Elastic IP (EIP), as an independent commodity, provides users with IPv4 and IPv6 public bandwidth services.
explain:
Elastic public network IPv6 is currently in public beta. If you want to use it, you canSubmit application, welcome to use.
The main uses of the EIP include:
Through the EIP instance, users can obtain public network bandwidth services.
Users can flexibly configure EIP instance billing modes, including on-demand billing (pay by bandwidth on demand, pay by traffic on demand) and monthly package billing (pay by bandwidth).
The user can bind or unbind the EIP instance with any ECS BCC, elastic bare metal server BBC, dedicated server DCC, load balancing BLB, ApsaraDB Redis, container instance BCI, VPN gateway, NAT gateway, and elastic network card to match the user's different business scenarios.
The EIP supports two types of lines: enhanced BGP and standard BGP. The differences between the two are as follows:
Contrast item
Enhanced BGP
Standard BGP
Use Scenarios
It is applicable to scenarios with few IP addresses and large bandwidth
Applicable to multi IP small bandwidth scenarios
Price
The IP rental fee is high and the bandwidth fee is cheap
The IP rental fee is cheap and the bandwidth fee is high
It is not necessary to switch the DDOS advanced anti DDoS IP, and the traffic burst service package can be used to have 100 G level full export native protection capability
It provides 5G DDoS basic native protection. For greater DDoS protection capability, it needs to switch to DDoS advanced anti DDoS IP
Bandwidth range
100-5000Mbps
1-500Mbps
Shared bandwidth
Shared bandwidth is a bandwidth mode in which multiple hosts share the total amount of network bandwidth.By sharing bandwidth, users can manage a share of shared bandwidth to achieve traffic sharing and stagger peak network connections.
Address pool
The address pool can assign a specific IP address segment to a user. Unlike the shared address segment, the specific address segment is only used by the customer. Its main features are as follows:
The exclusive address pool provides continuous IP address segments.
The private address pool needs to specify a public IP address.
In addition to the normal quota, the exclusive address pool can increase the IP quota to meet customer needs.
explain:
Only one IP address segment can be added to each dedicated address pool.
The public IP address of the private address pool supports IPv4 and IPv6, of which IPv4 addresses need to be paid and IPv6 addresses are free.
Bandwidth packet
There are two types of bandwidth packets:
Bandwidth upgrade package:The bandwidth upgrade package can be used to bind prepaid EIP instances or share bandwidth, to achieve temporary upgrade of prepaid bandwidth, and to support the bandwidth package to upgrade and downgrade bandwidth at any time. After release, the bound EIP restores the original bandwidth, and using the bandwidth package enhances the flexibility of EIP bandwidth configuration.
Cross border acceleration package:The cross-border acceleration package can be used to bind EIP instances or shared bandwidth of any billing type to achieve temporary upgrade of cross-border bandwidth, and support the cross-border acceleration package to upgrade and downgrade bandwidth at any time. After the release of the bound EIP instances or shared bandwidth, the original cross-border bandwidth can be restored. The use of cross-border acceleration packages enhances the flexibility of EIP instances or shared bandwidth cross-border bandwidth configuration.Cross border lines are directly connected to the mainland through operators' high-quality networks, without bypassing international operators' exports, which has the advantage of lower delay.
Shared traffic package
The shared traffic package is a traffic package product, which is convenient to use and affordable.It takes effect immediately after purchasing the shared traffic package, and automatically deducts the same region post payment - EIP fees charged by traffic until the shared traffic package runs out or expires.
Traffic burst service package
Traffic Burst Service Package (TBSP) is a network product based on Baidu Intelligent Cloud native network, which transparently protects burst traffic without changing the IP address of the origin server.It is applicable to businesses deployed on Baidu's intelligent cloud, and can meet customers with large business scale and high requirements for network quality.Although this type of customer has a low risk of suffering from sudden traffic, once suffering from sudden traffic that leads to business interruption or damage, it will bring huge business losses.The traffic burst service package can effectively solve various network layer DDoS attacks such as SYN Flood/ACK Flood/ICMP Flood/UDP Flood, as well as application layer attacks such as CC attacks, and reduce the potential risk of burst traffic to the business.
Basic DDoS protection
Baidu Smart Cloud's basic DDoS protection is Baidu Cloud's free basic DDoS protection capability for cloud customers to meet their daily security operation needs and ensure the normal and reliable operation of cloud resources.Baidu Smart Cloud customers can enjoy the DDoS protection capability of up to 5Gbps for free (1Gbps for basic protection in Hong Kong), which is enabled by default, monitors network traffic in real time, and cleans immediately after discovering attacks.
explain:To obtain higher DDoS protection capability, you can chooseTraffic burst service packageService to quickly respond to attacks.
The difference between DDoS basic protection service, traffic burst service package and DDoS advanced anti DDoS IP:
Contrast item
DDOS basic protection
Traffic burst service package
DDoS advanced anti DDoS IP
Protected objects
Provide basic DDoS protection capability for cloud customers
Improve DDoS protection capability only for public network services in Baidu Intelligent Cloud
For users inside and outside the cloud, support website domain name and business port access protection
Protection capability
Continental region provides maximum 5Gbps protection capability
The highest 1Gbps protection capability is provided in Hong Kong, China
Defense capability is generally not less than 100~300 Gbps
Total T-level DDoS protection capability
Network delay
Native network without increasing network delay
Native network without increasing network delay
Lead the attack traffic to the advanced defense center, clean it and return it to the source station, increasing the network delay
Access cost
No additional configuration required
More convenient access configuration, no need to change the server IP, directly improve the defense capability of cloud products, take effect immediately, and access costs are low
Because advanced DDoS defense is a forwarding architecture, access protection can be accessed only after DNS resolution or service IP is modified. The configuration is quite complex, and domain name and port information need to be filled in
Billing method
Free products
Simple billing, sold according to the "number of protection IP", and provide full protection
Complicated billing, including "minimum package fee" and "elastic protection fee"
Use Scenarios
Low risk DDoS protection scenario: public network services are deployed in Baidu Intelligent Cloud, which is small in scale, rarely subject to DDoS attacks, and sensitive to network delay
Low risk DDoS protection scenario: public network services are deployed in Baidu Intelligent Cloud, which is large in scale, occasionally subject to DDoS attacks, and sensitive to network delay
High risk DDoS protection scenario: frequently suffer from malicious large-scale DDoS attacks, and need to continue to protect against DDoS attacks to protect the stability of the business