DDoS Protection Questions
Answers to the questions we get most often about DDoS attacks, mitigation, and how to protect your infrastructure.
DDoS protection safeguards online infrastructure from Distributed Denial of Service attacks. It filters attack traffic while allowing legitimate users to access your services.
A DDoS attack attempts to disrupt a server, service, or network by overwhelming it with internet traffic from multiple compromised systems, often called a botnet.
We protect against volumetric attacks such as UDP and ICMP floods and DNS amplification, protocol attacks such as SYN floods, and application-layer attacks such as HTTP floods, Slowloris, RUDY, and LOIC. Protection covers Layers 3–7.
Traffic is routed through our mitigation network before reaching your servers. Our systems analyse patterns to distinguish legitimate users from attackers, filter malicious traffic at scrubbing centres, and forward clean traffic to your infrastructure.
Layer 7 protection defends against attacks targeting specific applications or web servers. It uses behavioural analysis, CAPTCHA challenges, and rate limiting to identify attacks that imitate legitimate user behaviour.
Protection activates automatically within seconds of detection, and most attacks are fully mitigated in under one minute. Our 1+ Tbps mitigation capacity handles large attacks without service interruption.
No. It is designed to have minimal impact on legitimate traffic. Our global network and caching can even improve load times for many users.
Any online service-website, application, game server, or API-can be attacked. Protection costs far less than the potential revenue loss, reputational damage, and recovery costs of an incident.
It is included free with our Cloud VPS and Dedicated Server hosting. For externally hosted services, we provide custom quotes based on bandwidth and protection requirements.
We operate public PoPs in Frankfurt, Amsterdam, Zurich, North Kansas City, and Singapore with 1T+ edge capacity. Remote protection and protected transit also cover customers globally without relocating the origin.
Yes. Standalone protection supports infrastructure hosted anywhere through DNS-based protection, GRE tunnels, and BGP-based protection for IP ranges.
Contact us immediately through our emergency channel. We offer emergency onboarding and rapid deployment, often within minutes; visit our Under Attack page for immediate assistance.
Still have questions?
Can't find the answer you're looking for? Our team is here to help.