Network and data center protection

BGP switching

Traffic redirection is achieved by announcing your BGP prefixes. To protect infrastructure, we perform statistical traffic analysis. Filtered traffic can be delivered to your network via dedicated channels, GRE tunnels, or private IX peering

Modes of traffic passing

Always-On

Traffic continuously passes through our Scrubbing Centers, ensuring attack mitigation occurs transparently without impacting your users or business operations

On-Demand

Once an attack begins, traffic is automatically redirected to Scrubbing Centers, where malicious packets are filtered out. Only legitimate users reach the protected resource, ensuring uninterrupted service

Filtration modes

Symmetric filtration

Both inbound and outbound traffic pass through the system. During an attack, only inbound traffic is analyzed for detection while outbound traffic is excluded. This provides enhanced data for analysis, enabling more precise traffic filtration

Asymmetric filtration

Only inbound traffic passes through the system, while outbound traffic is routed through your ISPs. This alternative filtration mode provides cost-optimized protection

Protection inside the network perimeter

If redirecting traffic outside your network perimeter is undesirable—especially for high-speed networks—we offer on-premises Scrubbing Centers deployed directly within your infrastructure. Attack detection is performed through metadata analysis, where a Collector gathers traffic data for filtration systems to process. The filtration system can scale without any upper bandwidth limits