Purchasing the CNAD 1.0

To enable CNAD protection, you need to purchase a CNAD instance.

For details about the functions and specifications of each CNAD 1.0 edition, see Table 1. Purchase an edition based on service requirements.

**Table 1** CNAD editions and specifications
Item	Unlimited Protection Basic Edition	Unlimited Protection Advanced Edition
Billing Mode	Yearly/Monthly	Yearly/Monthly
Protected Objects	Huawei Cloud EIP	Anti-DDoS Service dedicated EIPs
Region	Single-region protection	Single-region protection
Supported Protocol	IPv4 and IPv6	IPv4
Number of Objects	50 to 500	50 to 500
Service Bandwidth	100 Mbit/s to 20 Gbit/s	100 Mbit/s to 10 Gbit/s
Elastic Bandwidth	Daily 95th percentile billing and monthly 95th percentile billing are supported.	If the billing mode of the public network line is yearly/monthly, the daily 95th percentile billing and monthly 95th percentile billing are supported.
Protection Capability	Shared unlimited protection, no less than 20 Gbit/s, up to hundreds of Gbit/s. If the service bandwidth exceeds the limit, the protection capability drops and ranges from 10 Gbit/s to 20 Gbit/s.	Shared unlimited protection for up to 1 Tbit/s If the service bandwidth exceeds the limit, the protection capability drops and ranges from 10 Gbit/s to 20 Gbit/s.

When using an Anti-DDoS Service dedicated EIP, extreme scenarios such as network fluctuations may result in traffic being redirected to a standby equipment room with lower protection capabilities, thereby reducing overall protection.

Prerequisites

The account must have the permissions of the CNAD FullAccess and BSS Administrator roles.
You have applied for and can use the service edition.

Go to the Buy DDoS Mitigation page, set Instance Type to Cloud Native Protection 1.0, and click Submit Order in the lower right corner of the page.

Purchasing CNAD 1.0 Instances

You can purchase instances of different editions based on service requirements.

Log in to the AAD console.
In the upper right corner of the page, click Buy DDoS Mitigation.
Set Instance Type to Cloud Native Protection 1.0.
Set Region to Chinese Mainland.
Set Protection Level to Unlimited Protection Basic Edition.

Set the specifications parameters, as shown in Figure 1. Table 2 describes the parameters.

Figure 1 Setting Unlimited Protection Basic edition specifications

**Table 2** Parameters
Parameter	Description
Region	Unlimited Protection Basic Edition is available only in the Chinese mainland.
Resource Location	Select the region where the protected resources are located. CNAD 1.0 can only protect cloud resources in the same region. For example, a CNAD instance in CN East-Shanghai1 can protect only cloud resources in CN East-Shanghai1.
Protected IP Addresses	The value must range from 50 to 500 and be a multiple of 5.
Service Bandwidth	The service bandwidth indicates clean service bandwidth forwarded to the origin server from the AAD scrubbing center. It is recommended that the service bandwidth be greater than or equal to the egress bandwidth of the origin server. You can use the service bandwidth exceeding the specified limit for up to 36 hours each month. If usage exceeds 36 hours, the protection capability will decrease.
Elastic Bandwidth	The elastic service bandwidth is supported. When the service traffic exceeds the service bandwidth, the instance can be properly protected. Daily 95th percentile billing and monthly 95th percentile billing are supported. For details, see How Is Elastic Bandwidth Charged?

Set Instance Name, Required Duration, and Quantity. In the lower right corner of the page, click Next.

The Auto Renewal option enables the system to renew your service by the required duration when the service is about to expire.
On the confirmation page, confirm your order and click Submit Order.
On the displayed page, click Pay to pay for the order.

After the payment is successful, the system switches to the instances page. After the instance status becomes Normal, the instance is created.

Before purchasing the advanced edition, you should know that the Unlimited Protection Advanced edition can protect only exclusive EIPs.

Log in to the AAD console.
In the upper right corner of the page, click Buy DDoS Mitigation.
Set Instance Type to Cloud Native Protection 1.0.
Select a region where the resources to be protected are located.
Set Unlimited Protection Advanced Edition for Protection Level.

Set the specifications parameters. Table 3 describes related parameters.

Figure 2 Setting specifications of the Unlimited Protection Advanced edition

**Table 3** Parameters
Parameter	Description
Region	Chinese mainland: It is applicable to scenarios where service servers are deployed in Chinese mainland. Only dynamic BGP EIPs are supported. Outside the Chinese mainland: It is applicable to scenarios where the service server is deployed in the Asia Pacific region. Only premium BGP EIPs are supported.
Resource Location	Select the region where the protected resources are located. CNAD 1.0 can only protect cloud resources in the same region. For example, a CNAD instance in CN East-Shanghai1 can protect only cloud resources in CN East-Shanghai1.
Protected IP Addresses	The value must range from 50 to 500 and be a multiple of 5.
Service Bandwidth	The service bandwidth indicates clean service bandwidth forwarded to the origin server from the AAD scrubbing center. It is recommended that the service bandwidth be greater than or equal to the egress bandwidth of the origin server. You can use the service bandwidth exceeding the specified limit for up to 36 hours each month. If usage exceeds 36 hours, the protection capability will decrease.
Elastic Bandwidth	The elastic service bandwidth is supported. When the service traffic exceeds the service bandwidth, the instance can be properly protected. Daily 95th percentile billing and monthly 95th percentile billing are supported. For details, see How Is Elastic Bandwidth Charged?

Set Instance Name, Required Duration, and Quantity. In the lower right corner of the page, click Next.

The Auto Renewal option enables the system to renew your service by the required duration when the service is about to expire.
On the confirmation page, confirm your order and click Submit Order.
On the displayed page, click Pay to pay for the order.

After the payment is successful, the system switches to the instances page. After the instance status becomes Normal, the instance is created.