What Is It?
DDoS Protect is a managed, always-on mitigation service that shields every resource running in IONOS Cloud from Layer 3 (Network) and Layer 4 (Transport) attacks. Traffic identified as malicious is automatically redirected to a filtering and scrubbing platform, cleaned, and only legitimate packets are sent to the original destination. The service is deployed across all IONOS data centers and requires no configuration to activate.
Quick Facts
| Aspect | Details |
|---|---|
| Type | Managed DDoS mitigation service |
| Protection Layers | Layer 3 (Network) and Layer 4 (Transport) |
| Activation | Always-on, automatic for all IONOS Cloud resources |
| Packages | Basic (included), Advanced (add-on) |
| Attack Types | Volumetric and protocol attacks (UDP floods, SYN floods, etc.) |
| Deployment | All IONOS data centers |
Package Comparison
| Feature | Basic (Included) | Advanced (Add-on) |
|---|---|---|
| Always-on attack detection | Yes | Yes |
| Automatic traffic containment | Yes | Yes |
| DDoS traffic filtering | Yes | Yes |
| Common L3/L4 attack protection | Yes | Yes |
| 24/7 DDoS expert support | No | Yes |
| Proactive monitoring & alerts | No | Yes |
| On-demand IP-specific filtering | No | Yes |
| On-demand attack diagnosis report | No | Yes |
What You Can Do
Automatic Layer 3/4 Protection
Receive continuous protection from common volumetric and protocol attacks including UDP floods, SYN floods, and other network and transport layer threats.
Always-On Attack Detection
Benefit from continuous monitoring with no configuration required. Malicious traffic is automatically identified and redirected for scrubbing.
Traffic Filtering and Scrubbing
Suspicious traffic is redirected to the filtering platform where it is analyzed and cleaned. Only legitimate packets reach your resources.
Expert Support (Advanced)
Access 24/7 DDoS expert support with Advanced package. Support team is notified proactively and can act before you notice an attack.
On-Demand IP Filtering (Advanced)
Request scrubbing for a particular IP or server at any time with Advanced package. Useful for pre-emptive protection before anticipated attacks.
Attack Diagnosis Reports (Advanced)
Receive detailed post-incident analysis reports with Advanced package to understand attack vectors and improve your security posture.
Best For
| Scenario | Why It Fits |
|---|---|
| Public-facing web servers | Automatic L3/L4 filtering keeps services reachable during floods |
| API endpoints | Continuous protection without manual rule changes |
| Gaming services | Low-latency always-on mitigation prevents disruption |
| VoIP and real-time services | Network-layer protection maintains service availability |
| Critical business applications | ERP and CRM systems protected from network attacks |
| High-value IP protection | Advanced package enables pre-emptive on-demand filtering |
| Post-incident analysis | Advanced provides detailed reports for security improvement |
Consider Alternatives If
| If You Need... | Consider | Why |
|---|---|---|
| Layer 7 (Application) protection | IONOS CDN | DDoS Protect covers only L3/L4; CDN provides HTTP/HTTPS-level attack mitigation |
| Protection for external resources | Third-party DDoS services | DDoS Protect limited to IONOS Cloud resources |
| Guaranteed 100% mitigation | Combined security approach | No service can guarantee absolute protection; use defense-in-depth |
Key Considerations
Billing & Costs
- Main billing: Basic included with all IONOS Cloud accounts at no extra charge
- Advanced package: Pricing is not published; contact IONOS Cloud Sales or Support for current subscription rates covering expert support and enhanced features
- No per-attack fees: Protection is always-on regardless of attack frequency
Limitations
- Layer 7 (application-layer) attacks not covered (use IONOS CDN for HTTP/HTTPS protection)
- Basic package only mitigates common volumetric and protocol attacks
- User-side security still required (firewalls, network segmentation, hardening)
- On-demand IP filtering only available with Advanced package
- Service limited to IONOS Cloud resources (not for external/on-premises infrastructure)
- No guarantee of 100% mitigation (shared-responsibility model)
Management Options
- Automatic activation (no configuration needed)
- Upgrade to Advanced through IONOS support
- Combine with IONOS CDN for comprehensive L3-L7 protection