How traffic reaches your origin

Users do not hit the raw address on your box. They hit a prefix we announce. We scrub. Clean packets leave toward you.

1
Internet to our edge
Clients connect to addressing we announce. Your origin stays off the public blast radius.
2
Always-on scrubbing
Volumetric floods and application-layer junk are filtered as they arrive. There is no button you press after the attack starts.
3
Clean handoff
Surviving traffic goes to your origin. That forwarded rate is the clean bandwidth we bill.

GRE or Cross-Connect

Same scrubbing path. Different last hop. Pick the one that matches the origin.

General L3. A software tunnel from our edge to an IP you control. Fast to stand up. Works from most hosts.

Trade: GRE overhead, and the tunnel still rides your uplink.

A dedicated physical link. Use it when you are in Equinix FR5 or can order a circuit into that facility. Lower latency. No GRE encapsulation.

Trade: physical order time, in exchange for a more reliable handoff.

Overview, attacks, firewall, rate limits, and port requests. Switch views. Click the shot to enlarge.

If the path is clear, the remaining inputs are use case, peak clean Mbps, and which handoff you want.