Anti-DDoS can clean traffic for ECS and ELB instances within the specified traffic limit.
If the normal service access traffic exceeds the traffic limit, Anti-DDoS automatically limits the traffic. (Loss of normal access traffic can occur.) Therefore, you are advised to purchase a third-party traffic cleaning service and obtain reports from the service vendor.
Anti-DDoS devices are deployed at egresses of equipment rooms. The following figure shows the network topology.
The detecting center detects network access traffic based on user-configured security policies. If an attack is detected, the detecting center diverts traffic to the cleaning device to clean abnormal traffic and forwards only normal traffic.
Anti-DDoS network topology