Network layer
UDP reflection and amplification
Attackers spoof your address and bounce small requests off public servers that reply with much larger responses.
- SNMP
- DNS
- NTP
- Chargen
- SSDP
- QOTD
- NetBIOS
- Quake Network Protocol
- Portmapper
- RIPv1
DDoS protection in Israel
Up to 1.2 Tbps of mitigation against network, transport and application-layer attacks, starting in under a second. Included with every HQserv dedicated server.
- Capacity
- Up to 1.2 Tbps
- Layers
- L3, L4 and L7
- Reaction time
- Under 1 second
- Dedicated servers
- Included at no extra cost
- Location
- Our Israeli data centers
Attacks we defend against
Thirty-three attack types across three layers, filtered before they reach your server.
Transport layer
TCP and protocol floods
Floods of packets or half-open connections that exhaust your server's connection tables and bandwidth.
- FIN flood
- RST flood
- ACK flood
- SYN flood
- SYN-ACK flood
- TCP fragment flood
- UDP flood
- ICMP flood
- UDP fragment flood
- TCP empty connection
- TCP connection flood
- Sockstress
- TCP retransmission
- IP flood
Application layer
Web application attacks (WAF)
Requests that look like real visitors but are built to tie up your web server, TLS handshakes or application.
- HTTP slow header
- HTTP POST flood
- HTTP GET flood
- HTTP slow POST
- HTTPS flood
- SSL DoS/DDoS
- LOIC
- RUDY
- WordPress reflection amplification
Why protection has to sit upstream
A volumetric attack can fill a server's network port in seconds. Once the link is full, it doesn't matter how well the server itself is configured: real visitors can't get through.
That's why the filtering has to happen on the network, before traffic reaches your server. Attack traffic is dropped, and legitimate requests continue to your site or application.
Application-layer attacks are harder to spot because each request looks normal. Our web application firewall layer looks for the patterns behind HTTP floods and slow-request attacks.
Protection at a glance
- Mitigation capacity
- Up to 1.2 Tbps
- Network layer
- 10 reflection protocols
- Transport layer
- 14 flood types
- Application layer
- 9 web attack types
- Reaction time
- Under 1 second
Is DDoS protection included with dedicated servers?
Yes. Anti-DDoS protection is included with every HQserv dedicated server at no extra cost.
How much attack traffic can you absorb?
Our protection can mitigate attacks of up to 1.2 Tbps.
How quickly does mitigation start?
Mitigation starts in under one second once an attack is detected.
Which attacks do you protect against?
Network-layer reflection and amplification attacks over UDP, transport-layer floods such as SYN, ACK and connection floods, and application-layer attacks such as HTTP floods, slow-request attacks and SSL floods. The full list is above.
How do I get DDoS protection?
It comes with every dedicated server. For anything else, email [email protected] and tell us what you need to protect.
Protect your servers
Tell us what you run and which attacks you've seen, and we'll recommend the right protection.