# Filter

This section describes how to configure a filter, which is used by the cleaning device to perform static filtering over the traffic destined for the Zone.

Filters can be classified into two types: Zone filter and Hardware Filter.

- A Zone filter is implemented by the CPU of the AntiDDoS to protect user services. It is configured based on service characteristics. When configuring a Zone filter, you need to associate it with a Zone.

  A maximum of 32 Zone filters can be configured for each Zone.

- A hardware filter filters out common network-layer attack packets (such as SYN flood attack packets and various UDP-based amplification attack packets) to ensure the security of the entire network layer. The hardware filter configuration is general and applies to all Zones. Therefore, you only need to associate a hardware filter with a device.

- Zone Filter
  The AntiDDoS and AntiDDoS1820-N support Zone filters.
- Configuring a Hardware Filter (AntiDDoS)
  This section describes how to create a hardware filter and associate the filter with a device for the cleaning device to perform static filtering on the traffic passing through the device.

Parent topic: Configuring the Zone-based Defense Policy

Copyright © Huawei Technologies Co., Ltd.