Protection Configuration

Cleaning threshold

When the traffic on an EIP exceeds normal levels, TBSP works to mitigate attack traffic and ensure service availability. Users can customize cleaning thresholds based on their regular traffic levels.

1. Sign in to the Management Console and select Product Services - Network - EIP.
2. Navigate to TBSP in the left-hand menu to view the TBSP list.
3. Select the instance name to view details, and then choose Protection Policy from the left menu to modify policies.
4. Go to the Cleaning Threshold tab to view the configuration page.
5. Click on Modify Threshold to open a dialog box.
6. Fill in the following configuration information:

7. After clicking OK, the cleaning threshold will be successfully updated.

Description:

• The list allows configuring the ping-blocking switch. When turned on, ping packets are filtered, thereby reducing attack risks.
• When you purchase TBSP, you are entitled to a daily quota of 4 unblock operations at no additional cost.

IP allow list

Set up an IP allow list to grant direct access to listed source IPs, bypassing protection filters.

1. Sign in to the Management Console and select Product Services - Network - EIP.
2. Navigate to TBSP in the left-hand menu to view the TBSP list.
3. Select the instance name to view details, and then choose Protection Policy from the left menu to modify policies.
4. Open the IP Allow List tab to manage its configuration.
5. Select Add IP Allow List to display a pop-up window.
6. Fill in the following configuration information:

7. Click OK to finalize adding an entry to the IP allow list.

Region blocking

By adding the EIP to TBSP, you can configure region blocking to automatically discard cross-border traffic.

1. Sign in to the Management Console and select Product Services - Network - EIP.
2. Navigate to TBSP in the left-hand menu to view the TBSP list.
3. Select the instance name to view details, and then choose Protection Policy from the left menu to modify policies.
4. Go to the Region Blocking tab to manage its configuration.
5. Select Add Region Blocking to open a dialog box.
6. Fill in the following configuration information:

7. Click OK to complete the addition of the region block.

Description:

• Each traffic burst package instance is allocated a default limit of 10 traffic block triggers every month.

Protocol Blocking

Users can set up ICMP blocks and TCP/UDP blocked ports for protected IPs. Once configured, any associated attack traffic requests will be blocked during link probes.

1. Sign in to the Management Console and select Product Services - Network - EIP.
2. Navigate to TBSP in the left-hand menu to view the TBSP list.
3. Select the instance name to view details, and then choose Protection Policy from the left menu to modify policies.
4. Go to the Protocol Blocking tab to access the protocol blocking configuration page.
5. Select Add Region Blocking to open a dialog box.
6. Fill in the following configuration information:

7. Click OK to complete the process of adding the protocol block.