Updated on 2024-07-03 GMT+08:00

Edition Differences

Deployment Modes

Anti-DDoS Service can be deployed in two modes.

  • Transparent mode: This mode directly improves the anti-DDoS capability of your assets on Huawei Cloud.

  • Proxy mode: Your server IP address is hidden behind AAD high-defense IP addresses, which defend your server against DDoS attacks, ensuring your service continuity.

    Table 1 Differences between the transparent mode and the proxy mode

    Item

    Transparent

    Proxy

    Billing

    Yearly/Monthly

    Yearly/Monthly

    Edition

    Anti-DDoS (free)

    CNAD Unlimited Protection - Basic Edition

    CNAD Unlimited Protection - Advanced Edition

    AAD

    AAD International

    Application scenarios

    Services whose servers are deployed on Huawei Cloud and can be accessed through public IP addresses

    Services whose servers are deployed on Huawei Cloud or non-Huawei Cloud and can be accessed through the public network

    Protected objects

    IP

    IP addresses or domain names

    Advantages

    Transparent access, directly protecting server addresses

    Huawei cloud native network, low latency

    Hide the server address from external networks.

    AAD scrubbing center provides strong protection.

    Applicable to Huawei Cloud and non-Huawei Cloud scenarios

Edition Specifications

Table 2 Edition specifications

Item

CNAD Basic

CNAD Unlimited Protection - Basic Edition

CNAD Unlimited Protection - Advanced Edition

CNAD Advanced - Cloud Native Protection 2.0

AAD - Website Protection

Billing Mode

Free

Yearly/Monthly

Yearly/Monthly

Instances are billed in yearly/monthly mode. Service bandwidth is billed in yearly/monthly or pay-per-use mode.

Yearly/Monthly

Access mode

Transparent access

Transparent access

Transparent access

Transparent access

DNS resolution

Network

Native network

Cloud native network and fully dynamic BGP (static BGP not supported).

Cloud native network, multi-line BGP

Cloud native network and fully dynamic BGP (static BGP not supported).

Multi-line BGP

Protected objects

Huawei Cloud EIPs

Huawei Cloud EIPs

Huawei Cloud exclusive EIPs

Huawei Cloud EIPs

Domain names accessible to the Internet (Huawei Cloud + on-premises)

Protocol

IPv4 and IPv6

IPv4 and IPv6

IPv4

IPv4 and IPv6

IPv4 and IPv6

Objects

Unlimited

50-500

50-500

50-1000

50-200

Service bandwidth

N/A

100Mbps-20Gbps

100Mbps-40Gbps

100Mbps-20Gbps

100Mbps-2Gbps

An AAD instance supports only one IP protocol (IPv4 or IPv6). If you need multiple protocols, purchase multiple AAD instances.

Protection Capabilities Supported by Each Edition

Table 3 Protection capabilities supported by each edition

Item

CNAD Basic (free)

CNAD Unlimited Protection - Basic Edition

CNAD Unlimited Protection - Advanced Edition

AAD - Website Protection

AAD - IP Protection

Protection capability

  • Chinese mainland region: no higher than 5 GB
  • Regions outside the Chinese mainland: no more than 500 MB

Shared protection for not less than 20 Gbit/s of traffic

Shared protection for up to 1 Tbit/s of traffic

1 Tbit/s (multiple instances can be accumulated)

1T

DDoS protection

Scrubbing threshold

  • Blacklist or whitelist
  • Scrubbing threshold
  • Protocol blocking
  • Watermarking
  • Blacklist or whitelist
  • Scrubbing threshold
  • Protocol blocking
  • Watermarking
  • Connection protection
  • Blacklist or whitelist
  • Cross-border blocking
  • UDP blocking
    NOTICE:

    Currently, the international edition can only be configured offline.

  • Blacklist or whitelist
  • Cross-border blocking
  • UDP blocking
    NOTICE:

    Currently, the international edition can only be configured offline.

Application protection

N/A

Exclusive WAF support

Exclusive WAF support

  • 3000 QPS by default
  • If the QPS is greater than 3000, Huawei Cloud WAF or exclusive WAF are required.

Exclusive WAF support