Origin access restrictions
Publish the protected IP and restrict origin access according to the agreed origin routing plan. Previously exposed origin addresses require separate action.
Route traffic through DDoS scrubbing nodes before forwarding it to your origin. Mainland plans include basic CC protection and unmetered legitimate traffic. Hong Kong tiers specify CN-direction protection, with an optional unmetered overseas-direction protection add-on.
Publish the protected IP and restrict origin access according to the agreed origin routing plan. Previously exposed origin addresses require separate action.
Mainland plans include automatic DDoS scrubbing and basic CC protection. Hong Kong tiers specify CN-direction DDoS protection; overseas-direction protection is optional. Assess Web application protection separately.
Combined with edge nodes, load balancing, dynamic routing and protocol optimization, the access experience is improved.
Configure matching conditions according to business scenarios to flexibly control user access and traffic forwarding.
Provides attack event monitoring alarms and visual data to facilitate tracking and analysis of anomalies.
Enhance stability and improve visitor access speed through central nodes and network scheduling.
Websites, games or other services that require an independent DDoS-protected entrance; access depends on the actual protocol, port and business connection method.
Check dedicated IPs, forwarding ports, application bandwidth and protection bandwidth separately. Protection capacity is not the bandwidth available to run your application.
Your origin must be reachable and allow traffic from the agreed origin-fetch addresses. Publishing a protected IP does not remove previous origin exposure; configure origin access restrictions as well.
The quote should specify the service period, overage handling and extra IP or port fees. Test protocols, latency and key workflows before switching traffic.
Map mitigation to your protocols, forwarding, origins and recovery process.
Validate protocol behavior and legitimate sessions through mitigation and forwarding.
Read the use caseSeparate network attacks, authentication traffic and database pressure during launch peaks.
Read the use caseCoordinate partner allowlists, TLS identity and forwarding while preserving application authorization.
Read the use caseValidate complete sessions, idle handling and disconnect behavior rather than only port reachability.
Read the use caseReview CN-direction defense, the overseas option, legitimate bandwidth and origin routing.
Read the use casePrepare capacity, controlled exceptions and recovery across landing pages, sign-in, stock and callbacks.
Read the use caseClear product configuration and flexible protection options.
50Gbps to 1Tbps, with custom 1Tbps+ options and unmetered legitimate traffic.
All listed tiers from 50Gbps to 1Tbps+ specify CN-direction DDoS protection. Overseas-direction protection is a separate optional add-on.
Overseas-direction scrubbing resource pool
+¥5,000/monthAvailable on every Hong Kong protected IP plan. Within the service terms and actual scrubbing capacity, unmetered means no extra charges based on attack count or attack traffic volume. It does not mean unlimited Tbps protection capacity.
Overseas-direction protection is off. The current monthly total is the CN-direction plan price.Overseas-direction protection is on. Monthly totals include the ¥5,000/month add-on; custom plans require a quote.
Confirm business bandwidth, access quotas and other features for your Hong Kong plan. Prices shown are monthly.
Mainland annual prices are totals for one year. Contact sales for 1Tbps+ plans. The Hong Kong overseas-direction add-on costs ¥5,000 per month.
Independent IPs isolate enterprise services from each other and reduce the impact of attacks on shared resources.
Confirm the cleaning strategy, over-limit handling and service scope based on the application protocol, attack type and purchased resources.
Test normal access, latency and long connection behavior before and after access, and prepare for troubleshooting and rollback arrangements.
The nodes cover cities at home and abroad, with load balancing and dynamic expansion, taking into account security and speed.
Unmetered legitimate traffic means no plan allowance caps the cumulative legitimate traffic volume. Transfer speed is still limited by the selected business bandwidth.
Hong Kong tiers from 50Gbps to 1Tbps+ apply to CN-direction DDoS protection, not equivalent capacity across all global directions. Overseas-direction protection requires a separate add-on.
Every Hong Kong protected IP plan can add this option for ¥5,000/month. Within the service terms and actual scrubbing capacity, there are no extra charges based on attack count or attack traffic volume; this does not mean unlimited Tbps protection. Sales confirms the total for custom 1Tbps+ plans.
Mainland protected IP supports TCP, UDP, HTTP and HTTPS. Choose a plan for your domains, forwarding ports and business bandwidth; confirm Hong Kong access support for the selected plan.
Yes. Discuss the IP count, ports, application bandwidth, protection nodes and protection bandwidth with an advisor for a custom configuration.
Have other questions?Contact a technical advisor
From personal projects to corporate operations, find the protection solution that's right for you.