Help Center/ Anti-DDoS Service/ User Guide/ CNAD Basic (Anti-DDoS) User Guide/ Setting a Traffic Scrubbing Threshold to Intercept Attack Traffic
Updated on 2025-08-20 GMT+08:00

Setting a Traffic Scrubbing Threshold to Intercept Attack Traffic

Anti-DDoS automatically enables defense against DDoS attacks for EIPs on Huawei Cloud.

You can configure an Anti-DDoS defense policy in either of the following ways:

  • Use the default protection policy.

    The initial system policy serves as the default protection policy and applies to all newly purchased EIPs. It does not impact the traffic scrubbing threshold of existing EIPs. The default traffic scrubbing threshold is 120 Mbit/s and can be modified.

  • Set a protection policy for a specified EIP.

    You can manually set protection policies for your public IP addresses in batches or one by one. The default protection policy will no longer be used for public IP addresses for which protection policies have been manually configured.

If the selected threshold does not align with the workloads, some attacks may not be properly defended against, or service traffic may be inaccurately scrubbed. Choose a value closest to the purchased bandwidth but not exceeding it.