DDoS and abuse protection
A Distributed Denial-of-Service (DDoS) attack floods your environment with traffic so that real visitors can no longer reach it. Hosted Power mitigates this at the network and application level.
How attacks are mitigated
-
Rate limiting. TurboShield caps abusive request rates per IP and returns a soft HTTP 429 instead of serving the flood. A cap on concurrent connections per IP is applied only in attack mode: HTTP/2 and HTTP/3 browsers open many parallel streams for a single page view, so a cap at the normal levels would block real visitors. See TurboShield.
-
High availability. On a cluster, the address a service is reached on moves to another member when the member holding it stops responding, so the service stays reachable. This is failover for resilience, not a traffic filter.
-
Blackhole routing. Attack traffic can be routed into a "black hole" and discarded before it reaches the host.
-
Reputation-based blocking. The firewall bans known-bad and repeat-offender IPs automatically.
For very large attacks, a third-party DDoS-protection service (such as Cloudflare) can be added in front for extra capacity.
What to do during an attack
-
Raise the host's TurboShield level to attack while the incident lasts, then return it to medium afterwards - see Configure TurboShield.
-
Block or allow specific IPs from the TurboStack CLI (
tscli firewall block,tscli firewall whitelist). -
If the attack overwhelms the host, contact support - the on-call team can mitigate at the network level and escalate to the cloud provider if needed.