Your Firewall Is Still Running. Is Your Uplink Already Saturated? Server Plus Enterprise DDoS Protection

Enterprise firewalls enforce access control, connection management and security policies. When attack traffic exceeds access-link capacity, legitimate connections may fail even if the firewall has processing headroom. Upgrading on-premises equipment alone may therefore not resolve outages caused by volumetric DDoS attacks.

For websites, APIs, VPNs, hosted servers and public-facing data-center services, assessments must consider more than firewall performance: where is attack traffic mitigated, and how does legitimate traffic return to the enterprise network?

Server Plus uses a Cloudflare® Magic Transit™ protection architecture. Traffic for protected prefixes enters the global Anycast network, where L3/L4 DDoS attacks are identified and mitigated. Legitimate traffic is then delivered through the Server Plus network to the enterprise data center or office.

Global mitigation and customer delivery are separate stages. Cloudflare provides the global protection architecture; the Server Plus team in Taiwan handles requirements, routing design, cutover validation and incident assistance to integrate the service with the existing environment.

Server Plus has achieved ISO/IEC 27001:2022 information security management system certification and provides Taiwan-based technical support for enterprise deployment and operations.

Enterprises can discuss protected services and prefixes, BGP, delivery circuits and cutover arrangements directly with the local team. A designated contact also assists with incidents, extending support beyond plan specifications.

Select delivery based on location, legitimate traffic and redundancy requirements. Server Plus provides delivery through its own ports and evaluates protection alongside actual access conditions.

Clean bandwidth is billed at the 95th percentile. Attack traffic identified and blocked by the protection platform is excluded from clean-bandwidth usage. Legitimate traffic delivered after mitigation is accounted for under the selected plan and agreement.

Legitimate traffic above the included bandwidth is charged at the agreed overage rate. Delivery ports, data-center cross-connects and access circuits are quoted separately so enterprises can distinguish protection, bandwidth and access costs.

For data-center services, enterprise VPNs, public-facing platforms or fixed-prefix protection, send the following information through LINE. Server Plus will help plan protection capacity, routing and delivery.