Always-on 10 Gbps DDoS absorption at the network edge. Included free, no toggle needed.
Three mitigation layers
- L3/L4 (volumetric): SYN floods, UDP floods, amplification attacks — scrubbed at our scrubbing centers (Frankfurt, New York, Singapore).
- L7 (application): HTTP floods, slowloris, POST floods — handled by WAF + rate limiting.
- Anycast: attack traffic is spread across 280+ POPs so no single site sees the full bandwidth.
During an attack
No action needed. Our system auto-enables “Under Attack Mode” if legitimate traffic drops — similar to Cloudflare’s challenge page. Turn off manually at Security → DDoS → Manual mode.
Enterprise scrubbing
Sustained attacks > 10 Gbps trigger our network partner’s scrubbing. Included on Business and above, at cost on Starter tier.