DDoS and abuse protection
A Distributed Denial-of-Service (DDoS) attack floods your environment with traffic so that real visitors can no longer reach it. Hosted Power mitigates this at the network and application level.
How attacks are mitigated
-
Rate limiting. TurboShield caps abusive request rates per IP and returns a soft HTTP 429 instead of serving the flood. It also caps how many concurrent connections a single IP may hold. That cap scales with the TurboShield level (from 160 connections at the lowest level down to 60 in attack mode) and is kept deliberately high so legitimate HTTP/2 and HTTP/3 clients, which open many parallel streams, are not blocked by mistake. See TurboShield.
-
High availability. The platform runs active/passive VIP failover with keepalived: if the active node fails under load, the virtual IP moves to a standby node so the service stays reachable. This is failover for resilience, not an application-layer traffic filter.
-
Blackhole routing. Attack traffic can be routed into a "black hole" and discarded before it reaches the host.
-
Reputation-based blocking. The firewall bans known-bad and repeat-offender IPs automatically.
For very large attacks, a third-party DDoS-protection service (such as Cloudflare) can be added in front for extra capacity.
What to do during an attack
-
Raise the host's TurboShield level to attack while the incident lasts, then return it to medium afterwards - see Configure TurboShield.
-
Block or allow specific IPs from the TurboStack CLI (
tscli firewall block,tscli firewall whitelist). -
If the attack overwhelms the host, contact support - the on-call team can mitigate at the network level and escalate to the cloud provider if needed.