About Flood Shield 2.0

Reading time: About 5 minutes

Product Overview

Flood Shield 2.0 is a comprehensive service that integrates security protection and acceleration on a single platform, supporting unified onboarding and protection for HTTP/HTTPS and TCP/UDP traffic.

How It Works

Onboarding is completed through a DNS change: traffic is first routed to the CDNetworks network, where edge nodes inspect it and mitigate attacks, and the clean traffic is then forwarded to the origin server.

The system runs on a dual-engine architecture:

• Edge engine: Real-time security protection and acceleration.
• AI central engine: Continuously analyzes traffic and behavioral patterns, and works with the threat intelligence database to generate adaptive policies.

Core Components

Core Value

• Large-scale attack mitigation: Backed by distributed scrubbing centers with 20 Tbps+ of mitigation capacity, the service withstands extremely large attacks.
• Better origin protection: Attack requests are scrubbed at edge nodes, so origin bandwidth, connection resources, and backend processing capacity are protected.
• Simpler architecture: Security inspection and acceleration run on the same link, so you do not need two separate architectures for protection and acceleration.
• Performance and security together: CDN acceleration lowers access latency, while protection and traffic distribution are completed in one pass without adding an extra forwarding hop.

Core Capabilities

Unified Protection for Web and Non-Web Services

• HTTP/HTTPS protection: For websites, web applications, and APIs.
• TCP/UDP protection: For gaming, streaming, real-time communication, and custom protocols.

Multi-Layer Security Protection

• L3/L4 DDoS protection: Mitigates SYN Flood, UDP Flood, reflection amplification, and similar attacks.
• L7 protection: WAF, Bot Management, API protection, and L7 DDoS protection.
• Multi-dimensional detection: Protocol validation, behavioral analysis, and threat signature identification.

Unified Policies and Visualization

• L3/L4 and L7 policies are configured in one place, keeping policies consistent across services.
• A unified view of traffic, attacks, and protection effectiveness helps you locate issues and verify protection results.

Recommended Use Cases

• Business systems that include both web and non-web services
• Scenarios that face frequent, large-scale, or mixed attacks
• Applications that serve traffic over HTTP/HTTPS and TCP/UDP
• Businesses with both performance and security requirements
• Scenarios that need stronger origin protection and continuous business availability