Effortless and effective DDoS protection

Your DigitalOcean resources are protected—for free—against Distributed Denial of Service (DDoS) attacks with always-on protection and automated mitigation, so you can run your website and apps without interruption.

Powerful DDoS mitigation

Your DigitalOcean resources are safeguarded from DDoS attacks with free, built-in DDoS protection that works automatically.

Maximize uptime

Keep your cloud resources available with DDoS Protection actively working to block attacks 24/7.

Automatic peace of mind

You're protected against ever-evolving varieties of network-layer DDoS, without any need for manual configuration.

Speedy mitigation

Built into the DigitalOcean cloud, in-network DDoS mitigation defends your resources without having to route traffic to a third party.

Key features

Native, network-level protection

DigitalOcean DDoS Protection monitors network layers 3 and 4 and is built into our cloud.

Automated and intelligent threat mitigation

Common, generalized DDoS attacks are blocked automatically via rules that adapt to attack types, while still allowing legitimate data traffic to pass through.

Protection from many types of DDoS

Volumetric attacks such as UDP floods, ICMP floods, TCP floods, and DNS reflection attacks are covered, plus protocol-layer attacks such as SYN floods, BGP attacks, and ping-of-death attacks.

Works across the DigitalOcean cloud

DDoS Protection covers your DigitalOcean cloud infrastructure, including Droplets, Kubernetes, Managed Databases, Load Balancers, and assigned Reserved IPs, across all our data centers.

Digital world map, with cities highlighted: New York, San Francisco, Toronto, London, Amsterdam, Frankfurt, Bangalore, Singapore, and Sydney.
With constant attack threats on the internet that often aim to take down websites via DDoS, being knocked off line is something I can't risk. That is why I wouldn't hesitate to flick a switch on my DigitalOcean hosted website and have instant peace of mind that someone is protecting me. Minimal fuss, maximum impact.
Kevin Groves

Kevin Groves

Founder, House of Kiya

Frequently asked questions

What is DigitalOcean DDoS Protection?

DDoS Protection is a free, always-on service that safeguards your DigitalOcean cloud resources from a range of generalized, network-layer DDoS attacks to help ensure your apps & websites run without disruption.

Does data traffic leave the DigitalOcean network for mitigation?

No, DigitalOcean DDoS Protection is built into our cloud and mitigation happens within our network so you get powerful protection with no additional latency.

What network layers does DigitalOcean DDoS Protection support?

DigitalOcean DDoS Protection operates in Network (layer 3) and Transport (layer 4) layers of the OSI model. Application layer (layer 7) DDoS Protection is not supported.

What resources are covered under DDoS Protection?

DDoS Protection covers DigitalOcean Droplets, Kubernetes, Managed Databases, Load Balancers, and assigned Reserved IPs.

Is DigitalOcean DDoS Protection a paid service?

DigitalOcean DDoS Protection is available free of charge for all users.

Still have questions?

Have a complex setup or additional questions around pricing? Contact our sales team to get more information on DigitalOcean pricing.

Contact sales

Get started for free

Sign up and get $200 in credit for your first 60 days with DigitalOcean.*

*This promotional offer applies to new accounts only.