Protection from DDoS attacks
We filter every floating IP for DDoS attacks at no charge. A custom profile keeps one set of settings for several addresses.
A DDoS attack floods a server with traffic until players and visitors cannot reach it. DDoS Shield filters that traffic before it reaches your floating IPs, at no charge.
Custom profiles
The filter costs nothing. A custom profile keeps one set of settings for several floating IPs. Business includes 1, and Enterprise 5.
What DDoS Shield does
Every floating IP gets all of this, at no charge.
- Always on. Every IPv4 floating IP is filtered from the moment you order it, attached or not. There is nothing to turn on.
- Drops what attacks send. The filter drops the traffic attacks rely on, such as broken packet fragments and floods of replies from services that attackers misuse.
- Rate limits. Limits on how much one sender, and all senders together, can send keep a flood from filling the line to your server.
- Settings for each address. Change how strict the filter is, set your own limits, and add rules that allow, drop or limit traffic, at no charge.
- Block a source. Block an address or a range of addresses that keeps attacking you, at no charge.
- Attack events and emails. We email you when an attack starts and when it ends, and the Events tab lists each attack.
DDoS Shield filters IPv4 floating IPs. The shared address a Container Apps server starts with is not filtered.
How it works
- Get a floating IP. Order one, or use the address that came with your Cloud Compute instance.
- Traffic passes through the filter. DDoS Shield drops attack traffic on its way to the address, and lets the rest through.
- Tune it if you need to. Change the settings of one address, or apply a custom profile to several.
Floating IPs to protect
DDoS Shield filters the floating IPs on your account.
Guides for DDoS Shield
Our docs explain what the filter does and how to tune it.
- How DDoS Shield works: What the filter drops, and what it lets through.
- Game server protection: Keep a game server reachable during an attack.
- Order and use a custom profile: Share one set of settings across floating IPs.
- Block a traffic source: Stop an address or a range from reaching you.
- Read attack events: See when each attack started and ended.
- Get help during an attack: What to do when a service stays down.
Protect your server with a floating IP
Order a floating IP for your server, and DDoS Shield filters it from the start.
Frequently asked questions
What does DDoS Shield cost?
The filter costs nothing on every floating IP, and so do its settings for each address. A custom profile, which keeps one set of settings for several addresses, has a price of its own. Business includes 1 custom profile, and Enterprise 5.
Which addresses does DDoS Shield filter?
Every IPv4 floating IP on your account, attached or not, including the address a Cloud Compute instance comes with. The shared address a Container Apps server starts with is not filtered.
Do I need to turn it on?
The filter is on for every floating IP from the moment you order it, so there is nothing to turn on.
Will I know when an attack happens?
We email you when an attack on one of your addresses starts and when it ends. The Events tab lists each attack.
What if an attack still takes my service down?
Send us the details from the Under Attack page, and our team will reply.
