Trusted by market leaders in Uzbekistan
Managed L3/L4 DDoS protection in always-on mode. Malicious traffic is filtered continuously, with no need to enable protection manually during an attack.
Trusted by market leaders in Uzbekistan
You pay for the protected channel — attack volume never affects your bill. Choose the bandwidth you need to protect.
UzCloud Anti-DDoS protects business infrastructure from L3/L4 DDoS attacks, keeping online services stable and available to your customers.
Portals and information systems stay available during network DDoS attacks aimed at overloading channels and infrastructure.
Payments, transfers, and access to services keep working when network traffic comes under a DDoS attack.
Websites and online services remain available during network DDoS attacks targeting the infrastructure.
Remote access, telephony, and network connections stay available during attacks on the network infrastructure.
A DDoS attack at the network and transport layers (L3/L4) is a volumetric attack: attackers flood the communication channel and network equipment with a massive number of packets (SYN, UDP and ICMP floods, amplification), exhausting bandwidth and infrastructure resources. As a result, websites, services and communication channels become unavailable to legitimate users.
The UzCloud Anti-DDoS service filters such traffic at the network edge — in the IPSC and at the cloud ingress — before it reaches your infrastructure. Malicious packets are dropped automatically, while legitimate traffic passes through with no added latency or loss of availability.
The service continuously analyzes network traffic, detects DDoS attacks, and automatically filters malicious traffic before it reaches the client's infrastructure.
UDP Flood, TCP Flood, SYN Flood, and ICMP Flood — detection and filtering of attacks aimed at overloading channels and network resources.
Filtering of malformed IP fragments, spoofed IP addresses (IP Spoofing), and unwanted multicast traffic.
Traffic Shaping and Rate-based Blocking help limit anomalous traffic and keep network resources available to legitimate users.
Access restriction by country, region, and autonomous system (ASN) to reduce the risk of attacks from specific directions.
Block Malformed SIP — blocking of malformed SIP packets. SIP Request Limiting — limiting the number of requests from a single source to protect IP telephony from SIP Flood.
Your infrastructure is reliably protected under the Inline model: all incoming internet traffic continuously passes through the advanced NETSCOUT Arbor filtering system before it even reaches the UzCloud network.
In the event of a DDoS attack, the system automatically identifies the threat and applies the necessary protection policies on the fly. For large-scale incidents, the external Scrubbing Center is instantly engaged, so only clean, legitimate traffic reaches your servers while business processes continue running without disruption.
Location
Equipment and traffic filtering centers are located within Uzbekistan — reducing processing latency.
NETSCOUT Arbor
The solution is built on the carrier-grade NETSCOUT Arbor platform.
Inline Architecture
All incoming traffic is filtered before it reaches the client's resources.
Fault Tolerance
The fault-tolerant Active-Active architecture ensures continuous operation of the protection system.
Speed
Mitigation activates within seconds, without accumulating traffic statistics over a long period.
Pricing
Attack volume doesn't increase your bill: pricing is based on the volume of clean traffic that passed filtering.
Find answers to common questions about our services.
The system detects and blocks DDoS attacks starting from the first malicious packet. The carrier-grade NETSCOUT Arbor solution activates mitigation within seconds, without waiting to accumulate traffic statistics.
If your business depends on online services, protection is needed. Typical sectors: e-commerce, SaaS, gaming, financial services, media. The cost of protection is usually lower than the losses from a single successful attack.
During a DDoS attack, your bill doesn't increase: pricing is based on the volume of legitimate traffic that passed filtering. Attack volume has no effect on cost.
Yes, when using an Uzbektelekom communication channel, the service can be provided for the client's infrastructure at their own site. Connection feasibility is determined based on the results of a technical survey.
Yes. Managed Network Protection secures any service hosted in UzCloud infrastructure at the L3/L4 levels, including additional protection mechanisms for SIP/VoIP infrastructure (Block Malformed SIP, SIP Request Limiting).
The "Basic" plan scales in increments of 100 Mbps. Once it reaches 1 Gbps, the channel switches to the "Industrial" plan, after which scaling continues in increments of 1 Gbps.
Contact UzCloud technical support (24/7). The system is already operating in protection mode, and engineers will help configure specific rules and analyze the incident.
Get a personalized commercial proposal for UzCloud Managed Network Protection (Anti-DDoS).
