Basic DDoS Mitigation

Basic DDoS Mitigation is offered as an additional service for the following Selectel services:

The service is provided in conjunction with DDoSGuard.

*For VPC clients, the service is rendered only for virtual servers with real public addresses (i.e. the service does not apply to public IPs).

The DDoS mitigation system works as follows:

  1. An IP address or block of IP addresses gets allocated.
  2. A particular amount of bandwidth is provided according to the selected option.
  3. Selectel announces its AS on its partner’s filters.
  4. The partner receives and filters all traffic.
  5. Only legitimate traffic is forwarded on.
  6. Access to our DDoS portal is provided for viewing statistics.

Implementation

One secure IP address is included in the basic fee. Additional IP addresses can be ordered in the control panel.

Bandwidth is allocated to that IP address and the speed applies only to clean Internet traffic forwarded to the web service.

All incoming packets are subject to filtering. Each protocol has its own cascade of filters, where subsequent filters are enabled when thresholds from previous filters are exceeded.

Packets are checked in stages:

  • at the L3-4 OSI levels and then the HTTP/HTTPS request itself for RFC compliance, if there are headers, the header contents, etc.;
  • based on information collected for the protected domain: a behavioral model is created, which activity is compared against;
  • additional checks: IP reputation, stream status, etc.

Internet traffic to the secure IP address passes through our partner’s network, where traffic is analyzed and cleaned via the DDoSGuard infrastructure with globally located filtration nodes: the Netherlands, Germany, Russia, Kazakhstan, China, and the USA. Node proximity to the traffic source reduces latency for the end-user. Illegitimate traffic is dumped on our partner’s network, and only clean traffic reaches the IP address you assigned.

Pricing

Service Secure bandwidth/number of sites Cost in rubles (inc. VAT)
Basic DDoS Mitigation: 10 Mbps 10 2,500
Basic DDoS Mitigation: 20 Mbps 20 4,500
Basic DDoS Mitigation: 50 Mbps 50 9,500
Basic DDoS Mitigation: 100 Mbps 100 17,500
Additional IP Address 150
Basic Application Mitigation per site (+ DDoS) 1,500

Enabling the Service

To order:

  1. Open the Network Services subsection of the Control panel.
  2. Select the desired service and click Pay.
  3. Enter the payment period and click Pay for service.

Login information for viewing service statistics will be sent to the e-mail address entered during registration.

Please note that access information is generated on business days within an hour of receiving the request.

Disabling the Service

To disable the service, disable auto-renewal by clicking Disable monthly payments in the drop down menu.

Please note that when canceling a service which has been paid for in advance, money shall only be refunded for fully unused months. To be issued a refund, please submit the appropriate request.