Introduction
Outlines basic and advanced DDoS protection plans, explaining their coverage and how to activate or upgrade them.
This comprehensive tutorial will guide you through everything you need to know about what ddos protection plans are available.
Overview of DDoS Protection
DDoS (Distributed Denial of Service) attacks are one of the most common threats to online services. Impreza Host offers multiple tiers of DDoS protection to suit different needs and budgets, from basic protection for small websites to enterprise-grade solutions for mission-critical applications.
Available Protection Plans
Basic DDoS Protection
Included with All Hosting Plans
Coverage:
- Up to 10 Gbps mitigation capacity
- Protection against common attack types
- Automatic attack detection
- Real-time mitigation
- 24/7 monitoring
Attack Types Covered:
- UDP floods
- SYN floods
- HTTP floods (basic)
- ICMP floods
- DNS amplification
- Small-scale volumetric attacks
Best For:
- Personal websites
- Small business sites
- Blogs and portfolios
- Low to medium traffic sites
- Standard hosting needs
Features:
- Always-on protection
- Automatic mitigation
- Basic reporting
- Email alerts
- Standard support
Cost: Included free with all hosting plans
Advanced DDoS Protection
Upgrade Option for Enhanced Security
Coverage:
- Up to 100 Gbps mitigation capacity
- Protection against sophisticated attacks
- Advanced traffic filtering
- Custom mitigation rules
- Priority mitigation
Attack Types Covered:
- All basic attack types
- Large volumetric attacks
- Application-layer attacks
- Sophisticated HTTP floods
- Slowloris attacks
- Zero-day attack patterns
- Multi-vector attacks
Best For:
- E-commerce websites
- High-traffic sites
- Business-critical applications
- Gaming servers
- Streaming platforms
- Sites frequently targeted
Features:
- Enhanced traffic analysis
- Custom filtering rules
- Advanced reporting
- Real-time dashboard
- Priority support
- SMS alerts
- Dedicated mitigation resources
Cost: Starting at $29.99/month
Enterprise DDoS Protection
Maximum Protection for Critical Services
Coverage:
- Unlimited mitigation capacity
- Protection against all attack types
- Dedicated mitigation infrastructure
- Custom security policies
- White-glove service
Attack Types Covered:
- All attack types
- Massive volumetric attacks (100+ Gbps)
- Advanced persistent threats
- State-sponsored attacks
- Custom attack patterns
- Zero-day exploits
- Multi-stage attacks
Best For:
- Large enterprises
- Financial services
- Government services
- Critical infrastructure
- High-value targets
- Fortune 500 companies
Features:
- Dedicated DDoS specialist
- Custom mitigation strategies
- 24/7 dedicated support
- SLA guarantees (99.99% uptime)
- Advanced analytics
- Threat intelligence integration
- Incident response team
- Post-attack forensics
- Compliance reporting
Cost: Custom pricing (contact sales)
Detailed Feature Comparison
Protection Capacity
| Feature | Basic | Advanced | Enterprise |
|---------|-------|----------|------------|
| Mitigation Capacity | 10 Gbps | 100 Gbps | Unlimited |
| Concurrent Attacks | 1 | 5 | Unlimited |
| Attack Duration | Up to 1 hour | Up to 24 hours | Unlimited |
| Geographic Coverage | Global | Global | Global + Regional |
Detection and Mitigation
| Feature | Basic | Advanced | Enterprise |
|---------|-------|----------|------------|
| Detection Time | <60 seconds | <30 seconds | <10 seconds |
| Mitigation Time | <5 minutes | <2 minutes | <1 minute |
| False Positive Rate | <1% | <0.5% | <0.1% |
| Custom Rules | No | Yes | Yes + Dedicated Team |
Monitoring and Reporting
| Feature | Basic | Advanced | Enterprise |
|---------|-------|----------|------------|
| Real-time Dashboard | Basic | Advanced | Custom |
| Attack Reports | Daily | Hourly | Real-time |
| Historical Data | 30 days | 90 days | Unlimited |
| API Access | No | Yes | Yes + Custom |
