How does proxy setup work?

1. Upon placing an order you provide us with your domain name, backend IP address and SSL certificate with SSL private key (if any).
   
   
2. We create a DDoS protection service account for you, and assign your domain a set of protected name-servers. You simply follow the instructions you received and change your domain's DNS records so that it is directed to our DDOS Cloud Filters.
   
   
3. You make your backend accessible to our protected network by white-listing the IP's listed below in this KB article. Your site's traffic is now redirected through our protected network From then on, our service filters and cleans your traffic from DDoS Attack traffic. for optimal results it is recommended to block all traffic on your firewall, allowing only our network and IP's listed below to access your server.

In order to receive traffic from our load balancers and filters you must white-list the IP's listed below in ALL your firewalls and servers. If your server and network does not accept connections from these IP's your site will not function. 90% OF ALL SUPPORT TICKETS ARE CAUSED BY THIS STEP NOT BEING COMPLETED PROPERLY.

IPv4

199.91.125.0/24
199.245.52.0/24
199.91.124.0/24
185.8.196.130
185.8.196.128/25
5.254.100.32/27
93.115.83.64/26
37.221.171.232/29
162.222.212.0/24
5.254.103.128/28
93.115.210.27
199.27.128.0/21
173.245.48.0/20
103.21.244.0/22
103.22.200.0/22
103.31.4.0/22
141.101.64.0/18
108.162.192.0/18
190.93.240.0/20
188.114.96.0/20
197.234.240.0/22
198.41.128.0/17
162.158.0.0/15
104.16.0.0/12

IPv6
2400:cb00::/32
2606:4700::/32
2803:f800::/32
2405:b500::/32
2405:8100::/32

* If your backend is already under attack it may not be possible for us to access it. In this case you must request a fresh dedicated IP from your hosting company. If your site will not load using your real back-end IP then it would load using a proxy either. You must have a working back end IP that is NOT under attack.