DDoS Protection & Mitigation
Krypt’s DDoS protection & mitigation solution works for all new bare metal and cloud server orders where customers are assigned specific IP address ranges that have anti-DDoS protection.
Our DDoS protection & mitigation solution can sustain over 1800+Gbps of traffic from all over the world. Similar to the way a CDN works, origin DDoS traffic is sent to local scrubbing centers that are distributed around the globe to mitigate and clean bad traffic. Only good, clean traffic is sent back to Krypt’s network and down to your rented server. Our DDoS protection & mitigation solution comes in 100Mbps and 1Gbps clean traffic packages.
|CLEAN TRAFFIC||PRICE PER MONTH|
|EDGE (COMPACT)||EDGE (LARGE)|
|Firewall Performance (Gbps)||3||9.7|
|Concurrent Sessions||64,000||1 million|
|SSLVPN Client Access||Not Available||Not Available|
|IPSec Site to Site VPN||✓||✓|
|Private VLAN Included||✓||✓|
|Price Per Month||$35||$75|
FortiGate Firewalls for Dedicated Servers
Krypt offers dedicated hardware appliance firewalls from Fortinet with ranging performance and features. The FortiGate firewall can be utilized to protect numerous Krypt dedicated servers in your account.
We typically deploy the FortiGate firewall in transparent mode and it will drop bad connections as they come in. The FortiGate can also be deployed in traditional NAT deployment where the public IPs are bound to the external interface of the FortiGate firewall and the servers have internal IP addresses. This offers the best protection and minimizes your server’s exposure to the public Internet.
We also offer an additional UTM (Unified Threat Management) license upgrade which enables Next-Generation Firewall (NGFW) feature sets such as Anti-Virus, Anti-Spam, and Intrusion Prevention (IPS). Each dedicated instance or virtual domain/VDOM instance comes with direct management access to make changes directly.
|Firewall Performance (Gbps)||2.5||7.4|
|Concurrent Sessions||1.8 million||2 million|
|UTM/NGFW Throughput (Mbps)||220||360|
|IPSec Client and Site to Site VPN||✓||✓|
|Private VLAN Included||✓||✓|
|Maximum Number of Dedicated Servers||3||10|
|Basic Firewall (Non UTM/NGFW) Price Per Month||$100||$250|
|Advanced Firewall (with UTM/NGFW) Price Per Month||$150||$450|
CloudFlare works in conjunction with Krypt hosting services by caching content closer to your customers through their Global Content Delivery Network (CDN) while protecting your website with Web Application Firewall features such as blocking SQL injections and mitigating DDOS attacks.
CloudFlare works best when the domain’s DNS is handled through CloudFlare’s anycast DNS network. CloudFlare has optional plugins to popular control panels like cPanel, Odin Plesk, WHMCS, Hostbill, and more.
CloudFlare’s intelligent caching system also means you save bandwidth—and money—and decreases the load on your servers, which means your web application will run faster and more efficiently than ever. On average, CloudFlare customers see a 60% decrease in bandwidth usage, and a 65% in total requests to their servers. The overall effect is that CloudFlare will typically cut the load time for pages on your site by 50% which means higher engagement and happier visitors.
CloudFlare’s security protections offer a broad range of protections against attacks such as DDoS, hacking or spam submitted to a blog or comment form. What is powerful about CloudFlare’s approach is that the system gets smarter as more websites join the CloudFlare community. CloudFlare analyzes the traffic patterns of hundreds of millions of visitors in real time and adapts the security systems to ensure good traffic gets through and bad traffic is stopped.
- Fast and powerful DNS
- Content Delivery Network (CDN)
- Website optimization
- Security and Web Application Firewall
- Analytics and reporting
- Universal SSL support
|CLOUDFLARE FREE||CLOUDFLARE FIREWALL||CLOUDFLARE PREMIUM|
|Features||- CDN - Threat Blocking||- All Free Features - Web Application Firewall (WAF)||- All Firewall Features - Advanced DDoS Mitigation|
|Analytics Refresh||24 hours||15 minutes||15 minutes|
|Price Per Month||$0||$18||$180|
* Reseller Discounts can not be applied to CloudFlare Firewall addon services
|Load Balancer Throughput - L7 Proxy Mode (Gbps)||2.2|
|Load Balancer Connections/sec - L7 Proxy Mode||46,000|
|Load Balancer Concurrent Connections - L7 Proxy Mode||8,000|
Our Basic load balancer comes in two flavors in both software and hardware for cloud servers. Basic Load Balancing solutions includes:
- 1 static IP VIP
- 1 TCP/IP port load balanced
- Least connection predictor
With Advanced load balancing, you get more customized options, including built-in High Availability so you do not have to worry about a single point of failure. Advanced load balancing comes with:
- Up to 10 static IP VIP’s
- Up to 10 TCP/IP ports load balanced
- Connection throttling
- Various predictor methods
- Session persistences
- Layer7 health checks
- Built-in High Availability
Krypt has partnered with Webroot, a Gartner Magic Quadrant Visionary Endpoint Security provider. Webroot’s unique approach to anti-virus and anti-malware incorporates a continuous analysis and correlation methodology to monitor, classify, categorize, and assess. Webroot’s BrightCloud Threat Intelligence platform utilizes advanced machine learning algorithms, offering speed, scale, and accuracy.
BrightCloud Threat Intelligence also correlates data against billions of URLs, domains, IP addresses, file behavior records, mobile apps, and sensors. Webroot’s engine consumes less than 10% CPU resources when running a file scan because the heavy lifting is done in the cloud. Add Webroot next-generation Endpoint Security to your bare metal or cloud server for a low cost per month per server.