DDoS Protection — What We Offer

Distributed Denial of Service (DDoS) attacks flood your server with malicious traffic, making it unavailable to legitimate users. Data Mammoth provides DDoS protection to detect and mitigate these attacks, keeping your services online even under attack.

What Is a DDoS Attack?

A DDoS attack uses many compromised systems to overwhelm a target with traffic. Common types include:

Data Mammoth DDoS Protection

Standard Protection

All Data Mammoth servers include baseline DDoS protection at no additional cost:

• Automatic detection — Our network monitors for traffic anomalies.
• Network-level filtering — Volumetric attacks are filtered at the network edge.
• Always-on — Protection is active at all times, not just during attacks.

Enhanced DDoS Protection

For servers requiring higher levels of protection, enhanced DDoS protection is available as an add-on:

• Higher mitigation capacity — Handles larger attack volumes.
• Advanced filtering — More sophisticated traffic analysis and filtering.
• Application-layer protection — Mitigation of L7 attacks targeting your web applications.
• Faster response — Quicker detection and mitigation thresholds.
• Dedicated support — Priority support during active attacks.

How DDoS Mitigation Works

During mitigation, legitimate users experience minimal to no disruption.

Signs of a DDoS Attack

Indicators that your server may be under attack:

• Sudden traffic spike — Network traffic increases dramatically without a corresponding increase in legitimate visitors.
• Server unresponsive — Your server becomes slow or unreachable.
• High CPU/bandwidth — Resource usage spikes unexpectedly.
• Connection timeouts — Legitimate users cannot connect.
• Error pages — Web server returns 502 or 503 errors.

What to Do During an Attack

Additional Protection Measures

Complement Data Mammoth's DDoS protection with these server-level defenses:

Use a CDN

A Content Delivery Network distributes your content across global edge servers, absorbing attack traffic before it reaches your origin server.

Rate Limiting

Configure your web server to limit requests per IP:

Nginx:

limit_req_zone $binary_remote_addr zone=one:10m rate=10r/s;
server {
    location / {
        limit_req zone=one burst=20 nodelay;
    }
}

Connection Limits

Limit concurrent connections per IP:

Nginx:

limit_conn_zone $binary_remote_addr zone=addr:10m;
server {
    location / {
        limit_conn addr 10;
    }
}

Fail2ban

Configure Fail2ban to detect and block IPs showing attack patterns. See the initial server setup guides for Fail2ban configuration.

What to Do Next

• Server Firewall Hardening Guide — Complement DDoS protection.
• Managing Server Add-ons — Enable enhanced protection.
• Monitoring Server Performance — Detect traffic anomalies.
• Complete Server Security Checklist — Full security review.