Knowledge BaseSecurityHow DDoS protection works

How DDoS protection works

Security 3 min read Updated March 2026

Always-on 10 Gbps DDoS absorption at the network edge. Included free, no toggle needed.

Three mitigation layers

  • L3/L4 (volumetric): SYN floods, UDP floods, amplification attacks — scrubbed at our scrubbing centers (Frankfurt, New York, Singapore).
  • L7 (application): HTTP floods, slowloris, POST floods — handled by WAF + rate limiting.
  • Anycast: attack traffic is spread across 280+ POPs so no single site sees the full bandwidth.

During an attack

No action needed. Our system auto-enables “Under Attack Mode” if legitimate traffic drops — similar to Cloudflare’s challenge page. Turn off manually at Security → DDoS → Manual mode.

Enterprise scrubbing

Sustained attacks > 10 Gbps trigger our network partner’s scrubbing. Included on Business and above, at cost on Starter tier.

Was this article helpful?

Still stuck?

Our team answers tickets 24/7. Median first response: 15 minutes.

Orvoxa — White-Label Reseller Hosting Platform