Aptum logo with purple double ring logomark

What We Do

Somewhere between the performance of dedicated infrastructure and the agility of cloud, is your ideal hybrid solution. We're here to help you find it, so you have the flexibility and freedom you need to succeed.

Exclusive Limited-time Promo

Deploy private cloud, hybrid cloud, or disaster recovery quickly, OR get the premium servers to DIY your own solutions at an incredibly low cost.
Check out the offer →

Resource Hub

ResourcesKnowledge CenterCloud Impact StudyCustomer StoriesBlogs

About Us

Our StoryESGCareersNews
Network & Protection Services

Network DDoS Protection

Aptum’s Network DDoS Protection service provides a vital layer of defense, allowing you to minimize the risk of costly downtime and reputational damage.

Stay Online, Stay Secure

Rising DDoS attacks demand more than just perimeter defenses. Aptum’s enterprise-grade Network DDoS Protection, powered by Arelion and Imperva, stops threats before they disrupt your business—ensuring uptime, security, and peace of mind.

Use Cases

Your Network DDoS protection in action.

SMBs with Lean IT Teams

Gain enterprise-grade DDoS protection with minimal complexity and no need to hire specialized staff. Always-on defense automatically detects and mitigates attacks, preserving uptime and user trust.

High-Traffic E-Commerce and SaaS Providers

Prevent costly downtime and maintain seamless user experiences during peak traffic periods. Continuous DDoS mitigation keeps critical services responsive, safeguarding revenue and customer satisfaction.

Financial Institutions and Other High-Value Targets

Mitigate sophisticated, high-volume attacks aimed at financial transactions or sensitive data transfers. Rapid response ensures uninterrupted service and customer trust, even under intense threat.

Global Enterprises with Distributed Workforces

Maintain reliable connectivity and application access for geographically dispersed teams. By neutralizing large-scale DDoS attacks, Network DDoS Protection ensures productivity and collaboration remain uninterrupted worldwide.

Academic Institutions

Protect critical online learning platforms, research portals, and student information systems from crippling outages. Continuous DDoS mitigation ensures that educators, students, and researchers maintain uninterrupted access to educational resources, fostering a stable and productive academic environment.

Locations

Available Geographies

Network DDoS Protection is available to any Aptum Hosting offering within any Aptum Data Center:

Toronto, ON, Canada

Network DDoS Protection
Specifications

Performance Characteristics

Layer Attack Type Network DDoS Protection
Layer 3: Network NTP / DNS / SSDP Reflection
ICMP Flood
IP / ICMP Fragmentation
Layer 4: Transport Syn Flood
Other TCP Floods (Varying state flags)
UDP Flood
IPSec Flood (IKE/ISAKMP association attempts)
Layer 5 - 7 Session, Presentation, and Application Layer Attacks ✗*

[*] - For Layer 5-7 Protection, a combination of Aptum Managed Firewalls and Managed WAF solutions are suggested as part of a complete DDoS Protection Solution.

Additional Specifications

Always-On Clean Traffic

Your IP addresses are routed through our partner’s high-capacity, globally distributed scrubbing centers during attacks, ensuring that all traffic entering your network is already cleansed of malicious activity. This approach means attacks are automatically mitigated quickly, helping maintain optimal performance and reliability.

Industry-Leading Three-Second Mitigation SLA

Take advantage of a best-in-class Service Level Agreement that guarantees any detected attack—regardless of size or complexity—is mitigated in as little as three seconds. There is no need to alert Aptum when under attack; the system addresses the attack automatically, protecting your infrastructure and preserving user experience.

Robust Network-Layer DDoS Defense

Safeguard your infrastructure against a broad range of volumetric and multi-vector attacks at Layers 3 and 4. Initial setup requires switching to DDoS-protected IP ranges, and once implemented, our DDoS protection helps keep your business online and resilient against evolving network-based cyber threats.

Flexible Protection for Large and Small IP Blocks

Safeguard entire subnets as small as a /27 or large IP blocks without relying on TCP proxies or GRE tunnels. This streamlined approach simplifies deployment, reduces complexity, and ensures efficient, secure traffic routing.

24x7x365 Expert Analysis and Support

Around-the-clock monitoring and mitigation by seasoned DDoS engineers in global Security Operations Centers mean real-time threat analysis, swift response, and ongoing optimization—so you’re never left fighting an attack alone.

Scalable Protection for Growing Businesses

Whether you have fewer than a /24 of IP addresses or large, complex network environments, Aptum’s solution adapts to your evolving needs. Protect numerous destination IPs, entire subnets, or multiple IP-based applications, ensuring you’re always prepared to expand securely.

Low-Latency Global Connectivity

Benefit from multiple cross-connects into our partner’s scrubbing centers. Traffic remains efficiently routed and latency is kept to a minimum, ensuring that legitimate user requests flow seamlessly and your services remain accessible and responsive.

Easier Configuration

Unlike many competitor solutions, our Network DDoS service does not require you to edit/change your MTU settings due to GRE Tunnel implementation. This makes implementation quicker for your environments and avoids non-standard configurations.

Capacities

Aptum's Network DDoS Protection Capacities

Protected IP Addresses

  • To take advantage of our Network DDoS Protection, you will need to use Aptum-protected IPv4 addresses. We offer flexible sizing options, from as small as a /27 to multiple /24s, and each Aptum-provided IP subnet is billed individually.
  • You are welcome to bring your own /24 or larger IPv4 block, and our service can fully protect it. Please note that a per-IP address charge will apply.

Protected Throughput

  • Protected throughput represents the maximum amount of legitimate incoming traffic (in Megabits per second) that can pass through once DDoS attack traffic has been filtered out. You’ll select a throughput tier based on your solution’s requirements. If your incoming traffic exceeds your subscribed tier, Aptum will charge an overage fee on your next invoice.
    • Available Throughput Tiers: 5, 10, 25, 50, 100, 250, 500, and 1000 Mbits
  • If you need more than 1000 Mbits of protected throughput, we can work with you to design a customized protection level that meets your unique needs.

Throughput Overages

  • Your protected bandwidth can exceed your subscribed tier, allowing for occasional bursts without immediately restricting your services. However, this may result in additional charges if usage surpasses your chosen tier. Should this occur, we will contact you to discuss adjusting your tier to better align with your requirements and ensure continued, optimal performance.

Compliance Certifications and Standards

For solutions hosted within Aptum’s facilities, our carrier-neutral data centers across North America and Europe are designed to safeguard your environment. Equipped with multi-layered physical security, 24/7/365 monitoring, and video surveillance, we aim to deliver maximum uptime and connectivity.

All our Data Center Operations are ISO 27001 certified, and our Managed Infrastructure services are audited against the SOC 2 Type II framework. Additionally, many of our locations also hold a PCI DSS certification, helping your business meet compliance requirements.

ISO 270001 certification AICPA SOC 2 certification PCI DSS certification
Testimonials

Here's what our customers say:

Basis technologies logo

“We’re dealing with technology. It’s not all perfect. But Aptum’s managed services team is always there to ensure that things are done well and that we are fully supported when things go wrong. Stuff happens. But I know when it does, I can count on Aptum to fix it.”

Igor Fey
Vice President of Technical Operations, Basis Technologies
Read more
Claremont logo

“The experience is that things just work. When there’s something to be done, it’s done quickly, and it’s done right first time. Don’t underestimate the number of organizations out there, particularly in IT support, that just miss the mark.”

Jonathan Stuart
Delivery Director, DSP
Read more
Get in touch

Ready to take the next step?

Let’s talk. Our experts are just a click away, ready to help you.

Loading...
© Copyright 2025 Aptum