DDoS filtering: L3/L4 vs L7

What included scrubbing covers, what stays your application problem, and how BYOIP fits on dedicated tiers.

Полный текст статьи на английском. Шапка, каталог и оплата переведены.

Always on

L3/L4 scrubbing is included on every VPS and dedicated SKU. Peak capacity is on the order of 1 Tbps class edge capacity. It is not a second invoice.

L7 is different

Application-layer floods that look like legitimate HTTP still need your stack. Optional L7 help exists for HTTP workloads; it is not a cloaking device for AUP breaches.

IP and BYOIP

1x IPv4 + /64 on VPS, editable PTR. BYOIP is Dedicated Max and Dual: LOA plus ASN, a few days. Looking glass endpoints are published for indicative RTT.