DDoS protection with DDoS Shield
Every virtual machine is protected against denial-of-service attacks from the moment it is created. Suspicious traffic is filtered at the network edge with XDP/eBPF before it reaches your VM — no switch to flip, no setup required.
DDoS Shield is already on the moment your VM gets an IP address — nothing else to do.
Illustration: inbound and outbound traffic flows continuously through the 10 Gbps port to the virtual machine; the DDoS Shield blocks attack packets right at the network edge, before they reach the virtual machine — clean traffic keeps flowing normally.
Diagram: traffic from the Internet passes through DDoS Shield at the network edge before reaching the virtual machine. Attack packets (red dots) are blocked right there; clean traffic (blue dots) keeps flowing through normally.
How it works
All traffic to your VM’s IP address passes through DDoS Shield first — automatically, for every IP, with nothing for you to turn on or configure.
- Internet
Every connection to your VM’s IP address, including attack traffic.
- Filtered at the edge
Packets are processed with XDP/eBPF right at the network edge, before they reach the virtualization layer.
- Automatic anomaly detection
The system compares current traffic against that specific IP’s own normal baseline to recognize an attack.
- Your virtual machine
Only legitimate traffic is forwarded to the VM; attack sources have already been filtered out at the edge.
There is no configuration step in between — DDoS Shield is active as soon as your VM has a public IP address.
Features
Every public IP attached to your VM is already a protected target the moment it is allocated — no activation step, no activation fee.
Inbound/outbound traffic is sampled every 5 seconds; the dashboard keeps refreshing itself so you always see the latest state.
Packet filtering happens at the network edge with XDP/eBPF before traffic reaches your VM — it never uses your VM’s CPU, RAM or internal bandwidth.
Ask the AI to review an event or the most recent time window; it returns a verdict (normal / suspicious / attack), a confidence score and concrete evidence.
Inbound/outbound traffic charts in packets/s and bits/s, plus event history, for each of your IP addresses.
Events are classified by severity against that IP’s own traffic baseline, so small, ordinary spikes don’t bother you.
What you’ll see in the dashboard
Three places you’ll meet DDoS Shield right inside the console — no separate tool to open.
One of the key stats right on the Overview page: attacks over the last 7 days and how many IPs are currently protected.
Open any VM to see its IP’s status: inbound/outbound traffic, packets/s, open events and a chart of the last 5 minutes.
Traffic spiked sharply from a small set of source addresses over 4 minutes, well above this IP’s normal baseline.
Evidence
From the Events tab or the AI tab, ask the AI to review an anomalous event — it returns a verdict, a confidence score and evidence so you can decide what to do next.
What DDoS Shield changes
| An unprotected VM | A VM on this platform | |
|---|---|---|
| Default protection | You install and configure your own firewall or DDoS service | Already on for every IP, nothing to set up |
| Attack detection | Usually noticed only once the service is already slow or down | Automatic, against that IP’s own traffic baseline |
| Blocking attack sources | Manual firewall configuration, using up your server’s own resources | Filtered at the edge with XDP/eBPF, at no cost to your VM |
| Incident analysis | You read logs and look up source IPs yourself | Ask the AI to analyze and summarize a verdict with evidence |
| Cost | Usually a separately priced DDoS protection service | Included with every VM, no extra charge |
Pricing
DDoS Shield is included with every VM at no extra charge — there is nothing separate to buy or activate.
A few advanced actions (like asking the AI to analyze an event) have a daily usage limit to keep things fair for every customer.
There is no separate DDoS Shield tier to upgrade to — every VM is protected at the same level, as part of the plan you already pay for.
Frequently asked questions
Ready to try it?
DDoS Shield is already on the moment your VM gets an IP address — nothing else to do.