Cloudku DDoS Protectionstay online under attack.
DDoS protection for websites, servers, and networks, powered by StormWall with a scrubbing point in Jakarta. Activated and supported by the Cloudku team.
DDoS Protection for Websites
L3–L7 DDoS protection and a WAF for websites, online stores, and web applications. Traffic is routed through the filtering network via DNS, with no changes to your servers.
- L3–L7 attack filtering with no limit on attack size
- Essential WAF: GeoIP, header & path filters, IP lists
- Antibot to stop malicious bots
- Free SSL, HTTPS & HTTP/2
- Always-on or on-demand mode
- Analytics dashboard and attack history
- 1 domain
- 25 Mbit/s clean bandwidth
- First response < 3 hours
- 98% uptime SLA
- 1 or more domains
- From 50 Mbit/s clean bandwidth
- First response < 60 minutes
- 99.2% uptime SLA
- Load balancing
- Multiple domains
- 50+ Mbit/s clean bandwidth
- First response < 15 minutes
- 99.5% uptime SLA
- Advanced Antibot & dedicated IP
DDoS Protection for Servers
TCP/UDP protection for non-web services such as game servers, VoIP, applications, and VPS. Connected via IPIP/GRE tunnel or proxy.
- L3–L5 protection for TCP and UDP
- All ports, no limit
- Connect via IPIP/GRE tunnel or proxy
- Customisable filtering profiles
- Portal with real-time analytics and PDF reports
- 50 Mbit/s clean bandwidth
- Attack capacity up to 600 Gbps
- Response within 60 minutes
- 99.2% uptime SLA
- 50 Mbit/s clean bandwidth
- Unlimited attack capacity
- Response within 30 minutes
- 99.5% uptime SLA
- 600 Mbit/s clean bandwidth
- Unlimited attack capacity
- Response within 15 minutes
- 99.9% uptime SLA
DDoS Protection for Networks (BGP)
Protect your entire IP prefixes over BGP. Built for ISPs, hosting providers, and organisations with their own ASN.
- Prefix announcement over a BGP session
- Connect via IPIP/GRE tunnel, IX, or physical link
- Always-on, on-demand, or customer-side DDoS sensor
- Three-stage filtering: edge routers, hardware filters, precision filters
- DNS server protection, symmetric or asymmetric routing
- 200 Mbit/s clean bandwidth
- Attack capacity up to 600 Gbps
- Response within 60 minutes
- 99.2% uptime SLA
- 200 Mbit/s clean bandwidth
- Unlimited attack capacity
- Response within 30 minutes
- 99.5% uptime SLA
- 600 Mbit/s clean bandwidth
- Unlimited attack capacity
- Response within 15 minutes
- 99.9% uptime SLA
One-time physical connection fee (if connecting physically): $250.
Prices are StormWall list prices per month in US dollars. Your final price and billing currency are confirmed in a formal quote from Cloudku.
Global-scale filtering, local support.
Scrubbing in Jakarta
StormWall operates a filtering point in Jakarta, so traffic from Indonesia can be cleaned close to its users with low added latency.
Over 8,000 Gbps of capacity
A global filtering network across Asia, Europe, the Middle East, and the Americas.
No per-attack fees
Pricing is based on the clean traffic you use, not on how large or how frequent attacks are.
A local partner on the ground
Onboarding, activation, and technical support from the Cloudku engineering team in Surabaya.
Live in three steps.
- 1
Talk to us
Tell us what needs protecting: a website, a server, or your whole network. We help you choose the right plan.
- 2
Connect
Point DNS (websites), set up a GRE/IPIP tunnel (servers), or bring up a BGP session (networks). We guide every step.
- 3
Stay online
Traffic flows through the filtering network. Watch blocked attacks in real time from the dashboard.
Frequently asked questions
What is a DDoS attack?
A Distributed Denial of Service attack floods a website, server, or network with traffic from many sources at once, making the service slow or unreachable for legitimate users.
Should I choose Website, Server, or Network protection?
Choose Website for sites and web applications (HTTP/HTTPS). Choose Server for non-web services such as game servers, VoIP, or TCP/UDP applications. Choose Network (BGP) if you hold your own ASN and IP blocks, for example as an ISP or hosting provider.
How fast can protection be activated?
Once the configuration is ready, protection can be live within minutes. For network protection, StormWall also offers rapid onboarding while an attack is in progress.
Do my servers need to be hosted with Cloudku?
No. Protection sits in front of your infrastructure wherever it is: in a Cloudku facility, with another provider, or on-premise.
Are these the final prices?
Prices shown are StormWall list prices per month in US dollars. Your final price and billing currency are confirmed in a formal quote from Cloudku.
Under attack right now?
Contact our team. We help assess the attack and set up the protection that can be activated fastest.