General information

Last update: March 04 2024

General information

A DDoS attack is a distributed denial of service attack. Sends a large number of requests to the attacked service in order to degrade its performance or disable it completely.

All Selectel products are under Selectel DDoS protection by default. Protection is provided at the network and transport (L3, L4) layers. Incoming traffic is analyzed, flows of unwanted traffic from the external network are blocked.

To further protect the service, you can select other types of protection (DDoS Guard L3-L4 protection, analyzing incoming and outgoing traffic, and L7 protection). Protection type is determined by the DDoS attacks against which you want to protect the service.

All presented DDoS protection services can be activated only for IP addresses that are used in Selectel infrastructure.

Types of protection⁠

	Protection at the network and transport layer (L3, L4)		Protection of at level site, application (L7)	Protection of web application from targeted attacks (L7)
Object of attack	Bandwidth exhaustion, disruption of network infrastructure	Exploitation of weaknesses in network protocols, on which the Internet is based (TCP/IP stack, which is responsible for transmission and routing of packets on the Internet)	Attacking sites and applications (detecting illegitimate requests to applications)	Targeted attacks on web applications (extracting information from database, disk, malicious code injection)
Reflection method	Analysis of L3, L4 traffic headers, detection of problems on network equipment	Analysis of TCP/IP clients' behavior (applications interacting with the server) and data packets transmitted over the network, filtering based on behavioral analysis	Analysis and cleaning of traffic at the level of application protocols HTTP/HTTPS, DNS, etc., etc., application-specific	Traffic analysis and filtering using ML algorithms, as well as signature, behavioral and reputation analysis methods

Find protection⁠

	Selectel protection (enabled by default)	DDoS Guard L3-L4 protection	DDoS Guard site protection and acceleration	Qrator protection	Qrator WAF
Network level protection (L3, L4)	✓ (incoming traffic only)	✓	✓	✓	✗
Protection at the site, application level (L7)	✗	✗	✓	✓	✗
Protection of web application from targeted attacks (L7)	✗	✗	✗	✗	✓