DDoS Mitigation

Absorb anything they throw at you.

Basic mitigation, via ACL-based filtering, is included free on every plan, up to your port's full capacity. Advanced mitigation, powered by RETN with Arbor and NexusGuard, scales past 6Tbit/s and 1 billion packets per second.

6+ Tbit/sScrubbing capacity

1+ BppsPacket capacity

100+ / weekAttacks mitigated

<15 secTime to mitigate

See it in action

A 1 Tbit/s attack, gone in seconds.

This is an example attack profile: a DNS amplification flood peaking at 1 Tbit/s and 600 million packets per second, detected and scrubbed automatically before it ever reached the origin.

mitigation.log

14:32:07.221 UDP 203.0.113.44:41982  → 198.51.100.7:53     1420B  DROP  dns-amplification
14:32:07.224 UDP 203.0.113.91:33012  → 198.51.100.7:53     1420B  DROP  dns-amplification
14:32:07.226 UDP 203.0.113.18:51230  → 198.51.100.7:123     468B  DROP  ntp-monlist
14:32:07.229 UDP 192.0.2.140:19302   → 198.51.100.7:19302   512B  DROP  cldap-amplification
14:32:07.231 UDP 203.0.113.77:389    → 198.51.100.7:389    1024B  DROP  ldap-amplification
14:32:07.234 UDP 192.0.2.203:11211   → 198.51.100.7:11211  8900B  DROP  memcached-amplification
14:32:07.236 TCP 192.0.2.61:443      → 198.51.100.7:443      60B  DROP  syn-flood
14:32:07.239 UDP 203.0.113.129:19302 → 198.51.100.7:19302   512B  DROP  cldap-amplification
mitigation active: 604,812,000 pps dropped, 0 pps forwarded to origin

IP addresses shown are documentation examples (RFC 5737), not real traffic.

Two tiers

Included by default. Scaled when you need it.

Basic mitigation

Included free on every transit and managed connectivity plan, automatically, via ACL-based filtering up to your port's full capacity. No setup fee, no separate contract, always on from day one.

Advanced mitigation

Powered by RETN with Arbor and NexusGuard, scaling past 6Tbit/s and 1 billion packets per second globally. Available on request for 2x your base transit rate.

How it works

Detect, divert, scrub, return.

Detect

Traffic is analyzed continuously against a baseline, so anomalies are flagged within seconds.

Divert

Once confirmed, attack traffic is automatically rerouted through the scrubbing network.

Scrub

Amplification floods, forged packets and other malicious traffic are filtered out at wire speed.

Return

Only clean, legitimate traffic is delivered back to your network, usually within seconds.

Pricing examples

One rule: 2x your transit rate.

Basic mitigation, via ACL-based filtering up to your port's full capacity, is already included on every plan. Add advanced mitigation to any tier for double your base rate, billed alongside it.

Commitment	Regular	With advanced mitigation
100 Mbit/s (95th)	€12.50 / month	€25 / month
250 Mbit/s (95th)	€25 / month	€50 / month
500 Mbit/s (95th)	€45 / month	€90 / month
1 Gbit/s (95th)	€79 / month	€158 / month
2 Gbit/s (95th)	€149 / month	€298 / month
4 Gbit/s (95th)	€249 / month	€498 / month
10 Gbit/s	€399 / month	€798 / month
>25 Gbit/s	Contact for pricing	Contact for pricing

Prices exclude VAT. Choose a dedicated flat-rate commitment instead of 95th-percentile billing, and the mitigation service fee drops by 15%.

Why it holds up

Enterprise-grade, without the enterprise sales process.

Proven track record

Built on RETN's global scrubbing network, protecting networks against attacks measured in terabits per second.

Always-on

Detection and mitigation are automatic. No manual intervention, no waiting on a support ticket during an attack.

Full dual-stack

IPv4 and IPv6 traffic are both covered, on every plan, at every capacity tier.

No lock-in

Add or remove advanced mitigation whenever your traffic profile changes. No long contracts required.