Distributed Denial-of-Service (DDoS) Protection for Megaport Internet

attacks attempt to overwhelm a target with large volumes of traffic, making it unavailable to legitimate users. Megaport offers DDoS protection as an optional service for Megaport Internet connections. DDoS protection monitors traffic patterns and, depending on the protection option selected, either alerts you to potential attacks or automatically mitigates them. DDoS protection is enabled at the account level and applies to all eligible Megaport Internet connections under your account. DDoS protection is available only for Megaport Internet connections at eligible locations. When DDoS protection is enabled for your account, it is automatically applied to new Megaport Internet connections at eligible locations. If DDoS protection becomes available at an additional location, it is also automatically applied to existing eligible connections at that location.

​

Features and benefits

DDoS protection for Megaport Internet connections provides these benefits:

• Quick to enable — Enable DDoS protection from the Portal. Protection applies in under 60 seconds.
• Helps keep your network up under attack — In Protecting mode, Megaport blocks malicious traffic and delivers legitimate traffic to your connection.
• Stays on the Megaport network — Megaport scrubs attack traffic on its own network, so your traffic does not detour across the public internet to a separate vendor.
• Flat, predictable cost — You pay a monthly add-on for each connection, set by the rate limit of the connection. Attack size and attack count do not change your bill.
• You choose the mode — Monitoring mode detects attacks without blocking them, allowing Megaport to establish a baseline of your normal traffic patterns before you enable Protecting mode. Protecting mode detects and blocks attacks. You can switch between modes at any time.
• Cancel any time — Charges end on the cancellation date. The add-on does not add to your early termination fee (ETF).

For more information about DDoS billing and invoicing, see Billing Overview.

​

Supported customer connectivity types

DDoS protection is available for Megaport Internet connections that use these customer connectivity types:

• Dedicated Internet Access (DIA)
• Border Gateway Protocol (BGP)
  If you use BGP with Megaport Internet and have multiple upstream providers, Megaport DDoS protection applies only to traffic routed through Megaport. Traffic received through other upstream providers is not protected or mitigated by Megaport DDoS protection.

​

Enabling DDoS protection

DDoS protection is enabled at your account level. When you enable DDoS, all eligible Megaport Internet connections under your account will be protected. To enable DDoS protection for your account

1. Log in to the and choose Services.
2. Click Add Service.
3. Click DDoS protection.
   If DDoS is already enabled for your account, the DDoS protection option will be grayed out.
4. Select the Operational mode (Monitoring mode or Protecting mode) for your Megaport Internet connection. For more information, see DDoS operational modes. The Portal displays eligible Megaport Internet connections, indicating which have DDoS protection enabled and showing the associated add-on pricing. Connections that are not covered by DDoS protection are also listed for reference.
5. Click Add DDoS protection.
6. Click Review Order to proceed.
7. Click Order Now to complete the process.

The DDoS protection service will appear as a service in the under Services.

​

DDoS operational modes

DDoS operational modes allow you to customize the level of protection for your Megaport Internet connection based on the expected traffic patterns and potential threat landscape. The available operational modes are:

• Monitoring mode — The DDoS protection system monitors traffic and generates alerts for potential attacks but does not actively mitigate them. This mode is useful for understanding normal traffic patterns and tuning protection settings.
• Protecting mode — The DDoS protection system actively mitigates detected attacks, rerouting and scrubbing malicious traffic to protect the Megaport Internet connection. This mode provides active defense against DDoS attacks.

You can switch between the different operational modes based on your requirements and the observed traffic patterns for your Megaport Internet connection. To switch the DDoS operational mode for your Megaport Internet connection

1. Log in to the and choose Services.
2. Select the DDoS protection service from the list of services.
3. Select the Configuration tab.
4. Select the DDoS operational mode for your Megaport Internet connection.
5. Click Save.

​

Canceling DDoS protection

If you cancel DDoS protection for your account, all eligible Megaport Internet connections will no longer have DDoS protection applied. Any existing DDoS protection add-on charges will be removed, and the final charges will appear on your next invoice. To cancel DDoS protection for your account, delete the DDoS protection service from the list of services. To cancel DDoS protection for your account

1. Log in to the and choose Services.
2. Find the DDoS protection service in the list of services then click Delete.

​

When a protected connection terminates

When a protected Megaport Internet connection terminates, DDoS protection coverage for that connection ends. This applies whether the connection terminates on its own or as part of terminating the Port, MCR, MVE, or NAT Gateway to which it is attached. The recurring DDoS protection add-on charge for that connection also ends. If you terminate a protected connection before the end of its contract term, the early termination fee (ETF) is calculated based only on the connection price, excluding DDoS protection charges. Charges for DDoS protection stop on the termination date. The DDoS protection product itself and every other protected connection stay unaffected. The product remains live and continues to protect the rest of the connections. For more information, see Terminating a Megaport Internet Connection.

​

Moving a Megaport Internet B-End

When you move the B-End of a Megaport Internet connection covered by DDoS protection, coverage follows the connection to its new B-End if the new B-End is on a DDoS-capable transit port in the same metro area. For more information, see Moving VXCs.

​

DDoS billing

DDoS protection is billed as an add-on service for each eligible Megaport Internet connection. The monthly rate is based on the rate limit of the connection. You can view the DDoS protection Monthly Rate in the Megaport Internet connection summary during the connection creation process. On your monthly invoice, the DDoS protection add-on charge will be listed separately for each eligible Megaport Internet connection.

​

Helpful references

• Creating a Megaport Internet Connection for an MCR
• Creating a Megaport Internet Connection for an MVE
• Creating a Megaport Internet Connection for a NAT Gateway
• Creating a Megaport Internet Connection for a Port
• Megaport Internet Pricing and Contract Terms
• Megaport Internet Routing Guide
• Monitoring Ports, VXCs, Megaport Internet, and IXs
• Terminating a Megaport Internet Connection
• Troubleshooting Megaport Internet Connectivity
• Understanding the Services Page
• VXC, Megaport Internet, and IX Billing