DOS and DDOS Protection in Webdock Datacenters

Last updated: September 16th 2024

Introduction

Webdock uses Voxility as our 3rd party provider for Volumetric DOS attacks (DDOS). In addition, Webdock monitors outgoing network activity and takes action through automated and manual means in order to prevent issues with our network. This page outlines how this works.

DDOS Protection with Voxility

Webdock Datacenters are protected through a leading 3rd party mitigation provider, Voxility. The way our DOS protection is that we have equipment on-site which monitors common DOS thresholds for a variety of traffic types. If any one of our volumetric thresholds are triggered we utilize BGP mechanisms to re-route the affected prefix (ip range) through Voxility. At that point, all internet traffic will flow through Voxility which will scrub any bad traffic and only pass through what they consider to be clean traffic.

Our protection is resilient

We use Out Of Band (OOB) connections to Voxility in order to ensure that if our own equipment is rapidly overwhelmed by some volumetric attack, we will still have a clear line of communication with Voxility in order to facilitate the BGP updates and rerouting required to mitigate the attack.

Outgoing Traffic Monitoring

In addition to incoming volumetric attack monitoring we have outgoing traffic monitoring. These monitors look for bad behavior from our customers such as network scanning and brute force attacks against machines on the internet. There is a variety of sensors here which either trigger automatic blocking and alerting, or alerts our NOC team to investigate and take action if need be.

Further traffic filtering and DOS mitigation

If your server or website is being subjected to low-level brute forcing or bot scanning or other types of attacks which do not trigger our automated high-volume DOS protection, you should look into the wide variety of options available to you, ranging from fail2ban, proper firewalling, WAF protection with Cloudflare, Bot protection with Botguard etc. - we have a number of articles in our documentation on these topics.

Related articles