CC protection identifies and blocks CC attacks based on access attributes and connection status. It provides scenario-specific configurations for you to create protection policies, helping secure your business. It also supports setting the cleaning threshold.
Prerequisite
1. You have purchased an Anti-DDoS Advanced instance and set an object to protect.
2. Only CC protection rules configured for instances connected via domain names take effect.
Directions
1. Log in to the new Anti-DDoS console, click CC protection on the left sidebar.
2. Select a domain name from the IP list on the left.
3. In the CC Protection and Cleansing Threshold section, click
to enable CC protection and set a cleansing threshold.
Note:
This switch controls whether to enable CC protection. Only when it is turned on, the protection policy below it take effect.
4. The cleansing threshold is a threshold for Anti-DDoS services to start cleansing traffic. If the number of HTTP requests sent to the specified domain name exceeds the threshold, CC protection will be triggered. After CC protection is enabled, your Anti-DDoS Advanced instance will use the default cleansing threshold (recommended) to protect your business, and the Anti-DDoS system will generate a dedicated set of default thresholds based on the historical patterns of your business traffic. You can also set a cleansing threshold as needed.
Note:
If you want to set a custom threshold, a value that is 1.5 times your common business traffic peak is recommended.
A smaller threshold means stricter detection.
If the threshold is lower than the default value, it may lead to false positives. If the threshold is higher than the default value, abnormal requests may be passed through. Therefore, the default threshold is recommended.
