This section describes how to configure a filter, which is used by the cleaning device to perform static filtering over the traffic destined for the Zone.
Filters can be classified into two types: Zone filter and hardware filter.
- A Zone filter is implemented by the CPU of the anti-DDoS device to protect user services. It is configured based on service characteristics. When configuring a Zone filter, you need to associate it with a Zone.
A maximum of 20 Zone filters can be configured for each Zone.
- A hardware filter filters out common network-layer attack packets (such as SYN flood attack packets and various UDP-based amplification attack packets) to ensure the security of the entire network layer. The hardware filter configuration is general and applies to all Zones. Therefore, you only need to associate a hardware filter with a device.