> For the complete documentation index, see [llms.txt](https://docs.console.zenlayer.com/welcome/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.console.zenlayer.com/welcome/cn/elastic-compute/ddos-protection/06-feature-comparison.md).

# 功能对比

下表涵盖 DDoS 防护与 EIP 拦截规则之间的主要差异。有关每个层中可配置选项的完整列表，请参阅 [DDoS 防护配置指南](/welcome/cn/elastic-compute/ddos-protection/09-configuration-guide.md)。

| 功能             | DDoS 防护              | EIP 拦截规则                 |
| -------------- | -------------------- | ------------------------ |
| **可用性**        | 特定地区                 | 所有地区                     |
| **流水线位置**      | 第一层（上游）              | 第二层（下游）                  |
| **监控指标**       | BPS、PPS、InCPS        | BPS、PPS、InCPS、OutCPS     |
| **攻击缓解**       | 通过 BGP 转发 + 清洗进行流量清洗 | 基于阈值的封禁路由 / NIC 拦截       |
| **流量清洗**       | 是——将合法流量与攻击流量分离      | 否——仅拦截/放行                |
| **指纹检测**       | 是——载荷模式匹配            | 否                        |
| **协议过滤**       | 是——TCP、UDP、ICMP 分析   | 否                        |
| **地理拦截**       | 是——国家级过滤             | 否                        |
| **IP 允许/拦截列表** | 是                    | 否                        |
| **封禁路由**       | 是（从清洗升级）             | 是（主要操作）                  |
| **出站防护**       | 否                    | 是——OutCPS 超限时进行 NIC 层级拦截 |
| **自定义阈值**      | 是——每策略配置             | 是——每 EIP 配置              |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.console.zenlayer.com/welcome/cn/elastic-compute/ddos-protection/06-feature-comparison.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.