CC Protection Function Description

I. Comparison of Three CC Protection Versions

Remarks: Hong Kong line data centers including Hong Kong 163, Hong Kong cn2, and Hong Kong high-defense line do not support this CC protection function; the “Hardware Edition” CC protection is only supported by Telecom data center, Smart Multi-line, and Domestic High Defense;

Click to view more CC attack and protection instructions>>

II. Standard Edition Feature Description

(1) Protection Status

There are three protection states

Automatic protection: when the threshold is reached, the system automatically enters the protection state. If the attack stops, the protection state is lifted after 1 hour. If the attack continues, it is lifted after 8 hours.

Forced protection: forcibly enable protection. If it is not disabled, it will remain in the protection state. Some false blocking may occur. It is generally recommended to change it to automatic or off when there is no attack.

Disable protection: no protection is performed.

(2) Protection Trigger Parameters

Three parameters can be set

CPU load (%): the limit is applied when CPU load exceeds this value

Burst access multiplier: number of visits in the last 1 minute / average number of visits in the last 15 minutes

Total access frequency (seconds): average number of visits per second per domain in the last 30 seconds

The protection state is entered only when all three parameters are met simultaneously.

(3) Ignore Spider user-agent

Enabled by default to protect against CC attacks from large numbers of forged spiders. If normal spider access is blocked, it can be disabled.

(4) Discard Foreign IPs

Enable this function to intercept the vast majority of foreign IP access (Note: because IP addresses are dynamically allocated, the address database will not update automatically, so some interceptions may fail).

Do not discard: both domestic and foreign IPs need protection

Discard foreign IPs and protect domestic IPs: prohibit foreign IP access; domestic IPs enter the protection state

Discard foreign IPs and do not protect domestic IPs: prohibit foreign IP access; domestic IPs are directly allowed

(5) URL Whitelist

Records added to the URL whitelist are allowed permanently by default by the system. You can enter a directory or file name, such as directory /abc; file /index.php. One record per line; for multiple records, enter multiple lines.

(6) IP Whitelist

Records added to the IP whitelist are allowed permanently by default by the system. You can enter an IP or IP range, such as Class C format: 1.1.1.0/24. One IP or IP range record per line; for multiple records, enter multiple lines.

(6) Protected Domains

Effective in forced CC protection mode. By default, all domains are protected. If only specific domains are to be protected, please fill in the list, one domain per line, and enter only the top-level domain, e.g., west.cn

(7) Blocked IP Query

If an IP is mistakenly blocked, you can query it here and unblock it.

(8) Protection Logs

Records the attacked domain, number of attack interceptions, and number of blocked IPs. Click View after each record to view detailed access time, source IP, access URL, etc.