Mitigation in under a second
Attacks are fingerprinted as they start and filtered in-line. Your origin only ever sees the clean share of the traffic.
Arriving at the edgeAttack trafficDelivered to your origin
Enterprise L4 & L7 DDoS protection.
Orbitel Shield absorbs volumetric, protocol and application-layer attacks at the edge, so only clean traffic reaches your servers. Always on, with nothing to install.
- UDP floods
- SYN floods
- DNS amplification
- Memcached reflection
- NTP amplification
- ACK floods
- GRE floods
- HTTP floods
- Slowloris
- TCP state exhaustion
- Carpet bombing
- Botnet traffic
Built to absorb the internet's worst.
Every packet is inspected at the edge closest to its source. Attack traffic is dropped there, long before it can saturate your links.
Simulate an attack
Launch a test flood, watch the traffic chart filter it, and see the alerts land.
Orbitel ShieldAppYesterday at 23:14
Attack ended
UDP reflection flood on hidden IP address
- Peak
- 1.24 Tbps
- Duration
- 4 min 37 s
Orbitel Shield • Edge FRA1
Orbitel Shield AlertsYesterday
Attack ended on hidden IP address
Peaked at 1.24 Tbps over 4 min 37 s. Your origin never saw it.
Orbitel Shield AlertsYesterday
Attack mitigated on hidden IP address
Filtered in 0.48 s. Clean traffic is flowing normally.
Orbitel Shield AlertsYesterday
Attack started on hidden IP address
UDP reflection flood detected at FRA1, filtering engaged.
Zero effort setup
Our team manages all routing and configuration behind the scenes so your protection is fully operational from the moment you come on board, with no technical lift required from your side.
- BGP routing and announcementsHandled by us
- Filtering rulesTuned to your traffic
- Tunnels and failoverConfigured and tested
- Around-the-clock monitoringOur SOC, 24/7
Live in minutes
No hardware and no changes to your stack. Pick how traffic reaches us.
- BGP announcementProtect whole prefixes, from a /24 up
- GRE or WireGuardClean traffic tunneled back to you
- Reverse proxyPoint DNS at us for web apps
Pay for clean bandwidth, nothing else.
Pick the clean speed you need. Every plan protects unlimited IPs and includes a tunnel.
Looking for a custom solution? Talk to salesStarter Pipe
$25/ month
Clean speed50 Mbps- 50 Mbps clean speed
- 1 tunnel included
- Unlimited protected IPs
Get startedExtra tunnels
$15 / tunnel / month
0Standard Pipe
$49/ month
Clean speed150 Mbps- 150 Mbps clean speed
- 1 tunnel included
- Unlimited protected IPs
Get startedExtra tunnels
$15 / tunnel / month
0Pro Pipe
Recommended$99/ month
Clean speed500 Mbps- 500 Mbps clean speed
- 1 tunnel included
- Unlimited protected IPs
Get startedExtra tunnels
$15 / tunnel / month
0Gigabit Pipe
$189/ month
Clean speed1 Gbps- 1 Gbps clean speed
- 1 tunnel included
- Unlimited protected IPs
Get startedExtra tunnels
$15 / tunnel / month
0Multi-Gig Pipe
$349/ month
Clean speed2.5 Gbps- 2.5 Gbps clean speed
- 1 tunnel included
- Unlimited protected IPs
Get startedExtra tunnels
$15 / tunnel / month
0Carrier Pipe
$849/ month
Clean speed10 Gbps- 10 Gbps clean speed
- 1 tunnel included
- Unlimited protected IPs
Get startedExtra tunnels
$15 / tunnel / month
0
Attacks end at our edge. Your traffic doesn't.
Every packet is fingerprinted and filtered in-line across the Orbitel Shield network, so floods never reach your links and real users never notice.
Questions, answered.
Can’t find what you need? Talk to an engineer.
What does “clean speed” mean?
It’s the bandwidth of legitimate traffic we deliver to you after filtering. Attack traffic is dropped at our edge and never counts toward it, so a 10 Gbps plan gives you 10 Gbps of real users, however big the flood is.
Am I billed for attack traffic?
No. Every plan is a flat monthly price. Attacks are absorbed at our edge at no extra cost, whether they last a minute or a week.
What happens if my clean traffic goes over my plan?
Traffic above your plan’s clean speed is rate-limited to the plan, never dropped as an attack. You can move up a tier at any time and the change applies right away.
How does the tunnel work?
We deliver your filtered traffic to your server over a GRE or WireGuard tunnel. Every plan includes one tunnel, and extra tunnels are $15 each per month.
How long does setup take?
Most customers are protected the same day. Our team handles the routing and configuration with you, so there’s nothing to install and no hardware to buy.
Can I change plans or cancel?
Yes. Upgrade or downgrade whenever you need to. Plans are month to month with no long-term contract.
Do you protect game servers?
Yes. Filtering covers both TCP and UDP, including the reflection and amplification floods game servers attract, without adding noticeable latency for players.
I’m under attack right now. What do I do?
Go to our Under attack page and our team will get you onboarded and protected as fast as possible.