DDOS
2.4 TBPS MITIGATION
MITIGATION

DDoS protection
Monitoring & mitigation

Continuous monitoring, Flowspec mitigation and upstream GRE scrubbing. Our engineering team helps plan and adjust protection based on traffic characteristics and the impact of an incident.

CAPACITY
2.4 Tbps
DETECT
<10s
MODE
ALWAYS
Hytron Network Services Limited
Illustrated traffic investigation and mitigation workbench, not a live monitorTechnical illustration · not a company equipment photo
PAST 24 HOURS
Attacks3
Peak size82 Gbps
Flowspec rules12 ACTIVE
ResultALL MITIGATED
Mitigation

Detection & mitigation

Detection in < 10s, Flowspec rules deployed in < 15s. BGP sessions stay up during attacks, legitimate traffic unaffected.

TRAFFIC ENGINEERING

Inspect traffic. Choose the mitigation path.

Illustrated network appliances, traffic filtering concept and an operations runbookTechnical illustration · not a company equipment photo
01 / TRAFFIC REVIEWUnderstand the anomaly.

Compare the traffic baseline and attack signature, then select filtering or scrubbing. Engineers review and adjust the response.

24×7 · NOC
02 A / FILTER

FlowSpec

Filter matching traffic at the network edge using targeted rules.

02 B / SCRUB

GRE Scrubbing

Divert traffic that needs scrubbing to the scrubbing centre, then return it through a GRE tunnel.

Legitimate traffic reaches the protected network.Filtering and scrubbing are selected according to the response policy
Traffic handling concept · the anomaly determines the response
FIG.04 / TRAFFIC MITIGATION
How it works

Mitigation process

01
DETECT

Baseline comparison, signature ID.

< 10s
02
CLASSIFY

Attack type, source, target classified.

< 5s
03
MITIGATE

Flowspec rules issued, GRE scrubbing on.

< 15s
04
REPORT

Full analysis report within 24h.

< 24h
Capabilities

Protection options

Traffic baselines, attack characteristics and mitigation records are available to support investigation and future adjustments.

01
Always-on monitoring

24×7 traffic baselining, automated anomaly detection — < 10s attack signature ID.

< 10 SEC
02
Automated Flowspec

BGP Flowspec rules issued automatically per signature — legit traffic preserved.

AUTO · BGP
03
GRE scrubbing

Upstream scrubbing centres via GRE tunnel, clean traffic returned via original path.

2.4 TBPS
04
BGP session integrity

BGP sessions stay up during attacks — your network remains reachable throughout.

BGP STAY-UP
05
L3/L4 coverage

SYN flood, UDP flood, ICMP flood, amplification — full L3/L4 coverage.

L3 · L4
06
Incident reports

Detailed post-incident analysis within 24h: signature, mitigation timeline, traffic.

24H REPORT
Attack types

Attack coverage

01
— SYN FLOOD

Forged TCP SYN flood, exhausting connection state

MITIGATION
SYN Cookie + Flowspec
02
— UDP FLOOD

High-volume UDP saturation of bandwidth

MITIGATION
Rate-limit + Scrubbing
03
— AMPLIFICATION

DNS / NTP / Memcached reflection amplification

MITIGATION
Source-port filter
04
— HTTP FLOOD

L7 application-layer high-rate requests

MITIGATION
Behavioural + Captcha
05
— ICMP FLOOD

Ping of Death / high-rate ICMP

MITIGATION
Rate-limit
06
— SLOWLORIS

Slow connections exhausting workers

MITIGATION
Timeout + Concurrency
Noc

Ongoing engineering support

24×7 NOC, rotating between Tokyo and Taipei. Flowspec rules engineer-reviewed before deployment — no single point of automation.

RESPONSE
<15m
NOC
24/7
REGION
TPE/TYO
NOC / ENGINEERING RESPONSE

An alert arrives. Engineers take over.

Illustrated engineers reviewing network diagrams and a runbook, not a team photoIllustrated work scene · not a staff photo
01 / OBSERVE
Alerts and traffic
Understand the impact
02 / INVESTIGATE
Routes and runbooks
Check anomalies and response steps
03 / RESPOND
Review and coordinate
Rule review · incident communication
Illustrated NOC and network engineering collaboration
FIG.11 / NOC · OPERATIONS
Contact

Plan DDoS protection

Tell us your service type (Web / API / Gaming / VoIP), expected peak, and prior attack scale — we will respond within one business day.

By submitting you agree to our privacy policy. Privacy policy