DDoS Mitigation Service Datasheet

Key Benefits

Granular DDoS Scrubbing Up to 1 Tbps, powered by Corero SmartWall Threat Detection & Mitigation Appliances.

Volumetric Edge Mitigation Up to 4 Tbps using Juniper Trio 6 MX routers at the network edge.

Tier-1 Carrier Mitigation Additional upstream scrubbing up to 20 Tbps available on custom quote.

24/7/365 UK-Based NOC Round-the-clock monitoring of mitigation systems by our UK-based Network Operations Centre.

99.99% Uptime SLA Guaranteed availability for paid mitigation plans. Fully automated and reliable DDoS mitigation.

On-Premise Scrubbing Same-network DDoS scrubbing appliances. No additional physical ports or GRE tunnels required.

How Mitigation Works

Normal Traffic Flow

1:2000 Sampling

Ingress WAN traffic passes through our detection appliance with 1:2000 packet sampling. Clean traffic flows directly to your server with no added latency.

➤

Mitigation Activated

1:1 In-Line Scrubbing

When an attack is detected, traffic is redirected through Corero SmartWall appliances for 1:1 deep packet analysis. Malicious traffic is dropped; clean traffic continues to your server.

Service Plans

Feature	On-Demand Detect & Redirect	Always-On In-Line	Always-On Pro In-Line & Managed
Packet Sampling Rate	1:2000	1:1	1:1
Time to Mitigate	Up to 150s	Instant	Instant
Detection Type	sFlow Sampling	In-Line Packet Analysis	In-Line Packet Analysis
Permanent ACL (Firewall Filter)	—	Up to 5 Terms 5 changes/month	Up to 20 Terms 10 changes/month
DDoS Attack Notifications	Available 2026	✓	✓
Proactive Monitoring	—	—	✓
DDoS Support Team	—	Mon–Fri 09:00–18:00	24/7/365
Customer Mitigations (BGP)	—	—	✓
Customer Mitigations (Ticket/Email)	—	✓	✓
SLA on Response Time & ACL Changes	—	—	15 Minutes
Mitigation Availability SLA	—	99.9%	99.99%
Attack Analysis & Filtering Support	—	20 min/month	120 min/month

Pricing & Capacity

On-Demand

Detect & Redirect

Basic Free

Scrubbing Quota

4 Hours

Bandwidth Limit

60 Gbps / 30 Mpps

Plus From £40 /mo

Scrubbing Quota

24 Hours

Bandwidth Limit

160 Gbps / 60 Mpps

Always-On

In-Line

Basic From £80 /mo

Scrubbing Quota

48 Hours

Bandwidth Limit

200 Gbps / 100 Mpps

Plus From £120 /mo

Scrubbing Quota

100 Hours

Bandwidth Limit

400 Gbps / 250 Mpps

Always-On Pro

In-Line & Managed

From £250 /mo

No Restrictions

Subject to requirements and contract length.

Scrubbing

No Restrictions

Bandwidth

No Restrictions

A one-time service setup fee of £65.00 applies for all tiers. All prices exclude VAT.

DDoS Mitigation Coverage

Volumetric DDoS

Reflective Amplification

Resource Exhaustion

Protection Engine

ACL Firewall Filter Service

Permanent ACL Firewall Filters are implemented at the ingress network port on Juniper network equipment, prior to traffic reaching the customer's service port. ACLs can be uniform across all interfaces, customised per interface, or a combination. An initial burn-in testing period is provided for deployment changes and tweaks.

Allow/Deny Source IP Port & Protocol Filtering Block Fragmented UDP TCP-Established Inbound Rate Limiting / Policing

Important Notes

Mitigation Bandwidth refers to the size of attacks scrubbed before being null-routed.
An intermediary option between On-Demand and Always-On is available for customers who wish to only have traffic redirected following a confirmed attack. Contact us for details.
Customers receiving frequent DDoS attacks on the no-cost On-Demand plan may be asked to adopt a rolling null-route threshold policy or upgrade to a paid plan.
UKServers reserves the right to impose further restrictions or terminate services in the event of severe network risk caused by DDoS attacks.
Additional charges may apply for customers with more than 4 Gbit 95th percentile incoming clean traffic on always-on tiers.
All mitigation is provided on a best-effort basis with no guarantee of scrubbing 100% of incoming attack traffic due to evolving attack vectors.
Use of IP tunnels to other datacentres or networks to utilise DDoS protection outside our network is not permitted unless explicitly agreed.