Appearance

🖥️ On Premise Shield ​

The On Premise Shield is a rented software product that runs on your own hardware and filters DDoS attacks in-line, with high accuracy.

It stops attacks without harming legitimate traffic, and its built-in debugging and monitoring tools, paired with our small, fast-moving team, mean new features and fixes ship quickly.

Our filtering works on one principle: only let legitimate traffic through, rather than chasing specific attack patterns. That approach gives you predictable protection with near-zero time-to-mitigation (TTM), which is why our customers stay happy.

Not every network can hand us all the data this needs, so the Shield is highly configurable. You can run it in symmetric or asymmetric routing, and always in-line or only on demand, to get the best protection for your specific setup.

Target groups ​

This product is built for businesses and enterprises, not consumers.

Two plans cover both large owned networks (with best-practice or custom setups) and game hosts who want extra protection on existing machines:

  • Business Plan — our XDP filtering software runs on your hardware, alongside your own applications. The Linux kernel handles routing, so you adjust your network configuration yourself.
  • Enterprise Plan — you provide one or more dedicated filtering machines that run our XDP software. We receive and send traffic over dedicated VLANs, which you configure in your routers.

Pricing and Sales Timeline ​

We know timing and pricing matter, and both depend on your needs.

When you contact our sales team, tell us how urgent your deployment is and we will move as fast as we can.

The On Premise Shield starts at around €600/month for the Business plan and around €1000/month for the Enterprise plan. Pricing is based on your 95th-percentile traffic and the number of nodes. Setup is mostly automated, but our engineers review every deployment before it goes into production.

From your first "Hi!" to running in production, the process looks like this:

  1. You reach out to our sales team, who answer your setup and feature questions and prepare a quote.
  2. Once you agree on the quote, our engineering team guides the setup over chat or scheduled calls.
  3. After the software is set up (partly automated, partly with our engineers and support team), engineering reviews the deployment one last time to confirm it is production-ready.
  4. You test it on a few prefixes or a small share of production traffic, then move to full production.

Hardware Requirements ​

An On Premise deployment needs at least one control/management node plus one or more filter (scrubbing) nodes. Some features, such as out-of-line filtering and automatic service detection, need extra machines.

Every machine in the deployment needs:

  • an x86 64-bit CPU,
  • an internet connection,
  • filter nodes (regardless of whether Business or Enterprise) need 48 GB of total RAM and at least 20 GB available RAM,
  • non-filter nodes (Management, Service Discovery, Out-Of-Line Filtering) need 8 GB of total RAM and at least 6 GB of available RAM,
  • a TPM2 module is recommended,
  • and a Debian-like operating system is required (with at least kernel 6.0, preferably a kernel LTS version).

For a new machine, install Debian. Filter machines need dedicated hardware; other nodes can run in a virtual machine, such as KVM.

TIP

Our team is happy to help with hardware choices and can guide you to the best fit for your use case.

Filter Hardware ​

Filtering can be installed on either existing machines or empty machines. Existing machines are typically used for a Business-Plan setup, and empty machines for an Enterprise-Plan setup — though empty machines can also be used for a Business-Plan installation.

  • a NIC driver that supports XDP native mode,

  • a CPU in the class of the Ryzen 9 9950X (recommended),

  • at least 48 GB of available RAM for the XDP filtering software.

  • a NIC Driver supporting XDP native mode is required

  • a CPU similar to Ryzen 9 9950X is recommended

  • at least 48 GB of total RAM and at least 20 GB of available RAM for the XDP filtering software

  • either kernel version 6.12.x (LTS) or 6.18.x (LTS)

Note that we recommend choosing the fastest RAM speed available as filtering capabilities heavily depend on RAM speed.