Security


Anti-DDoS Pro


Overview

Alibaba Cloud Anti-DDoS Pro is a value added protection service to ensure high availability and provide complete protection to your online business from all kinds of malicious DDoS attacks. The product also ensures the elimination of single-point-of-failure from real-time DDoS attacks, HTTP flood attacks, empty connection attacks, slow connection attacks and other web application attacks.

Anti-DDoS Pro is recommended for large enterprise websites and applications, especially those that integrate online payments. For blogs and small websites, Anti-DDoS Basic is available and free of cost.

Anti-DDoS Pro can be set up within minutes without needing to configure complex network applications.

Customer Testimonials

Hongling Capital

hongling

“Using Alibaba Cloud Anti-DDoS Service Pro, our online financial business has been growing continuously with protection from DDoS attacks.”

 

 

Electric Soul Network

dianhun

“As an online combat game that requires excellent quality of network, we are frequently attacked by DDoS attacks. With the help of Cloud Anti-DDoS Service, negative impacts on game servers have been mitigated effectively.”

 

Meizu Technology

meizu

“A special security team from Alibaba Cloud was built to help defend against DDoS attacks when new smart phone products are released.”

 

Benefits

1. Mitigation of high-volume DDoS attack

  • BGP network with fast access experience, associated with distributed scrubbing centers all over the world.
  • The Anti-DDoS cluster provides a mitigation capacity of more than 2000Gbps, as well as fast access to backbone network.
  • Less than 50ms delay to original servers in Alibaba Cloud data centers in Mainland China.

2. Supports all Protocols and Formats

  • Supports TCP/UDP/HTTP/HTTPS protocols.
  • Suitable for all kinds of businesses including finance, e-commerce, gaming, and enterprise.
  • Ensures protection of application from Layer 4 and Layer 7 attacks.
  • Protects servers on both Alibaba Cloud services as well as other cloud service providers including AWS, Azure and RackSpace.

3. Fully-encrypted Linking with HTTPS

  • Supports Layer 7 HTTPS flood protection.
  • Ensures full encryption with HTTPS including backlink to origin server.
  • Protects privacy of SSL private keys.

4. Protection Algorithms

  • Defends against empty connection attack, slow connection attack and other malicious attacks.
  • Leverages various mechanisms such as IP reputation database, IP+Cookie, IP+Key to mitigate HTTP floods.
  • Maintains a global database of zombie network to trace all the attacks with the help of Alibaba Cloud Shield.

 

Product Details

Through its multiple scrubbing centers located across the globe, Anti-DDoS Pro provides over 2 Tbps capacity of DDoS mitigation allowing you to customize security rules for your website and provide detailed reports and analysis.

Incoming traffic is diverted to Alibaba Cloud Anti-DDoS scrubbing centers through updating DNS resolution settings (web) or replacing the original website IP with an Anti-DDoS IP provided by Alibaba Cloud. As traffic passes through the Anti-DDoS service, malicious attacks can be immediately identified and mitigated. The service then forwards clean traffic to the server and ensures comprehensive DDoS protection for your infrastructure.

Features

Mitigation of high-volume DDoS Attacks

○ Ensures mitigation of all kinds of DDoS attacks such as SYN flood, ACK flood, ICMP flood, UDP flood, NTP flood, SSDP flood, DNS flood, HTTP flood.

○ Offers mitigation capacity of 2000 Gbps.

○ Provides fast access to backbone server.

Application Layer Protection

○ Provides real-time mitigation for Layer 7 DDoS attacks which target application directly.

○ Offers advanced security features such as multi-faced verification, identity recognition and verification code, in order to filter malicious requests from legal requests.

○ Appropriate for HTTP(S) floods targeting websites or layer 7 applications like online gaming web-applications.

○ Ensures security even in the times of heavy traffic, such as during shopping festivals, product launch events.

High Availability

○ Guarantees 99.99% service availability.

○ Ensures high availability through global scrubbing centers.

Automatic Mitigation Capabilities

○ Provides real-time mitigation by automatically detecting malicious traffic without requiring any manual intervention in the process.

○ Lets you modify protection policies as per your business requirements.

Mitigation of Protocol Attacks

○ Ensures mitigation of protocol attacks such as Smurf attacks, ping of death, SYN floods, etc.

24/7 Security Support

○ Augments protection through 24*7 support from security experts.

Compatible with other cloud services

○ Inhibits capability of integration and providing security to servers on other cloud services besides Alibaba Cloud.

Advanced Protection Algorithms

○ Includes high-level mechanisms such as maintenance of IP reputation database, and IP+Cookie/IP+Key mechanism to mitigate HTTP floods.

○ Defends against different attacks which can slow down the speed of websites such as connection attack, slow connection attack and malicious attack to provide seamless experience on websites and applications.