Our Anti DDoS is based on vendor based self developed software.
We differentiate very precisely between attack and clean traffic. Because our solution runs inline, we can detect an attack almost immediately. A change of the routing is not necessary. Active mitigation is also not visible.
The term inline means that traffic is constantly flowing through DDoS mitigation, but is not actively being mitigated. Malicious traffic is only blocked in the event of an attack. An inline solution also has the advantage that connections that were established before a DDoS attack was launched are not closed.
We are actively working to improve detection of new attack vectors. Other providers work with
Geo-restrictions and block individual countries or continents. We are aware that this is not a DDoS mitigation.
Together with known countermeasures such as syn cookies, TCP and UDP authentication, we generate an attack pattern if possible, that clearly identifies an attack and the harmful traffic can be blocked according to this pattern. Thus, the filtering is even more precise.
As one of the few providers, we already offer DDoS protection for the IP Protocol Version 6 (IPv6), which works exactly the same as for IPv4. This means you are protected on all layers.