

CNAD Basic and CNAD Advanced support GEIP asset protection.

Commercial use

Setting a Traffic Scrubbing Threshold to Intercept Attack Traffic

Adding a Protected Object

8

Randomly assigning access points

Upon provisioning an AAD instance, the system automatically analyzes available IPv4 addresses and assigns the most suitable access points.

Commercial use

Purchasing AAD Instances

1

Upgraded the fingerprint filtering policies of CNAD Advanced

Fingerprint filtering policies support the TCP protocol.

Commercial use

Setting a Traffic Handling Policy Based on Fingerprint Features

2

Upgraded the connection protection feature CNAD Advanced

Renamed Connection Protection as Advanced Protection and added the network-layer CC attack defense capability.

Open beta testing

Using Advanced Protection Policies to Restrict Abnormal Connections

3

Upgraded the scrubbing policies of CNAD Advanced

Changed the name of Scrubbing Policy to Basic Protection Policy and added support for setting the defense mode.

Commercial use

Configuring a Basic Protection Policy to Intercept Attack Traffic

4

IP access to AAD

AAD allows access to it through IP addresses.

Commercial use

Connecting Non-Domain Name Services to AAD

5

Upgraded the protocol blocking policies of CNAD Advanced

The protocol blocking policies support protocols other than TCP, UDP, and ICMP.

Commercial use

Blocking Traffic of a Specified Protocol

6

Upgraded the AAD frequency control policies

Added JS challenge to the protection actions supported by frequency control policies.

Commercial use

Mitigating CC Attacks Using Frequency Control Policies

7

Intelligent CC protection policies on AAD

AAD supports intelligent CC policies for website services to improve CC attack defense capabilities.

Open beta testing

Using Intelligent CC Policies to Defend Against CC Attacks

1

Upgrading CDN scheduling rules

CDN scheduling rules are upgraded to support more custom scheduling policies.

Commercial use

Configuring CDN Scheduling Rules

2

Displaying applicable domain names for AAD certificates

The applicable domain name can be displayed for the HTTPS certificates uploaded to AAD.

Commercial use

Updating a Certificate

3

AAD supports the export of attack events, security events, and blackhole events

You can export security events and blackhole events on the DDoS attack protection page, and export attack events on the CC attack protection page.

Commercial use

Viewing Protection Details

1

Batching adding domain names in AAD

Domain names can be added to AAD in batches.

Commercial use

Adding Domain Names in Batches

2

Cloud Native Protection 2.0

Cloud native protection 2.0 is added to CNAD Advanced.

Commercial use

Purchasing a CNAD Instance

3

Setting the alarm threshold for scrubbed traffic in CNAD Basic

The alarm notification function allows users to set the alarm threshold for scrubbed traffic.

Commercial use

Enabling Alarm Notifications

4

HTTP2 protocol support

HTTP2 can be enabled or disabled for domain names connected to AAD.

Commercial use

Setting the HTTP2 Protocol

5

Enhanced fingerprint filtering feature of CNAD Advanced

Fingerprint filtering supports the TCP protocol.

Commercial use

Configuring Fingerprint Filtering

6

Querying blackhole events

Blackhole events can be viewed on the DDoS attack protection page.

Commercial use

Viewing Protection Details

1

AAD supports TLS version selection.

AAD allows you to change the TLS version and cipher suite of the HTTPS certificate.

Commercial use

Modify TLS Configuration

2

AAD supports user-defined headers.

AAD allows you to configure field forwarding for accessed domain names. New fields are added to the header and forwarded to the origin server.

Commercial use

Configuring Field Forwarding

3

AAD supports the query of the dynamic blacklist.

You can view the dynamic blacklist for ongoing attack events.

Commercial use

Viewing Protection Details

4

CNAD allows users to view the dynamic blacklist.

You can view the dynamic blacklist for ongoing attack events.

Commercial use

Viewing Statistics Reports

1

AAD IPv6 support

You can purchase an IPv6 AAD instance.

Commercial use

Purchasing AAD Instances

1

First rollout CNAD Advanced

CNAD Advanced commercial launch.

Commercial use

Cloud Native Anti-DDoS Advanced