NorthShield mitigation platform

Услуги

Три варианта подключения под вашу задачу.

IP Transit через cross connect, удалённая защита по GRE/IPIP или ПО на вашем оборудовании — всё на одной XDP-платформе.

3Tbps+

Total network capacity

3

Global PoPs

XDP

Line-rate packet filtering

3

Service deployment models

Service lineup

Choose how NorthShield connects to your infrastructure.

Every service below uses the same mitigation philosophy: drop hostile traffic early, preserve clean paths, and give your team readable incident context instead of noisy firewall output.

Fiber patch panel used for IP Transit cross connect handoff
Cross connectLondonFrankfurtIstanbul

IP Transit

Take capacity over a facility cross connect into NorthShield. Circuits are available from Telehouse West in London, Equinix FR7 in Frankfurt, and Datacasa in Istanbul, with optional protected transit on the same path.

  • Cross connect at London Telehouse West
  • Cross connect at Frankfurt Equinix FR7
  • Cross connect at Istanbul Datacasa
  • Optional DDoS-protected transit
Network operations room representing protected GRE and BGP transit
GREBGPBYOIP

Remote Protection

Clean traffic is delivered over GRE or IPIP tunnels with BGP on our anycast network. Announce your prefixes, bring your own IP or ASN, and keep attack volume off your upstream.

  • GRE and IPIP tunnel connectivity
  • BGP prefix announcement on protected edge
  • BYOIP and BYOAS onboarding
  • Filtered transit before network handoff
DDoS scrubbing edge infrastructure prepared for on-premise deployment
On-siteXDPYour hardware

On Premise

Run the same XDP and eBPF filtering stack on appliances you own and operate, ideal for private networks, regulated environments, and teams that need mitigation inside their facility.

  • Software deployed on customer-owned hardware
  • XDP filtering inside your network boundary
  • Local policy control and operational ownership
  • Engineering support for sizing and rollout
Website and API security protected by a web application firewall
WAFJS ChallengeCAPTCHABot control

Website Protection

Proxy web traffic through NorthShield to inspect requests before they reach your origin. Apply managed WAF rules, rate limits, bot controls, JavaScript Challenge, or CAPTCHA Challenge according to risk.

  • Managed web application firewall
  • JavaScript Challenge for suspicious clients
  • CAPTCHA Challenge for higher-risk traffic
  • Origin shielding and request rate controls

Global network

3Tbps+

Total mitigation capacity

3 active points of presence

United Kingdom flag

United Kingdom

London

Germany flag

Germany

Frankfurt

Türkiye flag

Türkiye

Istanbul

NorthShield fiber-connected network points of presence across Europe and Turkey

Filtering model

Layered decisions from packet to request.

NorthShield does not rely on a single choke point. We combine early packet drops, programmable kernel flow analysis, and Layer 7 inspection so each attack type is handled where it is cheapest, fastest, and least disruptive to legitimate users.

  1. 01Volumetric floods are handled before userspace with XDP.
  2. 02eBPF logic tracks flow shape without heavy proxy overhead.
  3. 03Layer 7 filters abusive HTTP behavior near the edge.
  4. 04Clean traffic continues through the service model you selected.
Fiber patch panel connected to NorthShield network infrastructure

Included

More than rules on a dashboard.

We help map your exposure, understand traffic patterns, and tune the policy set that protects your actual service instead of a generic template.

Request assessment
  • Network exposure and DNS review
  • Protocol and port mapping
  • XDP/eBPF mitigation policy baseline
  • Layer 7 behavior threshold tuning
  • Attack event summaries
  • Routing and capacity recommendations
  • Launch window support
  • Clear escalation contacts
NorthShield engineering and mitigation routing operations

Engineering details

Built for fast mitigation decisions.

The fastest attack response is the one that happens before your network notices. Our stack prioritizes early classification, readable outcomes, and deployment models that match real operator workflows.

Packet economy

Drop obvious bad traffic early to protect CPU, sockets, and application capacity during sustained floods.

Protocol precision

Apply different policy to game tunnels, BGP transit, and on-premise service edges based on actual traffic shape.

Response clarity

Document attack vectors, thresholds, routing changes, and recommended improvements after each incident.

Talk to engineering

Protect the service, not just the server.

Tell us what protocols you run and where attacks hurt most. We will design the right filtering path across XDP, eBPF, and Layer 7 controls.

Design my service plan