DDoS Protection Overview

Last Updated on 2019-10-31


LayerStack now includes up to 20Gbps DDoS Attack Protection, which is a value-added service used to protect cloud servers hosted in Hong Kong, against volumetric DDoS attacks in our Hong Kong and international networks.

A distributed denial-of-service (DDoS) attack is a malicious attempt to disrupt normal traffic of a targeted server or online services by overwhelming it with traffic from multiple sources. The goal is to render the website or service inoperable.

DDoS Attack Protection automatically diverts DDoS attack traffic to the scrubbing center at Hong Kong for mitigation, which means the clean traffic can still pass through to your server, in order to minimize the effects of a service outage.

No configuration or knowledge is needed. DDoS Attack Protection will be activated automatically during attacks, you just simply click the button and it works.

Which Layers will be Covered by DDoS Attack Protection?

DDoS Attack Protection defends against the following types of DDoS attacks for you.

  • Layer 3, the Network layer. Attacks are known as Smurf Attacks, ICMP Floods, and IP/ICMP Fragmentation.
  • Layer 4, the Transport layer. Attacks include SYN Floods, UDP Floods, and TCP Connection Exhaustion.
  • Layer 7, the Application layer. Mainly, HTTP-encrypted attacks.

Regional Availability

DDoS Attack Protection is currently available in Hong Kong region only.

Role Permissions

Role Permissions
Owner Purchase DDoS Attack Protection, Terminate DDoS Attack Protection service
Member Not Available
Billing Member Not Available
Billing Admin Not Available


  • Traffic mitigation based on the source IP address location. Not applicable to China IP address.

Quick Start Guide

Activate DDoS Attack Protection

*The following steps are applicable only for already subscribed existing Cloud Servers. For new orders of Cloud Servers, the DDoS attack protection service will be activated automatically.

  1. Log in to LayerPanel, go to the Services section and click Cloud Servers button, and then click on the Cloud Servers you want to activate DDoS attack protection.

  2. Select the Activate DDoS Attack Protection button, and select the Confirm Purchase after you have checked the service fee.

  3. Once the payment is settled, click on Enable DDoS Attack Protection and start to configure your new IP address used for DDoS Attack Protection by referring following tutorial.

Related Tutorial