DDoS protection service

DDoS protection service is a professional DDoS protection service launched for users. Based on the self-developed Skynet defense system, it can comprehensively protect against various network layer and application layer DDoS attacks, and ensure that the source station is stable and reliable, and the business is sustainable.

Product Overview
Product selection
Product Functions
Product advantages
Application scenarios
Help Documents
Related products

Product Overview

You can use DDoS protection services to protect your business assets on or off the cloud from DDoS attacks. DDoS protection service provides 5Gb free DDoS protection capability for cloud customers. When the service suffers from a DDoS attack of more than 5Gb, the attack traffic can be directed to the advanced defense center, cleaned and returned to the source station to ensure the stable and normal operation of the source station.

Product selection

More product models

DDoS protection service advanced anti DDoS IP

Total T-level DDoS protection capability, BGP line, faster speed, less delay, more stable line, 1 advanced anti DDoS IP by default.

Item type

line

Number of protection domains

Minimum protection peak

Purchase duration

Advanced anti DDoS IP

BGP

10Gbps

1 year

￥ fifty-eight thousand /Year

Buy Now

DDoS protection service advanced anti DDoS IP

Total T-level DDoS protection capability, BGP line, faster speed, less delay, more stable line, 1 advanced anti DDoS IP by default.

Item type

line

Number of protection domains

Peak value of high protection and minimum protection

Purchase duration

Advanced anti DDoS IP

BGP

100Gbps

1 year

￥ two hundred and seventy-eight thousand /Year

Buy Now

DDoS protection service advanced anti DDoS IP

Total T-level DDoS protection capability, BGP line, faster speed, less delay, more stable line, 1 advanced anti DDoS IP by default.

Item type

line

Number of protection domains

Peak value of high protection and minimum protection

Purchase duration

Advanced anti DDoS IP

BGP

300Gbps

1 year

￥ four hundred and forty-eight thousand /Year

Buy Now

Product Functions

Detection package and abnormality package filtering
Malformed packet filtering based on multiple protocol fields, and various protocol detection attacks.
Threat protection based on application layer
Effectively resist HTTP get/post flood attacks; CC attack; HTTP slow header/post attacks.
Attack protection based on network transmission
Effectively resist SYN flood attack, ACK flood attack, FIN/RST flood attack, and other major network attacks.
Attack Trend Report
Provide multiple attack trend data reports. Comprehensively interpret the attack situation from multiple dimensions such as traffic and datagram.

Product advantages

Faster, stronger, more efficient

Total T-level DDoS protection capability. BGP line has faster speed, less delay and more stable line.

Comprehensive protection, precision and comprehensive

Effectively defend against multiple network layer DDoS attacks such as SYN Flood/ACK Flood/ICMP Flood/UDP Flood, and application layer DDoS attacks such as CC attacks.

Smarter, smarter

The unique DDoS intelligent analysis system can quickly respond to attacks. Accurately generate multiple combined CC defense strategies based on attack characteristics.

Application scenarios

Individual users/small business users

Financial business service/game business service

Scenario Overview

Individual users and small business users are not likely to be attacked. Generally, free 5Gb basic DDoS protection can meet the needs of DDoS protection.

We can provide

Basic DDoS protection
Baidu Intelligent Cloud's basic DDoS protection is the basic DDoS protection capability that Baidu Intelligent Cloud provides for cloud customers free of charge, meets customers' daily security operation needs, and ensures the normal and reliable operation of cloud resources. Baidu Smart Cloud customers can enjoy the DDoS protection capability of up to 5Gbps for free (1Gbps for basic protection in Hong Kong), which is enabled by default, monitors network traffic in real time, and cleans immediately after discovering attacks.