Cloud, hosting and IT for businesses

DDoS protection

DDoS attacks aim to overwhelm services with large volumes of traffic or requests. We filter malicious traffic within our network – at our FRA11 network and filtering site and locally at our server sites.

Incoming trafficConnections from the internet
Filters in the NUXOA networkFilter malicious traffic
Your servers and servicesForward legitimate traffic

Filtering in Frankfurt and at every site

Digital Realty FRA11 is our network and filtering site with multiple transit and IX connections. Fibre links connect it to maincubes FRA01, firstcolo FRA4 and Hetzner Online NBG1. All sites also have their own upstreams and local filters.

Transit providers & internet exchanges
Fibre connections
Schematic site connections. All four sites have their own upstreams and local filters.

Local filters

Traffic is also filtered locally at our server sites. Filtering is part of the network infrastructure at all four locations.

Protection for your services

Web services, email and other applications use different protocols and ports. We discuss your traffic and the protection you need.

Hosting and your own networks

Our protection is available with hosting and through IP Transit. For your own connection, we agree on the handoff, routing and protection tier.

DDoS protection with IP Transit

Our IP Transit plans offer Standard and Premium protection. See the plan comparison for monthly net prices by commit and port.

Standard

IP Transit with Standard DDoS protection. We discuss whether the scope of protection fits your services.

Premium

IP Transit with Premium DDoS protection. We review your application requirements and the appropriate scope of protection.

Compare IP Transit plans

FREQUENTLY ASKED QUESTIONS

DDoS protection questions

Filtering locations, connectivity and protection.

Where is traffic filtered?

FRA11 is our network and filtering site. maincubes FRA01, firstcolo FRA4 and Hetzner Online NBG1 also each have their own upstreams and local filters.

Explore our network
Can I connect my own network?

Yes, through IP Transit. Connections are possible via cross-connect, IX port or GRE. We agree on the handoff, your prefixes and the routing configuration together.

Explore IP Transit
Does DDoS protection replace a firewall?

No. DDoS protection filters attack traffic targeting the availability of your services. Secure server configuration, updates and access rules remain necessary.

What do you need for a quotation?

Tell us your services, protocols and ports, location and typical bandwidth. For your own network, include your ASN and IP prefixes.

Discuss protection for your services

Describe your applications and planned connection. We will work through filtering, routing and protection with you.

Enquire about DDoS protection