On-premise DDoS protectionTemplass.net runs on your network.

Self-hosted DDoS detection and mitigation software. You install it on your own hardware, it talks to your routers, and your data stays with you. One-time license.

What it does

It watches your flows, spots the attack, and pushes the fix through BGP you already run. When a blackhole is too blunt, it diverts just the attacked address through a scrubber.

  1. Detect

    Flow detection

    NetFlow, IPFIX and sFlow. Per-group pps, bps and flow-rate thresholds, global or per vector.

  2. Mitigate

    BGP RTBH and FlowSpec

    Blackhole and FlowSpec through embedded GoBGP. Prefix enclosure, a never-blackhole whitelist, max announcements and dry run.

  3. Scrub

    XDP scrubbing

    On-demand diversion of the attacked /32 or /128 with vector rules. Clean traffic returns over VLAN or GRE.

Operator dashboard

Built for the NOC. Attacks, mitigations and scrubbing in one place.

Customer panel

Each hosting customer sees their own prefixes and attacks, nothing else.

No artificial limits

Scrub nodes, prefixes, organizations and customers are unlimited. Your hardware sets the ceiling.

All features · Screenshots · Requirements · Docs

Who it is for

Hosting

Hosting, VPS and game hosts

Per-customer groups, RTBH and FlowSpec, XDP scrub, and a panel for each customer.

Access

Regional ISPs and WISPs

Prefix groups, customer-scoped mitigations, and the BGP you already run.

Transit

Carriers and IX-adjacent networks

Detection and mitigation inside your AS. Your data, your peers.

Pay once, run it as long as you like.

A deployment is one controller install. The license key is signed and checked locally on your server. A paid license never expires.

Updates and support cover new releases, security fixes and email support while the plan is active. If you stop, you keep the version you have.

Prices

License, one deployment
€690 once
Updates and support
€190 per year

Buying is by invoice. After payment you get the license key and a private download link by email. MSP and reseller terms go through the same address.

Try it first

Send your company name and a short note about your network. You get a time-limited demo key and the bundle by email. When the demo ends, settings go read-only and running mitigations stay up.

Would you rather not run it yourself? Hosted Templass scrubs on our edge and bills on clean bandwidth.

Compare products