| Alert Methods | Email | Email + SMS | All + Phone |
Support
| Feature | Basic | Advanced | Enterprise |
|---------|-------|----------|------------|
| Support Level | Standard | Priority | Dedicated |
| Response Time | 24 hours | 4 hours | 1 hour |
| Support Channels | Ticket | Ticket + Chat | All + Phone |
| Dedicated Manager | No | No | Yes |
How to Choose the Right Plan
Assess Your Risk Level
Low Risk (Basic Protection Sufficient):
- Personal websites
- Small blogs
- Portfolio sites
- Low-traffic applications
- Non-controversial content
- No history of attacks
Medium Risk (Advanced Protection Recommended):
- E-commerce sites
- Business websites
- Medium to high traffic
- Competitive industries
- Previous attack history
- Valuable data or services
High Risk (Enterprise Protection Required):
- Financial services
- Large e-commerce
- Gaming platforms
- Controversial content
- High-profile targets
- Critical infrastructure
- Frequent attack targets
Consider Your Traffic Volume
Low Traffic (<10,000 visitors/day):
- Basic protection usually sufficient
- Upgrade if targeted specifically
Medium Traffic (10,000-100,000 visitors/day):
- Advanced protection recommended
- Ensures availability during attacks
High Traffic (>100,000 visitors/day):
- Advanced or Enterprise protection
- Downtime costs justify investment
Evaluate Business Impact
Calculate Downtime Cost:
Hourly Revenue × Hours Down = Downtime Cost
Example:
- E-commerce site: $1,000/hour revenue
- 4-hour attack: $4,000 loss
- Advanced protection: $29.99/month = $0.99/day
- ROI: Protection pays for itself in minutes
Budget Considerations
Basic Protection:
- $0 additional cost
- Included with hosting
- Suitable for most users
Advanced Protection:
- $29.99-$99.99/month
- Affordable for businesses
- Excellent value for protection
Enterprise Protection:
- Custom pricing
- Justified for critical services
- Includes dedicated resources
Activation and Setup
Activating Basic Protection
Automatic Activation:
- Basic protection is enabled by default
- No configuration required
- Works immediately upon service activation
- Monitors traffic automatically
Verification:
- Log into client panel
- Navigate to your service
- Check "Security" section
- Verify "DDoS Protection: Active"
Upgrading to Advanced Protection
Step-by-Step Process:
Log into Client Panel
Select Your Service
- Go to "Services" > "My Services"
- Click on the service to upgrade
- Select "Manage Service"
Choose Protection Upgrade
- Click "Upgrade/Downgrade Options"
- Select "Advanced DDoS Protection"
- Review features and pricing
Configure Settings (Optional)
- Set custom thresholds
- Configure geographic filters
- Add IP whitelists
- Set alert preferences
Complete Payment
- Review order summary
- Select payment method
- Complete transaction
Activation
- Automatic activation within 15 minutes
- Confirmation email sent
- Dashboard updated
Requesting Enterprise Protection
Contact Process:
Initial Contact
Consultation
- Discuss your requirements
- Assess threat landscape
- Review current infrastructure
- Identify specific needs
Custom Proposal
- Tailored protection plan
- Pricing based on requirements
- SLA terms
- Implementation timeline
Implementation
- Dedicated onboarding team
- Custom configuration
- Testing and validation
- Training and documentation
Ongoing Management
- Dedicated account manager
- Regular security reviews
- Continuous optimization
- 24/7 dedicated support
Protection Features in Detail
Traffic Analysis
Basic:
- Standard traffic monitoring
- Pattern recognition
- Threshold-based detection
Advanced:
- Deep packet inspection
- Behavioral analysis
- Machine learning detection
- Anomaly detection
Enterprise:
- AI-powered analysis
- Threat intelligence integration
- Predictive threat modeling
- Custom analysis algorithms
Mitigation Techniques
Basic:
- Rate limiting
- IP filtering
- Connection limiting
- Basic scrubbing
