DDoS attacks continue to grow in size and scope, requiring careful planning to mitigate the impacts.
As organizations publish more applications on the Internet, attackers continue to rely on DDoS attacks to target them. Whether it is to bring down a competitors applications, or to cover up other attacks, or as part of a ransom demand, DDoS attacks continue to grow in size and scope, requiring careful planning to mitigate the impacts.
Stop volumetric DDoS attacks from overwhelming your applications.
Barracuda Active DDoS Prevention prevents attackers from overwhelming your applications.
Detect and stop subtle application DDoS attacks.
Sneaky application-layer DDoS attacks can slow down apps for everyone. Mitigate the numerous application-layer and bot-driven DDoS attacks.
Stop worrying about overages and limits of your DDoS protection.
Barracuda Active DDoS Prevention provides true unlimited DDoS protection without any of these limitations.
“The biggest value is that we can stop DDoS attacks and make sure that we’re not hacked in specific ways”
Stop volumetric DDoS attacks from taking down your critical apps
DDoS attacks have grown in prominence over the last few years, with everyone from organized groups to script kiddies attacking various organizations. Barracuda Active DDoS Prevention stops large scale volumetric DDoS attacks from taking down your critical apps. The attacks are removed at our scrubbing centers much before they come anywhere near your network, removing any potential for downtime.
Barracuda Active DDoS Prevention blocks attacks including:
- DNS Amplification Attacks
- TCP SYN Floods
- UDP / ICMP Floods
- FIN / RST Floods
- Network Protocol Abuse, and more
Detect and stop subtle application layer DDoS attacks
Attackers for years have been attempting more subtle variations of the typical Layer 3 volumetric DDoS attack — the Layer 7 Application DDoS attack. In this form, the attack occurs using HTTP & HTTPS based methods such as GET floods, SSL Floods & other protocol attacks. Starting with the Mirai botnet a few years ago, these attacks have become more popular, and most botnets now have the ability to execute these attacks. Barracuda WAF-as-a-Service and Web Application Firewall have advanced capabilities to detect and block these automated attacks.
Attacks blocked include:
- SlowLoris Attacks
- RUDY, Slow Read
- HTTP Floods
- HTTP Cache Bypass Flood Mitigation
- SSL Floods
- SSL Protocol attacks
- And more
Prevent abusive access to your web applications and APIs
Sometimes malicious users and bots can attempt to access an application at a very high rate for various purposes. It could be someone rapidly refreshing a page to be the first to book a ticket or a bot attempting a malicious login. Barracuda WAF-as-a-Service and Web Application Firewall include unlimited Rate Limiting rules that can be applied to any part of the applications. These rate limiting rules will ensure that no one user can overload or compromise an application with huge numbers of accesses in a short period of time. Rate Limiting typically works on IP addresses — however, with Barracuda solutions, you can also use Device Detection to block specific devices behind an IP address, rather than banning an entire IP address.
