DDoS Mitigation: How Protection Works and How to Enable It

Distributed denial-of-service (DDoS) attacks can disrupt your business operations by overwhelming your internet circuit with malicious traffic. Our network includes upstream DDoS mitigation capabilities available as an add-on service for business customers.

How the Mitigation Service Works

Traffic destined for your IP block is continuously analyzed by our scrubbing infrastructure at the network edge. When an attack signature is detected, traffic is automatically diverted to a scrubbing center where malicious packets are filtered and clean traffic is forwarded to your circuit. Detection-to-mitigation time is typically under 5 minutes for volumetric attacks.

Protection Tiers

Always-On Detection: Continuous traffic baselining and automatic mitigation for volumetric attacks above the activation threshold. Included with all dedicated access tiers.
Enhanced Mitigation: Lower activation thresholds, application-layer (L7) attack protection, and priority scrubbing capacity. Available as a paid add-on; contact your account manager for pricing.
On-Demand Mitigation: Manually activate scrubbing via the portal or by calling the NOC during an active attack. Available to all business customers regardless of tier.

Activating On-Demand Mitigation

Log in to the portal and go to Network > DDoS Protection.
Select the target IP prefix and click Activate Mitigation.
The change propagates within 5–10 minutes. You will see a status indicator change to Scrubbing Active.

To discuss your current protection posture or upgrade your DDoS mitigation service, contact security@example.com.