DDoS Protection Use Cases

Tempesta Escudo provides comprehensive DDoS protection through the following components:

• Tempesta FW – protects against application-layer (L7) DDoS attacks
• Tempesta xFW – protects against volumetric (L3-L4) DDoS attacks

Volumetric attacks may reach terabits per second; therefore, efficient anycast infrastructures are required to build a robust volumetric DDoS protection solution with Tempesta Escudo.

This section provides example configurations for the most common use cases and Tempesta xFW modes of operation:

• DNS server in gate mode
• Web server in host mode

These examples are illustrative only. DNS protection can also be deployed in host mode, and web service protection can be deployed in gate mode.

You can find more configuration examples in /opt/tempesta/examples.