Secure Bandwidth and DDOS Shield

Your first and only line of defense against a large-scale DDoS attack. Our Secure Bandwidth and DDOS Shield service responds fast and furious against intruders. You won't find better protection anywhere else - that's a promise.

Our bullet-proof Secure Bandwidth and DDOS Shield relentlessly protects your mission-critical websites by taking advantage of our high capacity SuperNetwork™ backbone and geographic diversity. We're able to subdue a DDoS attack quickly by dispersing the dirty traffic away from your servers. Our service combines in-house network expertise and specialized tools with world-class security technology from Juniper® to deliver a high performance carrier-class firewall and DDoS mitigation system in many of our city centers. Each location is fully capable of handling multi-Gigabits of traffic protection.

Highlights

Fastest mitigation of DDoS attacks amongst SMB web hosting providers

Mixture of our specialized software and best-in-breed technology from Juniper®

Multi-Gigabit line-speed traffic filtering

Communication and route exchanges via dynamic protocols allow for seamless distribution of traffic between multiple routers

Fully managed and maintained internally by our expert security team

How DDoS Works

Our vast network presence across multiple major city centers means that incoming DDoS attacks arrive through different upstreams and peering connections. In each city, secure bandwidth customers are placed behind a firewall and are able to set up their own policies and rules for their incoming traffic. This setup is similar to what many other ISPs do. During regular traffic levels or a low-scale DDoS attack, there is no real difference in protection between secure bandwidth and a typical ISP-level shared firewall. However, when a sustained DDoS attack is experienced, alert our Network Operations Center (NOC), and you will be given the option to engage our DDoS Shield. Once engaged, we take the attacked IPs and re-distribute them to the node closest to the ingress point of the attack. This distributes the attack so that it is now spread out over the capacity of the entire network instead of targeted towards a single location. Once the traffic hits the node, it is filtered for dirty traffic which is then dropped. The legitimate 'scrubbed' traffic safely carries on through a secure tunnel to the location where your servers reside. As a result, your websites continue to function normally, even when faced with the most dangerous DDoS threat out there.