DOSarrest has been in operation for over 11 years of experience, and specializes in DDoS protection in addition to offering CDN and other services. It claims to guarantee is customers “99.99% uptime” and offers a global network capacity of a huge 3 Tbps, which it is continually increasing. DOSarrest has developed its own software, via which it has created multi-tiered complex rules that can combat both volumetric attacks and more sophisticated layer7 attacks.
DOSarrest offers a fully managed security service, which means that its clients can choose their level of engagement. If they never wish to log on, they can communicate any configuration changes or other security needs to DOSarrest, and its security operations center will implement them directly. However, the company also offers a customer portal for those who prefer to be more hands-on, and changes requested within the portal are executed in near real-time.
Customers redirect by DNS their URLs to a DOSarrest VIP (Virtual IP), which means that thereafter all traffic flows to its scrubbing centers in which it is filtered and cleaned so that only legitimate traffic is let through to the customers’ origin server. The customer’s origin server IP is kept hidden from Internet users, so cannot be directly attacked. DOSarrest only filters TCP 80 (HTTP) traffic. All other traffic outside of port 80 does not enter the network.
DOSarrest’s Proxy Defense DDoS protection service is cloud-based. Clients can selects always-on or on-demand protection and each client receives the same protection level regardless of which type of service they select. Support is available 24/7/365.Set up is straightforward: you request a clean IP address from your ISP and disclose it to DOSarrest. You then receive a DOSarrest IP address, which you point your domain to. Traffic is then redirected to one or more of the company’s scrubbing centers and only legitimate traffic is sent back to your server. Pricing is set on a flat basis, meaning you are protected from spiking prices when under attack.
DOSarrest also offers DDoS attack mitigation to datacentre operators and owners of large network IP space called the Datacenter Defender (DCD). It scrubs DDoS traffic (volumetric and advanced) and then routes valid traffic on an established clean path back to the customer’s data center. The DCD can be configured in three different ways: (i) BGP Based Trigger; (ii) Flow Based Trigger; (iii) Secure Stack.
DOSarrest has its own network monitoring service, DEMS, which deploys sensors around the world to ensure your site is performing as it should. The sensors check performance every 60 seconds. If they identify a problem, the security operations center will manually investigate further, rectify the problem and notify the customer.