The Protection level is the default protection template provided by EdgeOne DDoS protection. DDoS protection will automatically intercept traffic attacks that match the features according to the protection level. The following are the protection strategy descriptions for each protection level:
Note：
This function is only supported when the L4 proxy is enabled for Exclusive DDoS protection. The default platform protection and L7 site Exclusive DDoS protection do not support configuration.
Protection strategies for each protection level
Comparison items
Loose
The cleaning strategy is relatively loose, and only attack packets with clear attack features are protected. It is suggested to enable when false interception is suspected, and complex attacks may penetrate.
Moderate (default)
The cleaning strategy adapts to the vast majority of businesses and can effectively protect against common attacks. DDoS protection defaults to moderate mode.
Strict
The cleaning strategy is relatively strict, and it is recommended to use when attack penetration occurs in normal mode.
Data packets with clear attack features
SYN data package
Filter
Filter
Filter
ACK data package
Filter
Filter
Filter
UDP data package
Filter
Filter
Filter
Data packets not conforming to protocol specifications
TCP data package
Filter
Filter
Filter
UDP data package
Filter
Filter
Filter
ICMP data package
Filter
Filter
Filter
Attack data packets based on threat intelligence
Not filter
Filter
Filter
Active verification of some access source IP
Not filter
Filter
Filter
ICMP attack packet
Not filter
Not filter
Filter
Adjust protection level
If your business has the following two situations, it is recommended that you adjust the protection level:
During the current business operation, if there is false interception in the Log analytics, in order to ensure the availability of the business, you can reduce the protection strategy level to Loose;
During the current business operation, if there is still attack penetration to the origin under the Moderate protection level, it is recommended that you increase the protection level to Strict.
You can follow the steps below to adjust:
1. Log in to the EdgeOne console, click on the site list in the left menu bar, and click on the site to be configured in the site list to enter the site details page.
2. On the site details page, click Security protection > DDoS protection to enter the DDoS protection detail page.
3. In the L4 proxy protection tab, select the L4 proxy protection instance that needs to be configured, and click Security configuration.
4. Find the L3/4 DDoS Protection level card, click Set, and adjust the protection level;
