Built-In Protection
All LightYear servers include basic DDoS mitigation at no extra cost. This protects against common volumetric attacks up to 10 Gbps.
Advanced DDoS Protection
For mission-critical workloads, enable Advanced DDoS Protection (+$10/month per server):
- Mitigation capacity: up to 1 Tbps
- Automatic traffic scrubbing
- Real-time attack dashboards
- SLA-backed uptime during attacks
Enabling Advanced Protection
- Go to Servers → [Your Server] → Settings.
- Toggle Advanced DDoS Protection to On.
- Confirm the additional charge.
How Scrubbing Works
Internet → Scrubbing Centre → Clean Traffic → Your Server
↓
Attack Traffic
↓
Dropped
Traffic is routed through a scrubbing centre that filters malicious packets before forwarding clean traffic to your server. Latency overhead is typically < 2 ms.
Attack Types Mitigated
| Attack Type | Basic | Advanced |
|---|---|---|
| UDP flood | ✅ | ✅ |
| SYN flood | ✅ | ✅ |
| HTTP flood | ❌ | ✅ |
| DNS amplification | ✅ | ✅ |
| Slowloris | ❌ | ✅ |
| Application layer (L7) | ❌ | ✅ |
Best Practices
- Use a Load Balancer as the public entry point — it absorbs attacks before they reach your servers.
- Enable Firewall Rules to block unused ports.
- Use Anycast for DNS to distribute attack traffic geographically.