DDoS protection · AS208355

Attacks are loud. Your traffic has a shape.

Protect filters the attack out of your traffic and hands the rest back to you.

80/tcp443/tcp53/udp123/udpdelivered, one queue per servicenoise stays on top
Illustration: round packets keep falling and stay on top of the sieve; square packets that match the holes for 80/tcp, 443/tcp, 53/udp and 123/udp pass and line up under their hole.
The problem

The attack comes at night. The blackhole comes next.

  1. Attacks don't keep office hours.

    Many arrive at night and at weekends. A small network rarely has someone watching its links at three in the morning.

  2. The blackhole takes your customer with it.

    The usual answer is a remote-triggered blackhole (RTBH): drop every packet to the address under attack. The attack stops, and so does your customer.

  3. Size isn't the point. Shape is.

    Attack traffic can be large, but it rarely has the shape of the traffic your network actually serves. That is what we separate.

Products

One product, one sieve.

YAM Protect

Filters the attack, and hands your traffic back.

During an attack, you announce the affected prefixes to us. We filter the attack and deliver the clean traffic back over your link. When it's over, you withdraw.

Priced per network. Product

Protect

Four steps, always in this order.

  1. 01

    Connect

    We set up the link and the BGP session, and check your route objects and ROAs.

  2. 02

    Announce

    During an attack, you announce the affected prefixes to us.

  3. 03

    Filter

    We filter the attack and deliver the clean traffic back over your link.

  4. 04

    Withdraw

    When it's over, you withdraw.

Under attack now?

If you have your own ASN and at least one /24, we can start an emergency connection. The first one can take hours, and the page explains why.

What to do now

Network

YAM Network B.V. runs AS208355, its own network. Check it yourself: PeeringDB (external site), bgp.tools (external site), RIPE (external site).

Network facts