Filter

This section describes how to configure a filter, which is used by the cleaning device to perform static filtering over the traffic destined for the Zone.

Filters can be classified into two types: Zone filter and Hardware Filter.

• A Zone filter is implemented by the CPU of the AntiDDoS to protect user services. It is configured based on service characteristics. When configuring a Zone filter, you need to associate it with a Zone.
  

  A maximum of 32 Zone filters can be configured for each Zone.

• A hardware filter filters out common network-layer attack packets (such as SYN flood attack packets and various UDP-based amplification attack packets) to ensure the security of the entire network layer. The hardware filter configuration is general and applies to all Zones. Therefore, you only need to associate a hardware filter with a device.

• Zone Filter
  The AntiDDoS and AntiDDoS1820-N support Zone filters.
• Configuring a Hardware Filter (AntiDDoS)
  This section describes how to create a hardware filter and associate the filter with a device for the cleaning device to perform static filtering on the traffic passing through the device.