F5 Distributed Cloud DDoS Mitigation

Cloud-delivered DDoS mitigation that detects and mitigates attacks before they reach your network infrastructure and applications​.

    Currently under DDoS attack? We can help.

Call: (866) 329-4253 or +1 (206) 272-7969


Secure your network and applications against L3-L7 attacks with Distributed Cloud DDoS Mitigation, a cloud-delivered mitigation service that detects and mitigates large-scale network, SSL, and application-targeted attacks in real time—defending your business from attacks that can exceed hundreds of gigabits per second.

Read overview ›


DDoS attacks remain the leading cause of app downtime. In the first quarter of 2021, researchers recorded nearly 3 million DDoS attacks, a 31% increase from the same period in 2020.1

Increasingly sophisticated attacks

Distributed and volumetric attacks cannot be handled by outdated on-premises security appliances.

New DDoS tactics outwit older tools

Low and slow-ramping application-layer attacks cannot be mitigated by legacy DDoS appliances.

Multiple security solutions cost time and money

Managing multiple on-premises devices and service providers is complex and expensive.

Slow response to fast moving attacks

Long lead times and contractual issues slow delivery of on-demand capacity expansion.

Why Distributed Cloud DDoS Mitigation?

Maintain business continuity

Keep your business online during a DDoS attack—stop attacks before they impact your network and applications with real-time detection and attack mitigation in the cloud.

Increase operational efficiency

Reduce the time spent manually responding to attacks with a cloud-based DDoS mitigation solution that is backed by F5 security experts.​

Rich threat insights

Centralized console that provides transparent attack mitigation visibility and reporting before, during, and after an attack for increased situational awareness.

Reduce operating costs

Mitigation at the edge reduces unwanted/malicious traffic, strain on critical infrastructure, and bandwidth consumption/infrastructure costs.

How It Works

Provide controls to defeat targeted network- and application-layer attacks

Distributed Cloud DDoS Mitigation provides real-time, cloud-delivered mitigation and protects against volumetric and application-specific attacks. Backed by the F5 Global Network and F5 Security Operations Center (SOC) to withstand multi-terabit attacks and meet service SLAs with rapid response times. 

Provide controls to defeat targeted network- and application-layer attacks

Volumetric L3-L4 DDoS protection

Attack mitigation with multi-terabit ingest capacity—scrubs network level and signature-based attacks (TCP, SYN, teardrop, smurf, etc.)

Application Layer 7 mitigation

Mitigate application attacks by preventing bad actors from consuming critical resources that degrade app performance with HTTP floods, slowloris attacks, etc.​

Service Levels and Support

Deploy and manage certain elements on your own, or use our managed service for deployment, maintenance, and 24x7 support by certified F5 experts in our SOC, offering 99.99% uptime SLAs.

Attack mitigation insights

Transparent attack mitigation visibility and reporting before, during, and after an attack via a centralized console.

Broad Platform and Cloud Provider Support

Distributed Cloud Services can be delivered to apps running on any platform, on any public/private cloud. Connect and secure apps running in VMs, containers, bare metal, or serverless.

Service Discovery and Service Mesh Integrations

Supports multiple service discovery protocols simultaneously: Consul, Kubernetes, and DNS work out of the box. Istio or Linkerd service mesh can integrate with a Distributed Cloud Services ingress/egress gateway.

Automation, Alerting, and SIEM Integration

F5’s native Terraform provider, vesctl CLI tool, and public APIs deliver to the automation needs of app teams. Support for tools like Opsgenie or Slack for alerting and Splunk or Datadog for SIEM simplifies life of DevOps and SecOps teams.

Ways to Deploy

Customers have a choice between two service options: Always Available, or Always On, DDoS Mitigation

Primary protection available on demand.

The Always Available subscription is pre-configured for your systems, runs on standby, and can be initiated when under attack.

Primary protection as the first line of defense.

The Always On subscription is configured to continuously route and process your traffic on the F5 Distributed Cloud platform, allowing only legitimate traffic to reach your apps.


Distributed Cloud DDoS Mitigation solution overview


Distributed Cloud DDoS Mitigation

Learn more ›


IDC Innovators: Multicloud Networking, 2020

Download report ›

F5 Distributed Cloud L3-L7 DDoS Mitigation article


F5 Distributed Cloud L3-L7 DDoS Mitigation

Read the article ›

Next Steps

Free trial

Try it for free in your environment.

View plans and pricing

View entitlements across various plans and pricing.