Just a few of the thousands of organizations that trust us with their sites:

Incapsula's dns DDoS Protection Services

Incapsula DDoS Protection

  • Available as an always-on or on-demand service.
  • Powerful network of globally positioned data centers.
  • Application (Layer 7) and Network (Layers 3, 4) DDoS protection.
  • Blanket DDoS protection for all types of services (UDP/TCP, SMTP, FTP, SSH, VoIP, etc).
  • Backed by a 24x7 security team and a 99.999% uptime SLA.

Our Approach

Incapsula’s multi-faceted approach to protection leverages a suite of complementary anti-DDoS solutions.

Together these offer blanket protection from all DDoS threats.


Incapsula Website Protection

Incapsula’s Website DDoS Protection is an always-on, cloud-based DDoS mitigation service which automatically detects and mitigates all types of DDoS attacks launched at websites and web applications.

This service is built on-top of Incapsula’s content delivery network (CDN) and leverages its web application firewall (WAF) technology. As a result, in addition to protecting your website against DDoS threats, the service also defends against exploitation of application vulnerabilities and accelerates content delivery. Read More »


Incapsula Infrastructure Protection

Infrastructure protection is available as an on-demand service for C class networks using GRE tunneling and Border Gateway Protocol (BGP) routing, or as an always-on service for C-class networks or single IP addresses. Incapsula Infrastructure Protection safeguards critical network infrastructure from volumetric and protocol-based DDoS attacks, such as UDP, SMTP or SYN Floods, executed directly or via DNS/NTP amplification.

Infrastructure Protection can be used to protect entire subnets, secure all network elements, and inspect all incoming communication. Read More »


Incapsula Name Server Protection

The Name Server Protection service secures client DNS servers from DNS-targeted DDoS attacks. Deployed as an always-on solution, the service automatically identifies and blocks malicious queries that target DNS servers, while also accelerating DNS responses. Read More »


Comprehensive DDoS Protection

Incapsula protects applications and infrastructure against all types of DDoS threats. These include network-based attacks (e.g., Slowloris, ICMP or TCP & UDP floods) as well as application layer attacks (e.g., GET flood) that attempt to overwhelm server resources. Supporting Unicast and Anycast technologies, the service leverages a many-to-many defense methodology, automatically detecting and mitigating advanced DDoS attacks that exploit application and Web server vulnerabilities, hit-and-run DDoS events, and large botnets.

Comprehensive DDoS Protection

High-Capacity Network

As the size of network DDoS attacks, such as SYN flood and DNS amplifications, continues to grow, organizations require robust network capacity to mitigate any threat that might come their way. Incapsula's CDN offers high capacity to thwart multi-gigabit DDoS attacks.

Automatic Detection and Activation

Incapsula offers automatic always-on DDoS protection, well-equipped to handle Hit and Run DDoS events, consisting of short bursts of traffic in random intervals over a long period of time. This type of attack can wreak havoc with DDoS protection solutions that need to be manually activated on every burst.

Automatic detection and activation enables Incapsula’s DDoS protection to take full responsibility for both detection and mitigation of all attacks.

Automatic DDoS Protection

Real-Time Control

Incapsula's Real-Time view supports the mitigation process by providing accurate visibility into Layer 7 traffic. Through Incapsula's dashboards you can monitor Layer 7 DDoS attacks in real time, analyze the malicious traffic flow and adjust your security measures, while also benefiting from live and accurate feedback on every action taken.

By providing accessible and actionable live information, Incapsula's Real-Time view serves as an important security tool which enables data-driven response to DDoS threats and any other unwanted scenarios.

Real-Time Control and Visibility

Blocking Any Type of Attack

Incapsula's DDoS Protection service can detect and block the following types of DDoS attacks. Note that Incapsula proxies Web requests, so network layer DDoS attacks are never relayed to the client's origin servers. Therefore, Incapsula's DDoS protection can mitigate all network level attacks.

  • TCP Fragment
  • UDP
  • Slowloris
  • Spoofing
  • ICMP
  • IGMP
  • HTTP Flood
  • Brute Force
  • Connection Flood
  • DNS Flood
  • NXDomain
  • Mixed SYN + UDP or ICMP + UDP Flood
  • Ping of Death
  • Smurf
  • Reflected ICMP & UDP
  • As well as other attacks
Why Incapsula?

Fast and Easy Onboarding

DDoS protection can be rolled out without the need for any additional hardware or software. This enables effortless and near-instant deployment, while also allowing you to maintain you existing hosting and application infrastructures.

Cost-Effective DDoS Protection

Incapsula's cloud-based service offers 24x7 protection against all DDoS attacks without the need for multi-gigabit Internet connections or any additional hardware. Using Incapsula eliminates the setup and overhead costs associated with over-provisioning and deployment of additional on-premise appliances.

Collaborative Security

Incapsula protects websites using collective knowledge about security threats, including new and emerging DDoS attack methods. Using crowdsourcing techniques, new security information is aggregated across the entire network and new mitigation rules are applied in real-time, across all protected websites.

World-Class 24x7 Support

Incapsula's managed DDoS protection services are supported by a dedicated team of experienced SOC (security operations center) engineers. Their responsibilities include: proactive response and event management, continuous real-time monitoring, adept policy tuning, summary attack reports and 24x7 support.

Related Resources