> For the complete documentation index, see [llms.txt](https://docs.console.zenlayer.com/welcome/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.console.zenlayer.com/welcome/cn/elastic-compute/ddos-protection/04-eip-blocked-rules.md).

# EIP 拦截规则

EIP 拦截规则在每个地区均可用且始终处于活动状态。当进出某个 EIP 的流量超过配置的阈值时，规则将自动触发——无需 DDoS 防护。在没有 DDoS 防护的地区，这是您的主要入站防线。在已部署 DDoS 防护的地区，它在清洗之后作为第二道防线运行。

## 工作原理

每个 EIP 都会分配一组流量阈值。系统持续监控流量指标并将其与这些阈值进行比较。当任何阈值被超过时，系统将采取防护措施：

* **入站阈值超限（BPS、PPS 或 InCPS）：** 受影响 EIP 的流量被封禁路由，丢弃所有入站数据包，以防止攻击使您的实例饱和或影响其他租户。
* **出站阈值超限（OutCPS）：** 受影响 EIP 的互联网连接在网络接口层面受到限制，防止可能已被入侵的实例参与出站攻击。

## 可配置阈值

每个 EIP 支持系统默认阈值和自定义阈值。自定义阈值允许您根据特定工作负载特征精细调整防护。

如需调整特定 EIP 的阈值，请导航至[弹性 IPv4](https://console.zenlayer.com/zec/elastic-ip) 页面，找到目标 EIP，点击操作列中的 **⋯** 菜单，然后选择**更改拦截阈值**。

拦截操作是临时性的，在可配置的时长（默认：2 小时）后自动到期，之后流量将重新接受评估。


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.console.zenlayer.com/welcome/cn/elastic-compute/ddos-protection/04-eip-blocked-rules.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.