TurtleGuard
ru
Log in Protect a site

DDoS protection for websites and servers

TurtleGuard takes your site's traffic on its own nodes, drops DDoS, bots and exploits, and hands your server only clean requests.

Protect a site How it works
  • 5nodes take traffic
  • 99.95%uptime in the contract
  • 7 daysfree for your first site

Every request passes three layers

Floods die in the node kernel before TLS. WAF rules sort out the rest, and doubtful visitors get a browser check.

L3 / L4

Floods never reach encryption

SYN floods, UDP amplification and junk packets are dropped in the node kernel. The node an attack hits is the node that handles it, and it goes no further.

L7 / WAF

OWASP CRS rules and your own

Injections, scanners and auth bypasses are caught by OWASP CRS 4. Your own rules, countries and limits are built in the panel from ready conditions, like a plain sentence.

ray 8f3a91c2DE

GET /catalog?id=1 UNION SELECT password FROM users

  1. Network
  2. Handshake
  3. Rules1 ms
403OWASP CRS 942100: SQL injection in the id parameter
check

Doubtful requests get a browser check

Strictness rises in steps. A regular visitor passes at once, a doubtful one solves an invisible task, and only those the check did not convince see a captcha.

Check steps: pass, invisible check, slider captcha, block
  1. Passa regular visitor notices nothing
  2. Invisible checkthe browser solves a task in 1-2 seconds
  3. Slider captchaslide the shell plate into place
  4. Blockwith a reason and a ray id in the log

An attack through the eyes of a node

This is the log of one site under attack. Every decision has a reason and a ray id: the visitor sees it on the error page, and you find the request by it.

Your server stays with your host

Point one DNS record at our addresses and traffic flows through the filter. No site migration, no new hosting.

; now: traffic goes straight to the server
- shop.example.net  300  IN  A  203.0.113.10
; after: through TurtleGuard
+ shop.example.net  300  IN  A  <our IP>

NS or CNAME work too. How to connect

5 nodes take traffic 3 more getting ready

An attack is handled where it lands

Anycast brings traffic to the nearest node. Rules, lists and certificates are the same everywhere and update in seconds.

  • MOWMoscow9 ms
  • FRAFrankfurt18 ms
  • AMSAmsterdam21 ms
  • HELHelsinki14 ms
  • STOStockholm11 ms
  • WAWWarsawsoon
  • NYCNew Yorksoon
  • SINSingaporesoon

latency to the node

Everything in one account

Server, domain and traffic protection in one account with one balance.

You pay per site

Bandwidth and limits are written into the plan. If an attack is bigger, we add capacity ourselves at no extra charge.

How many sites need protection?

Your fit
 
 
 
Connect

  1. Free DNS

    Free
     

    Бесплатный DNS-хостинг на наших NS (без проксирования через edge)

      Get Free DNS

    • Basic

      $10
      per month

      Базовая защита для одного сайта

      Legitimate traffic up to 100 Mbit/s

      • До 1 upstream серверов
      • Безлимитное количество поддоменов
      • Поддержка 24ч
      • SLA 99%
      • SSL сертификаты
      • Веб-панель управления
      • Выделенный IP
      Get Basic

    • Standart

      most chosen
      $30
      per month

      Стандартная защита

      Legitimate traffic up to 250 Mbit/s

      • До 3 upstream серверов
      • Безлимитное количество поддоменов
      • Поддержка 12ч
      • SLA 99.5%
      • SSL сертификаты
      • Веб-панель управления
      • Выделенный IP
      Get Standart

    • Premium

      most chosen
      $80
      per month

      Расширенная защита

      Legitimate traffic up to 500 Mbit/s

      • До 10 upstream серверов
      • Безлимитное количество поддоменов
      • Поддержка 4ч
      • SLA 99.9%
      • SSL сертификаты
      • Веб-панель управления
      • Выделенный IP
      Get Premium

    • Enterprise

      $200
      per month

      Корпоративная защита

      Unlimited legitimate traffic

      • До 50 upstream серверов
      • Безлимитное количество поддоменов
      • Поддержка 1ч
      • SLA 99.95%
      • SSL сертификаты
      • Веб-панель управления
      • Выделенный IP
      Get Enterprise

    • Custom

      On request
       

      Индивидуальный тариф под ваши условия

      • Индивидуальные условия
      • Любое количество сайтов
      • Персональный менеджер
      Contact us

    Need dedicated capacity or custom terms? Write to us and we will size it. Terms

    The short answers

    Didn't find yours? Support answers around the clock.

    @turtleguard_cloudcontact@turtleguard.cloud

    How long does it take to connect?
    Usually 10-30 minutes, while DNS updates. Point the NS or one record at us and traffic flows through the filter. No server migration.
    What if an attack exceeds my plan’s capacity?
    Traffic spreads across all nodes, so no single point takes the whole attack. If volume grows we add scrubbing capacity and notify you in the panel. You never pay for the size of an attack.
    The attacker knows my server’s address. Is that a problem?
    Yes, if the server answers everyone. Close 80 and 443 to all but our ranges; the docs have ready rules for nftables and cloud firewalls.
    Is protection included with a server?
    L3/L4 protection comes with every server. Request inspection and L7 rules are part of the site protection plans.
    Can I transfer a domain from another registrar?
    Yes, for most zones. Get the auth code from your current registrar and start the transfer in the panel. A registration year is usually added.
    Do you offer refunds?
    Seven days for protection and servers. Registered domains are non-refundable here and everywhere else.

    Send us a site that is under attack

    We'll connect it for free. If an attack still reaches the server, we'll go through the log and tell you what went wrong.