If you find that all your attacks come from a specific region, or your business only allows access from specific regions and does not trust access from other regions, EdgeOne supports one-click blocking in the cleaning room by specifying a list of regions based on the source IP geographic region, helping you to custom block access requests from specified regions. After enabling region blocking, traffic from the blocked region to the EdgeOne site will be discarded. Supports multi-region and country traffic blocking.
Note：
1. This function is only supported when the L4 proxy is enabled for Exclusive DDoS protection, and is not supported for default platform protection and Exclusive DDoS protection for L7 sites;
2. After configuring region blocking, the attack traffic from that region will still be counted and recorded by the platform, but will not flow into the business origin.
Usage Scenarios
Exclude all attack behavior outside of trusted regions: If your current business is only applicable to specific regions, you can use region blocking to one-click block access clients from other regions in DDoS cleaning, avoiding attack sources from other regions from passing through to the origin.
One-click blocking of concentrated attack behavior in a region: If the main attack source of your current site is from a specific region, you can use region blocking to one-click block all access requests from that region in DDoS cleaning, more effectively preventing the attack from passing through.
Directions
For example: The current site users are all in China, only allowing Chinese users to access the site, not trusting access requests from other regions, in order to eliminate possible attack behavior from other regions, during a DDoS attack, all requests from other regions are blocked. The operation steps are as follows:
1. Log in to the EdgeOne console, click on the site list in the left menu bar, click on the site to be configured in the site list, and enter the site details page.
2. On the site details page, click Security Protection > DDoS Protection to enter the DDoS Protection details page.
3. In the L4 proxy protection tab, select the L4 proxy protection instance you need to configure and click on security configuration.
4. In the region blocking card, click on set to enter the region blocking page.
5. On the region blocking configuration page, click the edit button on the right side of the blocking list, select the blocked region, in this case, select all regions except the Chinese mainland.
6. Click save to complete the region blocking configuration.
