Infrastructure Protection

BGP-based DDoS Mitigation

Infrastructure Protection protects entire networks by leveraging Incapsula network’s multi-Terabit scrubbing capacity and high-capacity packet processing capabilities to instantly mitigate the largest, most sophisticated DDoS attacks.

Incapsula supports multiple deployment models, including Cross Connect, GRE tunnels, and Equinix Cloud Exchange. Infrastructure Protection is available as an always-on or on-demand service, with flow-based monitoring and support for automatic or manual switchover.

IP Protection

SECURING INDIVIDUAL IP ADDRESSES

IP Protection brings the benefits of infrastructure DDoS protection to customers without an entire Class C subnet. This feature protects multiple service types and protocols, including single IP addresses, without BGP routing.

It is ideal for public cloud (AWS, Azure, Google Cloud, Rackspace) environments, custom protocols, gaming servers and SaaS applications with high-traffic, critical non-HTTP assets and low IP counts.

Customers receive a protected IP address from Incapsula that inspects and filters all incoming traffic. A redundant, secure two-way GRE tunnel forwards clean traffic to the origin IP and returns outbound traffic to users.

Instantly Stop Attacks of All Sizes

Incapsula global network has 3Tbps (Terabits per second) of scrubbing capacity and the ability to process 30 billion packets per second. Once activated, the service blocks any attack in less than a second.

All-Inclusive DDoS Protection

Minimal Latency

Our mesh network of data centers enables round-trip times of <50 milliseconds to 90+% of the world, ensuring smooth performance even when your server is under attack.

high-capacity-network.png

Flexible Activation

Infrastructure Protection is available as an always-on service or as an on-demand solution, with either manual or automatic switchover.

All-Inclusive DDoS Protection

SECURE ASSETS ACROSS CLOUDENVIRONMENTS

Infrastructure Protection protects any network-layer asset, including AWS, Azure, and Google Cloud, whether in a hosted, private cloud, or public cloud environment.

high-capacity-network.png

Direct Protection (Optional)

A direct, layer 2 connection to Incapsula scrubbing centers is available for always-on deployments or environments that are highly sensitive to latency.

All-Inclusive DDoS Protection

Support for Any Type of Service

Infrastructure Protection supports any type of service, including TCP, UDP, SMTP, FTP, SSH, VoIP and proprietary or custom protocols.

high-capacity-network.png

Granular Visibility

Up-to-the-second dashboards show attack traffic details, including vector types, traffic by PoP and IP range statistics.

All-Inclusive DDoS Protection