DDoS Protection


Malicious online attacks are on the rise. Everyone is a potential target. Can you afford hosting downtime and lost productivity due to DDoS attacks? HostUS provides FREE DDoS Protection in selected datacenter locations to all customers as a feature of our OpenVZ and KVM VPS hosting.

DDoS Insurance

DDoS Protection is Insurance

HostUS now includes up to 10Gbps of DDoS Protection with every VPS hosting service. Our DDoS Protection is included for FREE on a best-effort basis.

Insuring your hosting against downtime due to malicious attacks has never been easier or more affordable.

Why you need protection from DDoS Attacks

Servers can get overwhelmed by DDoS attacks and similar malicious traffic, and they may even crash.

If you are not protected, your hosting providers has to take steps to protect infrastructure and other customers from your malicious traffic. They normally end up sending your hosting and packets to /dev/null never to be seen again, and that puts your services offline. This is often known as nullrouting or blackholing.

You have just been DDoS victimized by some random force on the internet, now your provider added insult to injury with an instant and often long lasting null. This is the daily experience at hosting companies without DDoS Protection.

DDoS Insurance

How do DDoS Attacks work?

DDoS Insurance

DDoS attacks are a simple concept. Imagine a store with lots of shoppers. Now imagine all the shoppers arriving at that store at the very same time. Now multiply that by millions.

DDoS attackers aren't interested shoppers visiting your site or accessing your IP address. They are launching piles of fraudulent and malicious requests with the sole intent of slowing or crashing your hosting.

Their ultimate goal: Getting a null route applied to your IP, effectively putting you offline for an extended period of time. Some providers may suspend or cancel your hosting services creating more stress, costs and uncertainty for you.

No configuration or knowledge needed

Hosting can be complex and intimidating. Technology works best when it is made simple and any barriers are eliminated.

DDoS Protection from HostUS is a transparent layer of protection that just works. No configuration or intervention from our customers is necessary. DDoS Mitigation (Filtering) is activated on-demand during attacks, which means you can enjoy the faster unfiltered bandwidth when there are no attacks.

DDoS Insurance

Proven Hardware-Based Filtering Solutions

HostUS uses proven hardware-based filtering to solve the DDoS attack problem and to mitigate other forms of packet abuse. Our DDoS Protection runs on four distinct filtering platforms. They are powered by Radware DefensePro, Arbor TMS, and NSFOCUS. We also use a custom protection platform in some locations.

Platform Maximum Capacity* Location(s) [Learn More]
Arbor TMS On-Demand 25Gbps LON01
NSFOCUS 25Gbps DAL02, LAX02
Proprietary 20Gbps WDC01
Arbor / Cisco ~1Gbps HKG01, SYD01, SGP01 (Coming Soon)
Radware DefensePro 10Gbps DAL01 (Coming Soon)

Filtering and DDoS Protection Capabilities

Our free DDoS protection service utilize onsite or local filtering solutions for the best performance. The service is capable of filtering most layer 3 / 4 volumetric attacks, with some examples listed below. We recommend using a reverse proxy such as CloudFlare for protection against layer 7 or application-level attacks.

  • Malformed Packet Floods
  • TCP Floods
  • UDP Floods
  • UDP reflection attacks
  • SYN Floods
  • ICMP Floods
  • IP Fragment Floods
  • Smurf attacks
  • SSDP Floods
  • DNS Floods
  • Chargen Attacks
  • NTP Attacks
* Maximum Capacity indicates the amount of protection available in each location; it may not accurately reflect the amount of protection available to each service. DDoS protection is a complimentary service with no service level guarantees.

Need something custom?

Contact us if you have a specific need or question about our filtering capabilities