Anti-Distributed Denial-of-Service (Anti-DDoS)

Many publicly accessible corporate websites are subject to hacker attacks. A common scenario is when a website is overloaded by a flood of requests from different IP addresses within a short period of time. This is what is known as a distributed denial-of-service attack (DDoS). The sheer amount of requests brings the website to its knees, rendering the service unavailable. For owners, this is a highly unpleasant scenario.

Website hosts can protect themselves from these kind of attacks with a software-based security feature: Anti-DDoS automatically detects DDoS attacks by checking incoming requests for malicious intent. In the event of an attack, it redirects spurious requests and ensures that the service remains online without sapping any additonal resources.

Anti-DDoS is a free add-on component that complements the range of hardware security functions in Deutsche Telekom's data centers. The Open Telekom Cloud's comprehensive and platform-wide runtime monitoring ensures that DDoS attacks are automatically detected and defended against.

Using the Anti-DDoS service, users can define threshold values which can be used e.g. to specifically defend against challenge collapsar (CC) attacks. The Open Telekom Cloud provides reports with detailed information on the attacks, so that users have access to a comprehensive overview at any time.

Your compatible resources are automatically armed with Anti-DDoS and therefore protected against the most common network and transport layer DDoS attacks.

The Anti-DDoS service protects against attacks on the third (network), fourth (transport) and seventh (application) layer.

Third and fourth layer DDoS attacks are a type of volumetric DDoS attack and rely on extremely high volumes of data (floods) to slow down web server performance, consume bandwidth, and ultimately hinder access for legitimate users. Including attacks such as synchronized (SYN) floods, these are the most common attack vectors used to overload the capacity of application servers, but are able to be detected and redirected via signatures.

Seventh layer DDoS attacks aim to overload specific elements of an application server's infrastructure. These attacks are particularly complex, inconspicuous, and difficult to detect as they are similar in appearance to legitimate website traffic. With attacks like HTTP GET flood, attackers try to send a huge flood of requests to the server in order to overload its resources.

Server protection from attacks such as SYN floods, SYN-ACK floods, FIN floods, RST floods, UDP floods, ICMP floods, and state-exhaustion attacks.

Server protection from attacks such as HTTP GET/POST floods, CC attacks, or HTTP slow header/POST und HTTPS floods.

Check traffic status and attack trends at any time from the management console.

The included IP reputation service supports millions of IP addresses and monitors both inbound and outbound traffic. This allows requests from botnets to be quickly and easily detected and filtered. The Anti-DDoS service ensures that only unwanted traffic is filtered out for both UDP and TCP cleaning.

Price calculator
Pricing Models: Security
Service description incl. price list (PDF)

User guide and API description

Automating with APIs