Terabit-Scale DDoS Protection and Web Security
Security is our foundation. The moment you onboard, your origin IP is hidden from the public internet. Our in-house mitigation stack handles DDoS attacks, traffic hijacking and malicious requests in a single move.
Secure connections
Every customer gets free, fully automated SSL certificates. Once a domain is onboarded, the certificate is issued and deployed automatically — no manual steps and no extra charge.
All HTTPS connections run on the latest performance and security features, including TLS 1.3 with 0-RTT and an optimised HTTP/3 stack.
Content security features
Protect your content with expiring links that can be further restricted to specific IP addresses. Each resource gets a unique token and secret for generating signed URLs.
Origin Protection proxies sit between your origin and our edge caches, cutting both the load on your servers and the cost of egress traffic.
Allow or block individual IP addresses, countries or regions with straightforward allow and deny rules that take effect immediately.
Content theft stops being a problem. Lock assets to your own domains — hotlink protection only serves requests carrying a valid referrer header.
DDoS and CC attack mitigation
RockCloud runs on Anycast, so a single IP absorbs up to 3 Tbps of attack traffic. Combined with the Game Shield AI engine, malicious CC traffic is identified and dropped within three seconds, keeping your service online throughout.
- A network built for scale
We interconnect directly with 14 Tier-1 carriers and operate CN2 GIA private lines into mainland China. With roughly 15+ Tbps of capacity, mitigation never comes at the cost of delivery speed.
- Purpose-built mitigation
RockCloud built its DDoS mitigation stack on DPDK. Big-data analysis and machine learning work together to detect and block incoming attacks and malicious requests within seconds.
- No speed trade-off
Even while an attack is in progress, your content stays secure and fully reachable for real users. You never have to trade performance for protection.
Put terabit-scale DDoS protection in front of your service