You all seem to be struggling to do.....anything. So here are some helpful suggestions in light of the recent "DDoS attacks" so maybe you can get something figured out. 9 Best DDoS Protection Service Providers for 2023 Drew Robb December 7, 2022 The following vendors are a sampling of some of the best DDoS protection service providers on the market today, and most can be deployed in any industry, from gaming to eCommerce to manufacturing to energy. Most of the vendors listed here scored well in the Forrester DDoS Wave. In addition to handling traditional DDoS attacks, they incorporate cloud, mobile and IoT features, as well as a number of advanced features and services. Akamai Akamai offers three purpose-built cloud solutions to provide end-to-end DDoS defense for organizations. The combination of Prolexic, Edge DNS, and App & API Protector would be recommended for the highest quality of DDoS mitigation to keep applications, data centers, and internet-facing infrastructure (public or private) protected. Effective mitigation techniques are available for all classes of application-layer DDoS/DoS attacks, including those designed to exhaust resources, those which exploit vulnerabilities that can cause availability issues (such as buffer overflows), those which exploit flaws in application business logic, compromise API infrastructure, and attacks performed by bots. Key Differentiators Akamai’s Prolexic global security operations centers (SOCCs) provide fully managed DDoS protection, backed by industry-leading service level agreements and support. It combines mitigation with Akamai’s security operations centers to stop attacks across all ports and protocols before they become business-impacting events. Edge DNS is a DNS service that moves DNS resolution from on premises or data centers to the Akamai Intelligent Edge. It is architected for nonstop DNS availability and high performance, even across the largest DDoS attacks. It can be deployed as a primary or secondary solution with optional DNSSEC support to protect against DNS forgery and manipulation. Akamai also offers extremely robust protection against DDoS attacks at the application layer via its WAAP solution known as App & API Protector. Prolexic offers over 10+ Tbps of dedicated DDoS scrubbing capability to mitigate attacks instantly via its zero-second SLA. Over 225+ Akamai SOCC frontline responders that act as an extension of a customer’s incident response team to balance automated detection and response with human engagement. Custom runbook/tabletop attack drills are provided to optimize incident response and maintain operational readiness. Pricing As of this writing, Akamai has not made its DDoS protection pricing available on its website. However, interested buyers have access to a 60-day free trial of their Edge DNS solution. Imperva Imperva DDoS Protection can deal with any type of asset with a 3-second time to mitigation for any type of attack. Onboarding is said to be easy and fast, while the operation is simplified with out-of-the box policies and self-adaptive tuning capabilities. Visibility and reporting are augmented by Imperva Attack Analytics. This approach provides a holistic view of all attack types and layers, and correlates these to accelerate the investigation process while reducing alert fatigue. Imperva works across a range of industries, including: eCommerce, energy, financial services, gaming, healthcare, manufacturing and technology. Key Differentiators Protects websites, networks, DNS and individual IPs Stops Layer 3, 4 and 7 attacks Capacity of 9 Tbps, 65 GPPs 24×7 Support and SOC with global coverage A single stack architecture reduces latency and results in fast remediation of DDoS attacks and other web application threats Each of the 50 points of presence (PoPs) within the Imperva global network runs all security services (DDoS, WAF, API security, bot management) Imperva provides a 3-second mitigation SLA for any DDoS attack, regardless of type, size or duration, without disrupting legitimate traffic Delivers real-time visibility into DDoS threats with reporting and attack correlation through Imperva Attack Analytics or a SIEM integration Self-adaptive security policies, self-service configuration and Terraform and API support Pricing As of this writing, Imperva does not make its DDoS protection pricing available on its website. However, interested buyers have access to a free trial. Radware Radware offers DDoS protection across any infrastructure implementation for the public cloud, the enterprise, and specifically for service providers. It secures the data center, private cloud, public cloud and 5G infrastructure using a solution that is agnostic to the environment and was designed to help service providers protect large-scale networks. Key Differentiators Radware’s attack mitigation architecture is flexible and extensible Can be tailored to customers such as telecom and cloud operators Wide security coverage with automated zero-day DDoS attack protection Offers hybrid, always-on and on-demand cloud DDoS service deployment options Cloud SSL-attack protection that maintains user data confidentiality Single pane of glass with unified portal and fully managed service by Radware’s Emergency Response Team Also offers web application security for integrated application and network security Combines always-on detection and mitigation with cloud-based volumetric DDoS attack prevention, scrubbing, and 24×7 cyber attack and DDoS security Pricing As of this writing, Radware has not made its DDoS protection pricing available on its website. Cloudflare Cloudflare’s cloud-based DDoS protection system can deal with layer 7 attacks as well as layer 3 and layer 4 attacks. Instead of using dedicated anti-DDoS hardware, every machine in its global network takes part in DDoS mitigation. Its DDoS protection secures websites, applications, and entire networks while ensuring the performance of legitimate traffic is not compromised. Key Differentiators Cloudflare’s 100 Tbps network blocks an average of 76 billion threats per day, including some of the largest DDoS attacks in history Its unmetered, always-on DDoS protection for web assets (HTTP/HTTPs) is backed by intelligence harnessed from Cloudflare’s global network Works in tandem with Cloudflare’s cloud web application firewall (WAF), Bot Management, and other L3/4 security services to protect assets from cyber and network threats Cloudflare Spectrum is a reverse proxy service that provides DDoS protection for any application (not just the web), such as FTP, SSH, VoIP, gaming, or any application running over a TCP/UDP protocol, and comes with built-in load balancing and traffic acceleration for L4 traffic Cloudflare Magic Transit provides BGP-based DDoS protection for network infrastructure, either in always-on or on-demand deployment modes Data centers in all 250 cities across 100 countries announce customer subnets to ingest network traffic and mitigate threats close to the source of attack Centralized and decentralized mitigation systems work in concert to identify and mitigate most DDoS attacks in under 3 seconds Preconfigured static rules are deployed in less than 1 second Built-in analytics give insights into traffic patterns, threats observed (and blocked) from the dashboard or via the Cloudflare GraphQL API Can be integrated with third-party SIEMs Pricing As of this writing, Cloudflare has not made its DDoS protection pricing available on its website. Vercara Vercara (formerly Neustar) UltraDDoS Protect offers 12+ Tbps of DDoS mitigation and a global dedicated data scrubbing network to help maintain an online presence, reduce the threat of theft, and protect the bottom line. Vercara offers on-premises hardware to stop smaller attacks instantly, as well as the UltraDDos Protect cloud for when attack volume and complexity explode. Key Differentiators Automation that moves attacks into mitigation quickly Always ready options for DNS, BGP, and hybrid configurations Carrier-class DDoS mitigation that includes a massive network of dedicated scrubbing capacity OSI Layer 3, Layer 4, Layer 7 and IPv6 capable Globally positioned scrubbing infrastructure Harnesses multiple DDoS mitigation vendor technologies including Arbor, Cisco, Citrix, Juniper, HP, Vercara Multiple Tier 1 internet network providers Offers on-premises hardware and cloud-based protection Vercara can secure VPN connections via VPN Protect Can connect to 61 global data centers for traffic control and increased security Pricing As of this writing, Vercara has not made its DDoS protection pricing publicly available on its website. [spoiler]Moderator edit: This thread has been updated with tags that are more appropriate. Feel free to private message the moderator who moved your post, link to topic, for further clarification about why this topic was moved.[/spoiler]