How it works
DDoS Protection is a service that protects Dedicated Servers from DDoS attacks. Basic (free) Protection is set up on all of our equipment by default. When a server is attacked, the system blocks its IP, so the attacker cannot continue the attack. The server does not suffer, but it becomes unavailable for several hours. You can order advanced (paid) Protection. It redirects traffic to TMS (threat mitigation system — a system for cleaning traffic and detecting threats) during an attack. This device detects an attack, cleans up the traffic, and sends to the server only data that will not harm it. You can set the ACL (access control list) for TMS. The main advantage is that IP is not blocked during an attack, and the server remains available. Advanced protection uses an always-on mode.How always-on protection works
With always-on protection, your traffic passes through the TMS at all times, even when there is no attack. The response to an attack is instant, and the server is guaranteed to receive only clean traffic.| Always-on (Advanced protection) | Basic protection | |
|---|---|---|
| Payment | Paid | Free |
| How soon it recognizes an attack (maximum time) | 5 seconds | 3 minutes |
| What attacks it protects from | • Standard amplification attacks • Attacks from fake IP addresses • Attacks using flows or volumetric attacks (L3) • Attacks to establish a connection (L4) • Attacks at the application layer (L5-L7) | • Standard amplification attacks • Attacks from fake IP addresses |
| Protection mechanism | 1. All traffic passes through TMS 2. When attacked, TMS immediately cleans up the traffic 3. TMS sends cleaned traffic to the server | 1. Attack is detected 2. The attacked IP is blocked for a while |
| What cases it is suitable for | • You are attacked frequently • You are attacked at the application layer (L7) • The server hosts a critical business application | • You are hardly ever attacked • The server doesn’t host any critical business applications |
Billing
The price of DDoS Protection service depends on three things:- OSI layers to be protected. Two ranges are available: L3-L4 and L3-L7, the first option is cheaper.
- The bandwidth that will be used by TMS to send traffic to the server. Several options are available: 1 Mbps, 10 Mbps, 100 Mbps, 200 Mbps, 500 Mbps, 1 Gbps, 2 Gbps, 10 Gbps. The lower the bandwidth is, the cheaper the tariff is.
- The region where the server is located. Prices vary from location to location, please send a request for service, and we will tell you the price of DDoS Protection in a particular data center.