Qrator DDoS Mitigation

Technical Description

Dedicated Server and VPC clients can order additional protection from our partner Qrator.

All traffic, including traffic sent over HTTPS, is automatically filtered by Qrator. Their network is a perfect fit for projects that regularly experience numerous DDoS attacks. Connections to Qrator Labs' filtration nodes are provided by the world's largest backbone Internet providers.

DNS records are modified to transfer user traffic to Qrator filtration nodes, which use BGP anycast technology to announce their addresses. Once enabled, traffic is continuously passed through the Qrator network for analysis, regardless of whether or not there is an attack. The "cleaned" traffic is then forwarded to the user's protected server in the Selectel infrastructure.

All Qrator network nodes work independently of one another. If one server goes offline, a protected site's traffic will be automatically rerouted to the nearest filtration node.

Billing and Pricing Plans

Prices for Qrator DDoS mitigation can be found on the Selectel site and in our control panel.

When paying for 1 month, say starting December 14th, the service will be provided until January 14th. Users can also choose their maximum DDoS filtration bandwidth: from 1 Gbps to 10 Gbps (more).

Enabling the Service

To enable Qrator DDoS mitigation:

  1. Open the Networks and Services section of the control panel.
  2. Click Order services.
  3. Select a Qrator mitigation service and click Order.
    Note: Your account balance should have enough money to pay for at least one month of service.
  4. Confirm your purchase in the new window.
  5. A request to enable Qrator DDoS mitigation will be sent to Selectel tech support.
  6. An e-mail will be sent containing a protected IP address, where all of your traffic will be sent, as well as a Qrator login and password.
  7. You will have to add an A record pointing to the protected IP address to the DNS. Instructions will be sent for changing your site's DNS records.
  8. If your domain is delegated to Selectel DNS servers, you can change your site's DNS A record in the DNS Hosting section of the Selectel control panel.
    Note: A domain must be attached to the server's IP address.
  9. A ticket from tech support will be sent stating the service has been enabled, and the service will appear on your list of Active services under Networks and Services in the Selectel control panel.
  10. The service is usually made availalbe in 1 business day. Immediate connections can be made by submitting a ticket indicating the need for an immediate connection.

Using the Service

Accessing the Qrator Dashboard

The Qrator dashboard can be accessed by entering the login and password sent in the aforementioned e-mail.

Statistics

Under Live Stats, users can view the total incoming (input) and cleaned (passed) traffic. The following filters can be applied for viewing statistics:

  • type (traffic, packets, requests, etc.)
  • time (5 hours, 1 day, week, month, etc.)

Adding Certificates

If you do not have an SSL certificate, you can send a ticket requesting a free certificate from Let's Encrypt.

If you have your own certificate, you can apply it by uploading it in the dashboard:

  1. Open the Network control tab.
  2. Select Certificates.
  3. Click Add certificate.
  4. Fill out the form.
     
  5. Click Upload files and select your certificate.
  6. The certificate will now be added.

Disabling the Service

To discontinue the service, simply disable autorenewal by selecting Disable monthly payments in the drop down menu.

To disable Qrator DDoS mitigation, simply change the IP address in the domain's A record to the original (unprotected) IP address.