SkyGuard DDoS protection
Attack filtering in Poland, without cutting off your addresses.
- L3/L4/L7 filtering without blackholing
- Scrubbing in Warsaw and Wrocław
- Protection for hosting and carrier networks
An infrastructure partner for ISPs, hosting providers and businesses
Our own network, DDoS protection and IT services from one partner
We protect against DDoS attacks on our own network and take over care of your IT. We match the connection, protection and scope of support to your infrastructure.
AS202520
Our own network
Open peering policy and presence at Polish internet exchange points.
2
Scrubbing centres in Poland
Warsaw · Wrocław, linked by three independent routes.
400 Gbps
Clean bandwidth after filtering
From 100 Mbps to 400 Gbps, sized to the customer's traffic.
9 Tbps
Largest attack mitigated
Absorbed on our infrastructure without blackholing customer addresses.
How it works
The attack stays in the scrubbing centres, clean traffic reaches you
- 01
Traffic enters through our network
We announce your prefixes from the SkyPass network, so all traffic, including an attack, reaches us first.
- 02
Filtering in Warsaw and Wrocław
Scrubbing clusters filter traffic at layers L3/L4/L7 and drop the attack in real time, without blackholing your addresses.
- 03
Clean traffic to your infrastructure
Cleaned traffic returns to you over a tunnel, a BGP session or a direct link.
Why SkyPass
Infrastructure you can verify before you sign
Check the network in PeeringDB and Looking Glass, and see how the protection performs in the client panel.
- 01
Network, scrubbing and NOC in one pair of hands
Our own AS, scrubbing clusters and NOC. When a problem sits between services, you do not have to reconcile several vendors.
- 02
Experience from the most attacked industry
We have been protecting game servers for years, which is why we tune filtering profiles to specific games and protocols.
- 03
Report and traffic capture after an attack
After an attack you receive a report, and the panel keeps the attack history and a downloadable tcpdump capture.
- 04
Tests on your own traffic before you commit
You test SkyGuard on your own traffic, without affecting production, before you sign a longer contract.
Hardware and technologies we use
Anycast network
The attack is spread over many locations, not a single point
Our network is anycast in many locations, so an attack does not hit a single place but is spread over many entry points.
- 01
Many entry points
Traffic from different directions enters the network in different places.
- 02
Filtering at the edge
Part of the attack is dropped close to the source, not at one central point.
- 03
Less load on any single point
Each location takes only a fraction of the attack volume.
The same infrastructure under production load
IceHost (Minecraft servers) and SkillHost (VPS, VDS and dedicated servers) run on the same network and protection every day.
Solutions
Three areas, one partner
DDoS protection, our own network and care for your company's IT from one partner.
AS202520 network and peering
Connect to the SkyPass network remotely or physically in the data centres.
- Open peering at Polish internet exchanges
- Cross-connects in data centres
- GRE tunnels and VLANs to the SkyPass network
IT services for businesses
On site in Wrocław and Kraków, remotely across Poland and the EU.
- Server and network administration
- IT outsourcing and DevOps
- Cloud and Backup as a Service
Trusted in the industry
Protection valued by ISPs and hosting brands
SkyGuard is used by ISPs and hosting brands for which downtime during an attack is a real loss. Instead of logos, we show what you can verify yourself.
ISPs and carriers
Carrier networks with BGP integration and per-prefix policies. Customers see how well the filtering works on their own graphs.
Hosting brands and game platforms
Filtering profiles for game engines and protocols.
Recognised in the ISP community
Open peering, presence at Polish internet exchanges and a public AS202520 record in PeeringDB.
How we start
From a conversation to ongoing care in three steps
We start from your infrastructure and requirements, not from a price list.
- 01
Conversation and analysis
We get to know your topology, peak traffic and requirements, then propose a protection variant or a scope of IT support with an offer.
- 02
Configuration and testing
We set up tunnels, BGP sessions and filtering policies, or take over your IT in stages. We run tests without affecting production.
- 03
Ongoing care
Active protection with 24/7 NOC monitoring, or ongoing IT care with regular reports.
You can test SkyGuard protection on your own traffic before signing a longer contract.
FAQ
Questions that come up before the first conversation
Answers for the people who decide on the budget and for the engineers who will implement it.
Blog
Latest articles
We write about networking, DDoS protection and infrastructure, based on our day-to-day work.
7 min readpl
Rozliczenie 95/5 w telekomunikacji: jak to działa i po co
Jak operatorzy liczą 95. percentyl łącza, ile godzin szczytu w miesiącu nie wchodzi do rachunku i kiedy 95/5 opłaca się bardziej niż rozliczenie po transferze albo stałe pasmo.
6 min readpl
Anycast: co to jest i co daje w trakcie ataku DDoS
Jak działa anycast w BGP, czym różni się od unicastu i dlaczego sieć rozgłaszana z wielu lokalizacji przyjmuje atak DDoS lepiej niż pojedynczy punkt wejścia. Zalety, ograniczenia i przykład z sieci SkyPass.
8 min readpl
Atak DDoS: co to jest i dlaczego warto być przygotowanym
Czym jest atak DDoS, jak działają ataki wolumetryczne, protokołowe i aplikacyjne, ile kosztuje brak przygotowania i co zrobić, zanim atak się zacznie. Z przykładem z sieci operatora ISP.
Contact
Let's talk about your infrastructure
Describe what you protect or maintain, and we will propose a service variant and connection method.
After you send the form, we come back to you with questions about the details or a proposal for the next step: a call, tests or an offer.