Selection: 12 services for protection against DDoS attacks
According to statistics , about 33% of companies fall under DDoS attacks. It is impossible to predict the attack, and some of them can be really powerful and reach 300-500 Gb / s. In order to protect yourself from DDoS attacks, you can use the services of specialized services. Not all site owners know where to run if they get under attack - so I decided to put together several options in one topic.
Note: in preparation for the post, English-language materials and publications on Habré were used
Cloudflare
One of the most famous security services. When using the FREE and PRO tariffs, you can count on basic protection against DDoS attacks. For more reliable protection against attacks of levels 3, 4 and 7, you need to connect a business or corporate account.
In Cloudflare, a fixed payment, that is, regardless of how many and what levels of attacks will be, the client pays the same amount. Among the clients of this service are such large companies as Nasdaq, DigitalOcean, Cisco, Salesforce and Udacity.
Cloudflare network is represented in 102 data centers with a bandwidth of more than 10 Tbps and is able to eliminate any attacks, as well as reflect DNS and Smurf attacks . The service also has a 24-hour emergency service, where you can contact during the attack.
Incapsula
This service offers comprehensive protection against various types of attacks. The service can work continuously or on demand and detect any attacks. The Incapsula network consists of 32 data centers with a throughput of 3 Tbps. Incapsula has a trial version for business with SSL protocol, CDN and WAF, which protects against DDoS attacks.
In case the attack has already been completed and the score is going on for minutes, you can use the Under Attack emergency service .
Akamai
This service is one of the leaders in security and CDN. According to Akamai management, the service can cope with an attack of 1.3 terabits per second.
This service is built on Akamai's intelligent platform and provides support around the clock. You can protect sites from all known attacks, including encrypted traffic. Akamai has 1300 network addresses in more than 100 countries.
Qrator
One of the most famous Russian resources for the fight against DDoS, has a blog on Habré . The peculiarity of the system’s work is “transparency” for legitimate users - they are detected using smart filtering algorithms without forcing you to enter captcha or otherwise confirm your “legitimacy”.
In addition, even if it is necessary to repel an attack at the application level (level 7 of the OSI model), fine tuning of the product is not required - when an attack is detected, the system will automatically switch to the desired mode.
To enable Qrator protection, you need to change the A-record of the site. The disadvantages include a rather high cost of using the product, but the company provides SLA (if the level of service is not provided, it is not necessary to pay) and a free trial period of seven days.
AWS Shield Advanced
Service Shield is designed to protect applications running on the AWS platform. It is free, however, for advanced protection, you should switch to the Shield Advanced tariff. The advanced version includes checking network flow and monitoring application-level traffic, protecting against more attacks, blocking unwanted traffic, analyzing after an attack, and working around the clock.
All of these DDoS protection services are designed for bloggers, e-commerce, small and medium-sized businesses. For a business of a larger scale, there are other services with a higher level of protection and greater functionality. Here are some of them: ARBOR, Neustar, Rackspace, Akamai, F5 Silverline and Radware Networks.
King Servers Anti DDoS
One more Russian project with the blog on Habré . Since King Servers is a hosting provider, the company's protective tool is “sharpened” for the needs of hosting users. Protection is provided in two versions - when renting equipment in a certain data center, it immediately falls into the filtration zone (secure hosting). If the site in this zone for some reason does not fit, there remains the option of remote protection, in which it is not necessary to place equipment in the company's data center.
The company gives a security guarantee from SYN Flood, UDP / ICMP Flood, HTTP / HTTPS attacks, filtering dirty traffic up to 1 TB / s - pure traffic is allocated and sent to the user's site. Users do not need to do the settings themselves, this task is taken care of by the round-the-clock support service, which also works out requests for customizing the service.
BeeThink Anti-DDoS Guardian
This tool protects Windows servers from most DoS and DDoS attacks: SYN, IP flood, TCP flood, UDP flood, ICMP flood, HTTP-DDoS, level 7 attacks and many others.
BeeThink is compatible with Windows 10, Windows 8, Windows 7, Windows 2016, Windows 2012, Windows 2008, Windows 2003, Windows 2000, Windows XP and Vista.
In addition to protection against DDoS attacks, the service real-time monitors network operations, supports various formats of IP addresses, supports black and white lists, searches for remote IP addresses and information about their owners. Base rate is $ 99.95.
Sucuri
This service provides protection for any sites: WordPress, Joomla, Drupal, Magento, Microsoft.Net and others.
Sucuri provides an antivirus and firewall for sites that include DDoS protection. The service also detects and removes malicious programs, improves website performance, protects against brute force attacks and protects against bots. The minimum cost of a monthly tariff is $ 19.88.
Cloudbric
This tool works with sites on all platforms. It is very convenient to use, has an intuitive interface, and its settings take three minutes - you just need to change the DNS settings. Information about the protection level is displayed on the operation panel, which allows you to quickly identify and eliminate the threat.
Developers guarantee protection against all cyberattacks. Among the customers of the service are such large companies as Samsung, ING and eBay.
The cost of use depends on the volume of traffic, so for 10 GB you have to pay $ 29, and for 100 GB $ 149. If the volume of traffic does not exceed 4 GB, the service can be used for free.
Alibaba Anti-DDoS
The service of the Chinese giant of Internet commerce will help to cope with attacks up to 2 Tbps and supports all protocols: TCP, UDP, HTTP, HTTPS.
The service can be used not only to protect sites located on Alibaba hosting, but also hosted on AWS, Azure, Google Cloud and others.
Anti-DDos Pro also works around the clock and in case of problems, you can contact the security experts support team.
Stormwall pro
This tool protects against any levels of DDoS attacks and supports sites on the Drupal, Joomla, WordPress, Bitrix, Magento, PrestaShop and other CMS platforms.
StormWall data centers are located in the USA, Russia and Europe and operate with a minimum delay. Setting up the system will take only a few minutes, and in case of difficulties, company managers can do this. Any technical problem that may arise during the work will be resolved in a short time - technical support will have to wait no longer than 15 minutes.
The cost of using the service depends on the number of visitors to the site. So, for $ 69 you can protect the site with 5,000 visitors per month, and for $ 300 you can buy unlimited.
Myra
Myra DDoS service is fully automated and designed to protect the site, DNS servers and web applications. The system is suitable for all types of CMS and online stores.
Myra is headquartered in Germany, so all data is processed in accordance with the privacy law of this country.
I suggest collecting in the comments a more complete list of useful tools for protecting against DDoS. What services do you know?