The 23M DDoS Protection!

Our DDoS protection offers comprehensive coverage against various types of attacks to safeguard your infrastructure from harmful overloads. With different protection levels and flexible expansion options, we tailor our solutions to meet your individual network security needs. Everything is hosted in-house, with no reliance on external service providers.

Types of attacks we protect against

Resource Exhaustion

• Protection against attacks such as:

  • UDP bombs (malformed and truncated packets)

  • IP fragmentation

  • Invalid TCP segment IDs

  • Faulty checksums and illegal flags in TCP/UDP frames

  • Invalid TCP/UDP port numbers

Volumetric DDoS

• Blocks large-scale overload attacks:

  • TCP/UDP flood

  • UDP fragmentation

  • SYN floods

  • ICMP floods

  • Carpet bombing

Reflective Amplification DDoS

• Defense against attacks exploiting amplification vulnerabilities:

  • NTP Monlist response amplification

  • CLDAP (Connectionless LDAP)

  • SSDP/UPnP responses

  • SNMP, CHARGEN, and DNS response amplification

Custom Protection

• Our solution offers flexible customization options:

  • Protection of individual or multiple IPs, as well as entire subnets

  • Smart-Rules: A patented, heuristic protection mechanism that detects and blocks volumetric DDoS attacks, including zero-day attacks.

  • Flex-Rules: User-definable filters based on Berkeley Packet Filter (BPF) syntax.

  • Botnet/source detection and blocking

  • Intelligent fragment blocking

  • Port-based blocking of TCP/UDP traffic

  • Rate limiting for specific use cases

Protection scope options

Our basic DDoS protection includes a default null-routing rule starting at an overload of 20 Gbps. For more comprehensive protection, we offer flexible upgrades:

Protected bandwidth

Upgrades:

• Always-On Protection: €25 per IP
  The Always-On or Detail Protection offers deeper protection and faster TTM (Time To Mitigate). In this case, we route the IP directly through our scrubbing cluster.

Protection for BGP customers

BGP customers also benefit from our protection. Protected prefixes must be provided to us for configuration.

Flexibility and scalability

Our protection system is highly flexible and scalable. More complex configurations and higher bandwidths can be individually adjusted by arrangement. The Always-On protection, in particular, ensures a faster response time during attacks by routing traffic directly through our scrubbing cluster.