Every Artaun service is protected by Premium DDoS filtering, permanently active with no add-on to buy. This page explains what it does and what stays on your side.
What the filtering stops
Filtering acts upstream, on the Equinix PA5 datacentre network, before traffic reaches your machine. It discards so-called volumetric attacks:
- DNS, NTP and memcached amplification;
- SYN, UDP and ICMP floods;
- malformed packets and obviously illegitimate traffic.
That's the kind of attack that tries to cut a game server or a site by saturating the network link. The filtering is sized to absorb it.
What stays on your side
Network filtering doesn't see everything. On your side remain:
- Application-layer attacks. A few thousand apparently legitimate requests aimed at your heaviest page. Set up caching and rate limiting.
- Poorly protected access. A weak password or an open admin port is not a DDoS problem.
- Vulnerable plugins, which stay vulnerable, protected or not.
Complementary good habits
- Don't publish your machine's IP address; for a website, put a service in front that hides the origin.
- Rate-limit at the application level on sensitive endpoints (forms, APIs).
- Cache everything that can be cached.
- Monitor: an attack spotted early is far easier to handle.
For a persistent attack or abnormal behaviour, open a ticket: the team can check the filtering applied to your service.