DDoS Guard website protection and acceleration
Web site protection and acceleration — a solution based on a partner product from DDoS-Guard.
The service allows you to block attacks on web applications and sites, and accelerate your application or site using CDN and load balancing.
The service is provided independently and does not require connection of the service network level security.
Cost
For connection you can choose one of the tariffs: Normal, Medium, Premium, Enterprise.
The main differences between the tariffs are:
- number of protected domains;
- number of servers for load balancing;
- number of rules to restrict access by IP addresses.
Filtering bandwidth and traffic volume, including legitimate traffic, are not limited. If the number of rules provided for in the tariff is not enough for you, you can purchase an additional package of rules, for this purpose file a ticket.
To see prices for DDoS Guard site protection and acceleration, please visit selectel.ru.
The following is used to pay for the service depending on the type of balance in the account single balance or basic balance. When ordering the service, the payment for the first period is deducted from the balance, further payments are deducted automatically on the first day of each month. The start of commercial use of the service is agreed individually.
Principle of operation
When ordering the service, you will be given a protected address to which you need to redirect your traffic. All traffic to the protected address is sent to DDoS Guard filtering nodes, where it is analyzed and cleaned, and then redirected to the protected server in Selectel infrastructure.
The protection works with HTTP and HTTPS requests only on ports 80 and 443, requests on other ports are not processed.
Connecting the service will not protect against DDoS attacks if the attackers know the target IP address. Before connecting, you should remove all references to the IP addresses you want to protect from external resources. If the addresses are already under attack, you should order a new subnet and configure it on your servers.
Connect the service
The minimum term of connection is 1-2 days. If the connection of protection is required urgently — file a ticket In it, specify the domain and IP address to be protected and email for registration in the DDoS Guard personal cabinet. After creating a ticket call us.
- If the IP address of the domain is already known to the attackers, order and configure a new subnet.
- Order DDoS Guard Web site protection and acceleration service.
- Specify a protected address in the A-record of the domain.
- Optional: further customize the protection.
Order and configure a new subnet
A new subnet is required if your servers are already under attack, i.e. the target IP address is already known to the attackers.
Order a subnet and configure the address from it on the server:
- for a dedicated server-- public dedicated subnet;
- of the cloud server-- public subnet.
Order a service
-
In control panel go to Network services → DDoS protection.
-
Click Order services.
-
In the line of the desired tariff DDoS Guard. Protection and acceleration of websites (Normal, Medium, Premium, Enterprise) press Pay.
-
Check the data.
-
Click Pay for services.
-
We'll create and ship ticket about ordering a service.
-
In this ticket, send us:
- a domain that needs to be put under protection;
- Domain IP address. You can specify multiple IP addresses if they point to the same domain and you want load balancing between them;
- email to register in the DDoS Guard personal cabinet.
-
We will process the order and send you login details for DDoS Guard to the email you specified in the ticket at step 7. Connection takes up to one business day.
Specify a secure IP address in the domain A record
- Go to DDoS Guard private office.
- Enter the login and password that you received by email when you service order.
- Open the service page Site protection and acceleration.
- Open the tab Domains.
- In the field IP protected copy the secure IP address.
- Go to your domain registrar's control panel where your domain records are stored.
- In the A-records, change the value to the secure IP address that you looked up in your personal account. If the A-record is not for web traffic, for example, for a mail or FTP server, do not change its value.
- If AAAA records are specified for the domain, delete them. DDoS Guard does not work with IPv6 addresses, they can be bypassed.
- If you want to protect subdomains, add an A-record with a protected IP address for each. You can protect an unlimited number of subdomains.
optional: further customize the protection
You can further customize the protection — for example, create flexible traffic filtering rules, enable geo-blocking and other options. The list of additional options and instructions on how to configure them are in the section Site protection and acceleration DDoS Guard documentation.
- Go to DDoS Guard private office.
- Enter the login and password that you received by email when you service order.
- Make the necessary settings.
Deactivate the service
- Make sure that you have reconfigured traffic reception to an address from your subnet. The protected address issued when the service was activated will be deactivated along with the protection.
- Go to your domain registrar's control panel where your domain records are stored.
- In the domain A record, change the value to an address from your subnet.
- In control panel go to Network services → DDoS protection.
- On the menu. select services Deactivate monthly payment.