AntiDDoS – Our DDoS Protection solutions

What is AntiDDoS Protection?

The chances of being targeted by a DDoS attack are great and attempts are numerous.

A DDoS attack aims to render a server, service or an infrastructure unavailable by overloading the server’s bandwidth or monopolising its resources until the point of depletion.

During a DDoS attack, a multitude of requests are sent simultaneously from multiple points across the internet. The intensity of this “crossfire” renders the service unstable, or even worse, unavailable.

All our services include AntiDDoS Protection, and your business will be protected from attacks 24/7 guaranteed.

What we offer to protect your services?

To protect your servers and services from attacks, we use the OVH Network, wich offers a mitigation solution based their own VAC technology – an exclusive combination of techniques to:

  • Analyse all packets at high speed in real time
  • Vacuum your server’s incoming traffic
  • Mitigate i.e. singling out all the illegitimate IP packets, while allowing legitimate ones to pass through

Targets and types of attacks:

There are three ways of making your site, server or infrastructure unavailable:

  • Bandwidth: this type of attack consists of saturating the server’s network capacity, which renders it unreachable.
  • Resources: this type of attack consists of depleting the machine’s system resources, which prevents it from responding to legitimate requests.
  • Exploitation of software fault: also called “exploit“, this type of attack targets a particular software fault either to make the machine unavailable or to take control of it.

What kind of DDoS attacks we cover ?

  • ICMP Echo Request Flood – Also called Ping Flood, mass sending of packets implicating the response of the victim, which has the same content as the original packet.
  • IP Packet Fragment Attack – Sending of IP packets that voluntarily reference other packets that will never be sent, which saturates the victims memory.
  • SMURF – ICMP broadcast attack usurping the source address to redirect multiple responses to the victim.
  • IGMP Flood – Mass sending of IGMP packets (multi-cast management protocol).
  • Ping of Death – Sending of ICMP packets which exploit an implementation bug in certain operating systems.
  • TCP SYN Flood – Mass sending of TCP connections requests.
  • TCP Spoofed SYN Flood – Mass sending of TCP connections requests to usurp the source address.
  • TCP SYN ACK Reflection Flood – Mass sending of TCP connections requests to a large number of machines, usurping the victim’s source address.
  • TCP ACK Flood – Mass sending of TCP segment delivery receipts.
  • TCP Fragmented Attack – Sending of TCP segments that voluntarily reference other segments that will never be sent, which saturates the victim’s memory.
  • UDP Flood – Mass sending of UDP packets (not requiring a previously-established connection).
  • UDP Fragment Flood – Sending of UDP datagrams that voluntarily reference other datagrams that will never be sent, which saturates the victim’s memory.
  • Distributed DNS Amplification Attack – Mass sending of DNS requests usurping the source address of the victim, to a large number of legitimate servers.
  • DNS Flood – Attack of a DNS server by mass sending of requests.
  • HTTP(S) GET/POST Flood – Attack of a web server by mass sending of requests.
  • DDoS DNS – Attack of a DNS server by mass sending of requests from a large set of machines which are under the attacker’s control.

What is your maximum network capacity ?

As said previously, we use the OVH Network witch has over 7.3 Tbps across the globe.

To guarantee high speed, high quality bandwidth and low latency time, OVH has chosen to deploy its own global fibre optic network. The network is managed using DWDM devices and is currently being migrated to 100G coherent technology, offering you to a total capacity of 7.3 Tbps to the worldwide web.