Yandex DDoS Protection

A service that protects your applications against DDoS attacks.

Provided in partnership with Qrator Labs.

Easy setup
You can enable DDoS Protection with a single click: just select the **DDoS protection** flag when creating VMs and reserving public IP addresses.
Rapid detection
Continuous monitoring is used to determine the normal traffic profile of each resource and detect DDoS attacks almost immediately.
Automatic traffic scanning
The service analyzes all incoming traffic. Yandex DDoS Protection automatically blocks traffic at OSI Layers 2 and 3 and protects against attacks like SYN floods.
Transparent pricing
You only pay for incoming traffic that is allowed to pass to the resource.

Getting started

To use the service, select DDoS protection when creating a VM or reserving an IP address.

Create VM

Questions and answers

How does DDoS Protection analyze traffic?

The service filters all internet traffic to protected IP addresses, even if no DDoS attack is underway, and cleans it at OSI Layers 2 and 3. DDoS protection is available for the public IP addresses of virtual machines, network balancers, and database hosts.

The service filters all internet traffic to protected IP addresses, even if no DDoS attack is underway, and cleans it at OSI Layers 2 and 3. DDoS protection is available for the public IP addresses of virtual machines, network balancers, and database hosts.

What attacks does the service protect against?

Yandex DDoS Protection protects services from SYN flood, UDP flood, DNS amplification, and UDP reflection attacks.

Yandex DDoS Protection protects services from SYN flood, UDP flood, DNS amplification, and UDP reflection attacks.

Does the service meet the ISO requirements?

Yes. You can read the full security audit conclusion in the Security section.

Yes. You can read the full security audit conclusion in the Security section.

Get started with DDoS Protection