Fastly DDoS Protection is used to keep any application and API available and performant with an adaptive solution built to automatically and accurately mitigate DDoS at any scale. Fastly DDoS Protection builds tailored rules to adaptively mitigate attacks without impacting legitimate traffic.

Fastly DDoS Protection automatically protects against disruptive and distributed threats to maintain the performance and availability of applications and APIs. The solution leverages Fastly’s global capacity of 350+ Tbps as of June 30, 2024, to absorb massive network layer attacks while using a proprietary, adaptive technique to automatically block malicious application traffic before it impacts protected applications.

Fastly's distributed edge processing and decision-making keep the fight against DDoS attacks away from the user's infrastructure, eliminating latency common in solutions that force traffic through suboptimal centralized scrubbing centers.

Attribute Unmasking

When unexpected volumetric traffic events arise, Fastly’s proprietary Attribute Unmasking technique validates their legitimacy. If malicious, it begins matching the traffic pattern against a comprehensive list of characteristics to identify the attacker and confidently mitigate their attacks, even if they rotate IPs.

Rapid detection is core to Attribute Unmasking. Most attacks quickly scale from zero requests per second (RPS) to millions or hundreds of millions of RPS and often finish less than a minute later. When looking at the attacks Fastly saw from over 90 days of data, the attack is often over by the time a human can be made aware of an attack and equipped to respond.

Attribute Unmasking identifies anomalous attack traffic characteristics for every attack to offer more adaptive protection than rigid rate-limiting policies. This capability also allows it to catch novel attacks without updates. According to Fastly, when 0-day attacks like HTTP Reset caused major incidents throughout the world, Attribute Unmasking automatically derived the anomalous attack traffic characteristics and mitigated the attack.

Attribute Unmasking enables Fastly DDoS Protection to automatically mitigate attacks and reduce false positives as it mitigates sophisticated attacks posing as legitimate traffic and minimizes the impact of maintaining performant protection.

Fastly DDoS is sold as an add-on to Fastly's Edge Cloud Platform, with monthly usage pricing based on non-attack traffic that passes through Fastly's network. The first first 500,000 requests are free, and pricing starts at $1.00 per 10,000 requests, with volume discounts. Users do not pay for mitigated attacks.