Quick Start

Mainland High Defense

1. Replace old IP with the new IP

If the IP has been blocked, purchase a new source station IP to replace the old one.

If the IP is not blocked, it is recommended to apply for a new source station IP to replace the old one. The old source station IP may be blocked or exposed due to attacks, posing a risk of being attacked directly.

Note:

The blocked IP must be replaced with a new IP before it can be used normally in the high defense.

2. Add IP to initiate service

On the “Security Defense” - “DDoS Attack Defense UDDoS” - “High Defense” page, click “Details” - “IP Management” - “Add IP”. Note that the following diagram is applicable for Shijiazhuang BGP. For Yangzhou BGP, please see Operation Guide - Add Forwarding Rules.

High Defense Line: This refers to which high defense station line will be used, which is affected by the following two factors: (1) The highest IP attack peak will be charged for elastic charges in the same line of defense station; (2) if the high defense station adopts the Telecom line, the backhaul is in the same line, and the latency is small. If the source station is Unicom, the delay is larger than the delay of the source station which uses telecom.

Source IP: Enter the source station IP address to be protected.

Notes: Enter notes, can be blank.

3. Allow all back-to-source IP on firewall or related security protection software

If there are security software or hardware that restrict the source IP, then you need to allow the back-to-source IP.

4.1 Modify CNAME Record

If it is a website business and there’s a domain name, high defense protection can be achieved by modifying the cname.

Firstly, get the cname of the high defense (after adding the source station IP, it will be given in the list), as shown in the following figure:

Go to the DNS service provider to delete the A record and add the CNAME record.

Note: After adding the IP in the previous step, each record will generate a corresponding CNAME value. You need to modify the DNS resolution of the corresponding website domain name to CNAME resolution method.

4.2 Use High Defense IP for Business Access

If it is a non-website business or there is no domain name. Usually, you need to modify the corresponding source station IP or corresponding domain name resolution IP in the client configuration file. Replace the original resolution to the source station IP with the high defense IP.

Note:
After the mainland high defense expires, we will keep your configuration for one day. Please renew and restart the service in time, or ensure that the high defense IP is no longer used to access related businesses. Otherwise, the configuration will be automatically recycled one day after the service expires, which will cause the business to be interrupted.