DDoS Protection

Serious DDoS protection for exposed infrastructure, critical services and network operators

Peeryx protects exposed services with a readable model: volumetric mitigation, protected IP transit, clean traffic delivery and integration that matches your real architecture.

High-capacity volumetric mitigation BGP, GRE, VXLAN and cross-connect delivery Clean traffic back to production or customer edge Compatible with XDP, eBPF, DPDK or in-house logic

What a technical customer needs to understand before buying

The subject is not only displayed capacity. You also need to know where the attack is stopped, how clean traffic comes back and what remains under your control.

Where saturation really happens

The first breaking point is not always your server. It can be the transit, the port, the stateful firewall or the delivery model itself.

How clean traffic gets back

The handoff must be explicit: BGP, tunnel, cross-connect or an intermediate VM depending on your architecture and latency constraints.

What logic stays on your side

Peeryx can remain the first volumetric layer while you keep your own XDP, proxy, eBPF or application logic behind it.

Which offer matches the actual need

Protected transit, router VM, protected dedicated server and specialised proxy do not solve the same problem. These differences need to be explicit for the customer.

Which model fits which use case

Peeryx covers several deployment patterns without forcing every customer into the same product.

Protected IP transit

Best when you already work with prefixes, BGP and network handoff and want a readable service for an existing production environment.

Upstream layer in front of your stack

Best when you want to keep your own filtering or routing logic behind a first volumetric mitigation layer.

Specialised gaming layer

Relevant when a public game service needs filters and handling that go beyond generic network mitigation.

Dedicated filtering server

Relevant when you want to keep or build an advanced customer-operated filtering stack.

Public exposure

Prefixes, IPs or public services already exposed.

Peeryx mitigation edge

Volumetric mitigation, network decisions and attack reduction.

BGP / GRE / VXLAN / cross-connect / router VM

Delivery depends on your level of control and your existing topology.

Customer production

Servers, edge, proxy or in-house filtering behind already-cleaned traffic.

Blog

Resources

Related reading

To go deeper, here are other useful pages and articles.

Volumetric mitigation 9 min read

How do you mitigate a DDoS attack above 100Gbps?

Link, PPS, CPU, upstream relief and clean handoff: the real framework behind credible 100Gbps mitigation.

Read the article
DDoS guide Reading time: 7 min

How to stop a DDoS attack without losing network control

A practical guide to stopping a DDoS attack while keeping clean traffic delivery, routing control and a credible upstream mitigation model.

Read article
UDP Anti-DDoS guide Reading time: 14 min

UDP flood mitigation: stop a UDP DDoS without breaking legitimate traffic

A UDP flood is not just “a lot of UDP packets”. Depending on the service, it can saturate a link, exhaust a firewall, trigger useless responses or disrupt a real-time protocol such as gaming, VoIP, DNS, VPN or a UDP-based application. Good mitigation is not about blocking UDP everywhere. It is about separating obvious noise from useful traffic, protecting upstream capacity and delivering clean traffic with low latency.

Read article
TCP Anti-DDoS guide Reading time: 15 min

SYN flood protection: mitigate TCP DDoS attacks without blocking real connections

A SYN flood is not only about sending many packets. It abuses the TCP opening phase to create pressure on connection queues, stateful firewalls, load balancers and exposed servers. Effective protection must filter early, avoid state exhaustion and keep legitimate users able to establish sessions.

Read the article
Scrubbing center guide Reading time: 14 min

What is a scrubbing center and why does it matter for DDoS protection?

A scrubbing center receives attacked traffic, filters DDoS noise and delivers cleaner traffic back to the customer.

Read article
DDoS guide Reading time: 7 min

PPS vs Gbps in DDoS mitigation

Why packet rate matters as much as bandwidth when evaluating DDoS mitigation, filtering servers and upstream relief.

Read article

Peeryx FAQ

Does Peeryx always replace my own filtering logic?

No. Peeryx can stay as the upstream volumetric layer while the customer keeps XDP, eBPF, proxy or application logic behind it.

Do I need to migrate my whole infrastructure?

No. Depending on the case, clean traffic can be returned via BGP, GRE, VXLAN, cross-connect or a router VM.

Why focus so much on handoff?

Because a credible Anti-DDoS service is not only about absorbing an attack. It must also re-inject traffic that remains usable in production.

Are the displayed prices final?

They are entry-level references. Final pricing depends on delivery model, commits, ports and the required hardware.

Describe your exposure, your network and your clean-traffic return model

Peeryx will come back with a credible design: protected transit, tunnel, router VM, dedicated server or another model that actually matches your architecture.