Advanced:
- Advanced rate limiting
- Geographic filtering
- Challenge-response
- Traffic scrubbing
- Protocol validation
Enterprise:
- Custom mitigation strategies
- Multi-layer filtering
- Advanced scrubbing
- Behavioral blocking
- Zero-day protection
Reporting and Analytics
Basic:
- Daily attack summaries
- Basic traffic statistics
- Email notifications
Advanced:
- Real-time dashboards
- Detailed attack analysis
- Traffic visualization
- Custom reports
- API access
Enterprise:
- Custom reporting
- Forensic analysis
- Threat intelligence reports
- Compliance reporting
- Executive summaries
- Integration with SIEM
Managing Your Protection
Dashboard Overview
Accessing Dashboard:
- Log into client panel
- Navigate to "Security" > "DDoS Protection"
- View real-time status
Dashboard Elements:
- Current protection status
- Recent attack history
- Traffic statistics
- Active mitigation rules
- Alert configuration
Configuring Alerts
Alert Types:
- Attack detected
- Mitigation activated
- Attack ended
- Threshold exceeded
- Configuration changes
Alert Methods:
- Email (all plans)
- SMS (Advanced and Enterprise)
- Phone call (Enterprise only)
- Webhook/API (Advanced and Enterprise)
Configuration:
- Go to "DDoS Protection" > "Alerts"
- Select alert types
- Choose delivery methods
- Set thresholds
- Save configuration
Whitelist Management
Why Use Whitelists:
- Prevent blocking of trusted IPs
- Ensure access for your team
- Allow monitoring services
- Bypass challenges for APIs
Adding to Whitelist:
- Navigate to "DDoS Protection" > "Whitelist"
- Click "Add IP Address"
- Enter IP or IP range
- Add description
- Save changes
Best Practices:
- Add your office IPs
- Include monitoring services
- Add API consumers
- Document each entry
- Review regularly
Custom Rules (Advanced/Enterprise)
Rule Types:
- Rate limiting rules
- Geographic restrictions
- Protocol filters
- Custom challenges
- Behavioral rules
Creating Custom Rules:
- Go to "DDoS Protection" > "Custom Rules"
- Click "Create New Rule"
- Define conditions
- Set actions
- Test and activate
Monitoring and Maintenance
Regular Monitoring
Daily Tasks:
- Check dashboard for alerts
- Review traffic patterns
- Verify protection status
Weekly Tasks:
- Review attack reports
- Update whitelists if needed
- Check for false positives
Monthly Tasks:
- Analyze attack trends
- Review protection effectiveness
- Consider plan adjustments
- Update security policies
Performance Optimization
Monitoring Performance:
- Track latency metrics
- Monitor false positive rates
- Review mitigation effectiveness
- Analyze traffic patterns
Optimization Steps:
- Review attack history
- Identify patterns
- Adjust thresholds
- Update custom rules
- Test changes
Upgrading or Downgrading
When to Upgrade:
- Increased attack frequency
- Larger attack volumes
- Business growth
- Higher risk profile
- Compliance requirements
When to Downgrade:
- Reduced attack frequency
- Lower traffic volumes
- Budget constraints
- Changed risk profile
Process:
- Log into client panel
- Navigate to your service
- Select "Upgrade/Downgrade"
- Choose new plan
- Complete transaction
Cost-Benefit Analysis
Calculating ROI
Factors to Consider:
- Average revenue per hour
- Cost of downtime
- Reputation damage
- Customer loss
- Recovery costs
Example Calculation:
Scenario: E-commerce site
- Revenue: $500/hour
- Attack duration: 6 hours
- Lost revenue: $3,000
- Customer loss: $1,000
- Recovery costs: $500
- Total cost: $4,500
Protection Cost:
- Advanced plan: $49.99/month
- Annual cost: $599.88
- Break-even: 1 attack every 8 months
Conclusion: Protection pays for itself quickly
Hidden Costs of No Protection
Direct Costs:
- Lost revenue during downtime
- Emergency mitigation services
- Technical support costs
- Recovery and cleanup
Indirect Costs:
- Customer trust loss
- Brand reputation damage
- SEO ranking impact
- Employee productivity loss
