How DDoS Protection Service Works

DDoS Protection for Web Applications

The solution protects websites and applications from L3-L7 DDoS attacks
without requiring changes to hosting or IP addresses.

Internet

HTTP(S) Requests

Malicious Traffic

StormWall Cloud

Filtered Traffic

Client’s Website

BGP-Based Protection

Customer prefixes are announced via BGP to the StormWall cloud, enabling protection without IP changes

Keep your SSL certificate
private while staying
protected

You receive a protected IP in the StormWall Cloud.

You point your domain’s DNS record to this IP.

Traffic is inspected, filtered, and optimized.

Only clean traffic reaches your infrastructure, with real client IPs preserved in HTTP headers.

BGP-Based DDoS Protection for Networks

The solution provides effective protection against L3-L5 OSI DDoS attacks, ensuring
stable network performance and preventing service disruptions caused by DDoS attacks.

Internet

Subnet without Protection

Outgoing Traffic

Incoming Traffic

Attack Traffic

Other ISP

StormWall Cloud

BGP*

Client’s Router

*Over IPIP/GRE Tunel or Direct Connection

Available in both asymmetric and symmetric modes.

We establish a connection between your service and StormWall.

We set up a BGP session and announce the required IP prefixes.

We receive your routes and filter all traffic.

We route clean traffic back to your infrastructure.

DDoS Protection for TCP/UDP Services

The solution protects TCP/UDP services from L3-L5 OSI DDoS attacks by filtering
all types of malicious traffic and ensuring stable service performance.

Internet

Legitimate
TCP/UDP Traffic

Malicious Traffic

StormWall Cloud

IPIP/GRE Tunnel or Proxy

Client's Server
with StormWall IP

We connect you to StormWall via tunnel (IPIP/GRE) or proxy.

We receive all incoming traffic on protected StormWall IPs.

We filter malicious requests and block attacks.

We route clean traffic back to your infrastructure.

Find the Right Solution
for Your Needs

You run websites
or web applications