DDoS protection

Multi-stage DDoS mitigation

Available across all our infrastructure services, our multi-stage scheme protects your production assets transparently and precisely, so legitimate users keep reaching you while attack traffic is filtered out.

~4–8 sAttack detection
5 stagesFrom botnet to clean traffic
L3 / L4Scrubbing via Cloudflare Magic Transit
In-houseDetection, edge filtering & SOC

How our filtering works

From attack to clean traffic, in five stages.

  1. 1
    Attack launchedA botnet floods a target on our network with malicious traffic. Botnet
  2. 2
    Detected in secondsOur inline flow analyzer inspects a port-mirrored copy of traffic, faster than NetFlow or IPFIX sampling. ~4–8 s detection
  3. 3
    Diverted & scrubbedA BGP change at our edge routes the attacked /24 through Cloudflare Magic Transit, which absorbs most Layer 3 and 4 attacks. Magic Transit · L3/L4
  4. 4
    Edge filteringFlowSpec rules pushed to our Juniper edge routers block any leakage, including carpet-bombing attacks spread across many IPs. Juniper FlowSpec
  5. 5
    Clean traffic deliveredLegitimate users reach your servers through client edge routing, with no change on your side. Your servers stay online

Implementation

Works with every serviceAdd it to VPS, cloud and dedicated servers, and to colocation in both of our datacenters.
Your own IP space or ASNMitigation is transparent and inline. Protect your own prefixes via BGP.
Fast setupAutomatic and immediate on RackNation IP space. Bringing your own IPs takes 48–96 hours.

Why our approach is different

We run detection and edge filtering in-house instead of relying entirely on a third party, so our SOC can respond directly to complex attacks.

  • Direct response from our SOCComplex or changing attacks are handled by our own engineers, not a ticket queue abroad.
  • Transparent for your usersInline mitigation with no changes on your servers and no visible impact on legitimate traffic.
  • Protection in both datacentersCR1 San Pedro and CR2 Curridabat, backed by our team since 2012.

Under attack right now? Tick the urgent box in the form so your request is flagged for immediate attention.

Get a DDoS protection quote

Tell us what you need to protect and our network team will get back to you.

Thank you! Your request is on its way. Our network team will review it and get back to you shortly. If you're under attack, also reach us via Live Chat for the fastest response.

Prefer to talk? Use Live Chat or write to sales@racknation.cr