20% off your first order with code:
01 / How It Works

Before the Attack
Reaches You

Traffic headed for your server passes through TRSHIELD first. Attack traffic is removed along the way, and only clean traffic reaches your server. You don't have to do anything.

  1. 01

    Met closest to the source

    TRSHIELD's anycast network meets attack traffic at the point closest to its source, before it can travel towards your server.

  2. 02

    Filtered layer by layer

    Traffic is filtered at L3, L4 and L7: attack packets are removed and legitimate traffic continues on its way.

  3. 03

    Watched in both directions

    Outgoing traffic is analyzed as well as incoming traffic, so subtle attack types can be filtered out before they reach you.

  4. 04

    Clean traffic reaches your server

    Your visitors and players stay connected, and the protection adds less than 1 millisecond of latency.

02 / Layers

Filtering on
Three Layers

DDoS attacks are not all alike: some try to flood your link with volume, some exhaust your connections and some look like an ordinary visitor. That is why TRSHIELD filters traffic separately at L3, L4 and L7.

All this filtering adds less than 1 millisecond of latency to your traffic.

  • L3

    Network layer

    Attack traffic at the IP level that tries to flood your link with volume. It is met on the network before it reaches your server.

  • L4

    Transport layer

    Connection and packet floods over TCP and UDP. Attack flows are filtered out while the connections that keep your service online are preserved.

  • L7

    Application layer

    Attacks that imitate the application's own protocol and look like ordinary traffic. This traffic is filtered with protocol-specific profiles.

03 / Two-Way

Incoming,
and outgoing.

TRSHIELD analyzes incoming and outgoing traffic together, so subtle attack types can be filtered out before they reach you.

On Every Package

Standard.
No extra fee.

  • Included with every TREAS package, nothing to buy separately
  • No setup or configuration needed
04 / Client Area

You're in
Control

DDoS protection works on its own. If you want more, use the Firewall tab of your server in the Client Area to choose which ports are open to the outside and to monitor attacks.

Per-IP firewall

On an IP address where you turn the firewall on, every port without a rule is closed to the outside. Your SSH/RDP access port stays open so you can still connect to your server.

Open ports for what you run

When you open a port, you first choose what you are running: a website, a game server, a database… The protocol comes from the profile you choose, and the default port is filled in for you.

Tune the profile to your server

On profiles that offer settings (Minecraft, for example), you can change values such as the verification method, thresholds and enforcement mode in the panel. In observe mode no one is blocked and only logs are kept; once you are confident, you switch to block mode.

Attack history

Lists the attacks detected on your IP addresses over the last 7, 30 or 90 days, with their peak volume and duration. An ongoing attack is shown separately in the panel and marked "Protection applied" once it ends.

Attack alerts

When an attack targeting your server is detected, you are notified by email; the link in the email takes you straight to the Firewall tab of your service.

Protected with the firewall off

DDoS filtering works even if you never turn the firewall on. The firewall only decides which ports your server can be reached on.

05 / FAQ

Frequently Asked
Questions

Do I pay extra for DDoS protection?
No. TRSHIELD DDoS protection is standard on every TREAS package; there is nothing to buy separately or add to your package.
Do I need to change any settings to turn protection on?
No, DDoS protection needs no configuration. The firewall and port rules in the Client Area are optional; attack traffic keeps being filtered even if you never use them.
Does the protection affect my server's speed or latency?
The protection adds less than 1 millisecond of latency to your traffic. Your legitimate traffic passes through filtering and keeps reaching your server.
What kinds of attacks does it protect against?
Traffic is filtered at L3 (network), L4 (transport) and L7 (application). Incoming and outgoing traffic are both analyzed, so subtle attack types can be filtered out before they reach your server.
Where is attack traffic met?
TRSHIELD's anycast network meets attack traffic at the point closest to its source. Protection capacity is 12 Tbps.
How will I know I'm under attack?
You are notified by email when an attack is detected. In the attack history on your server's Firewall tab in the Client Area, you can also see an attack's peak volume, its duration and whether it is still ongoing.
Will I lose access to my server if I turn the firewall on?
No. When the firewall is on, ports you have not defined are closed, but your SSH/RDP access port stays open. Just open the ports of services reached from outside, such as a website or a game server, in the panel.

Start
Protected

TRSHIELD DDoS protection comes as standard with every TREAS package. Browse the packages, and if you have a question, write to us.

Contact

Dokunmatik Ekran Teknolojileri Bilişim İnşaat Tic. Ltd. Şti.
Hürriyet Mahallesi Altın Sokak No: 35/B Bahçelievler, İstanbul