- Legal and compliance issues
Best Practices
Proactive Protection
Enable Protection Early
- Don't wait for an attack
- Prevention is cheaper than recovery
- Build protection into infrastructure
Regular Testing
- Test mitigation effectiveness
- Verify alert systems
- Practice incident response
Stay Informed
- Monitor threat landscape
- Review attack trends
- Update protection strategies
Incident Response
During an Attack:
- Monitor dashboard
- Verify mitigation is active
- Document the attack
- Communicate with stakeholders
- Contact support if needed
After an Attack:
- Review attack reports
- Analyze effectiveness
- Update protection rules
- Document lessons learned
- Improve defenses
Compliance and Documentation
Maintain Records:
- Attack history
- Mitigation actions
- Configuration changes
- Incident reports
Compliance Requirements:
- PCI DSS (for e-commerce)
- HIPAA (for healthcare)
- GDPR (for EU data)
- Industry-specific standards
Frequently Asked Questions
Q: Can I upgrade my protection plan at any time?
A: Yes, you can upgrade instantly through your client panel. Upgrades take effect within 15 minutes.
Q: What happens if an attack exceeds my protection capacity?
A: Our system will do its best to mitigate the attack. For Advanced and Enterprise plans, we can temporarily increase capacity. Contact support immediately.
Q: Do I need to configure anything for basic protection?
A: No, basic protection works automatically with no configuration required.
Q: Can I test my DDoS protection?
A: Yes, but you must coordinate with our support team. Unauthorized testing may trigger security measures.
Q: What if I experience false positives?
A: Contact support immediately. We can adjust sensitivity and add IPs to whitelist.
Q: Is there a contract for Enterprise protection?
A: Typically yes, with terms negotiated based on your needs. Month-to-month options may be available.
Q: Can I downgrade if I no longer need advanced protection?
A: Yes, you can downgrade at any time. Changes take effect at the next billing cycle.
Getting Support
Support Channels
Basic Protection:
- Support tickets: 24-hour response
- Knowledge base
- Community forums
Advanced Protection:
- Priority tickets: 4-hour response
- Live chat support
- Phone support (business hours)
- Email support
Enterprise Protection:
- Dedicated support team: 1-hour response
- 24/7 phone support
- Dedicated account manager
- Emergency hotline
When to Contact Support
Immediate Contact Required:
- Ongoing attack not being mitigated
- Service unavailable
- Suspected false positives blocking legitimate traffic
- Critical business impact
Standard Contact:
- Configuration questions
- Plan upgrade inquiries
- Report review requests
- General questions
Information to Provide
For Attack-Related Issues:
- Your domain/service
- Time attack started
- Symptoms observed
- Any error messages
- IP addresses affected
For Configuration Help:
- Current plan level
- Desired configuration
- Specific requirements
- Business context
Conclusion
Impreza Host offers comprehensive DDoS protection plans suitable for every need and budget, from basic protection for personal websites to enterprise-grade solutions for mission-critical services. By choosing the right protection level and following best practices, you can ensure your online services remain available even during attacks.
Remember that DDoS protection is an investment in business continuity. The cost of protection is minimal compared to the potential losses from downtime, reputation damage, and customer loss. Start with the protection level that matches your current needs, and upgrade as your business grows or threat landscape changes.
Our support team is available 24/7 to help you choose the right protection plan, configure your settings, and respond to any security incidents. Don't wait for an attack to think about protection—secure your services today.
