Enterprise-Grade DDoS Protection for Critical Infrastructure
Macarne’s Dragon Shield™ delivers intelligent, high-speed mitigation across Layers 3 through 7 — protecting transit, hosting, and external networks with real-time, always-on defense.
Advanced Dragon Shield™ DDoS Protection
Dragon Shield™ is Macarne’s proprietary DDoS mitigation platform, purpose-built to protect infrastructure across IP Transit, Dedicated Servers, VPS, and external networks via GRE tunnels. It delivers scalable Layer 3 to Layer 7 protection, neutralizing volumetric, protocol-based, and application-level attacks in real-time — without disrupting legitimate traffic.
A base level of protection is included with all Macarne hosting services. For more advanced requirements, Dragon Shield™ is available as a standalone or add-on solution, offering configurable thresholds, tailored filtering rules, and emergency mitigation options for complex or high-risk environments.
Backed by 50+ Tbps Network
Built on Macarne’s high-throughput global backbone, capable of handling over 50 Tbps of aggregate network traffic, Dragon Shield™ delivers low-latency, high-speed mitigation at the edge - stopping DDoS attacks before they reach your services. Combined with intelligent filtering and scalable deployment models, it ensures reliable protection for IP Transit, hosting, and remote infrastructure.
Layered Protection with Precision
The system inspects tra c across Layers 3, 4, and 7 to detect both volumetric and application-level threats in real time. Leveraging behavior-based analysis and dynamic pattern recognition, Dragon Shield™ identifies attacks as they emerge and responds with targeted mitigation - including intelligent filtering, rate limiting, and BGP re-routing. This ensures fast, accurate protection without disrupting clean traffic.
Tailored Filtering & Thresholds
Our platform enables ne-grained control over protection strategies, built around your specific traffic patterns and risk profile. Whether you’re managing AI workloads, real-time APIs, or enterprise SaaS platforms, our team helps configure adaptive thresholds and application-aware rules.
From rate tuning and traffic shaping to custom protocol handling, you get the exibility to secure complex environments without compromising performance or uptime.
DRAGON SHIELD™ DDOS PROTECTION TIERS
Flexible Mitigation Options for Any Infrastructure
Dragon Shield™ is available in three configurable service levels, adaptable to IP Transit, hosting, and external networks. Choose the protection model that fits your needs — from always-on edge filtering to fully customized policies and emergency tunnel mitigation.
Volumetric Shield
Core Layer 3 Protection
Ideal for general-purpose workloads and bandwidth-heavy services. Volumetric Shield mitigates amplification attacks (UDP, NTP, DNS, SSDP, Memcached) at the edge without disrupting normal traffic. Included with most Macarne services by default.
Full Shield
Advanced Layer 3 & 4 Mitigation
Includes protection against protocol abuse and reflection attacks such as TCP SYN/ACK floods and GRE floods. Full Shield provides deeper inspection, rate-based filtering, and can be adapted to your infrastructure for high-risk or latency-sensitive deployments.
Expert DDoS Support
Custom Rules, Emergency Tunnels & L7 Strategy
For critical applications and unique threat profiles, our team provides hands-on configuration — including per-service thresholds, Layer 7 filtering, and GRE tunnel support. Designed for ISPs, carriers, and enterprise platforms requiring tailored protection.
Volumetric Shield
Core Layer 3 Protection
Ideal for general-purpose workloads and bandwidth-heavy services. Volumetric Shield mitigates amplification attacks (UDP, NTP, DNS, SSDP, Memcached) at the edge without disrupting normal traffic. Included with most Macarne services by default.
Full Shield
Advanced Layer 3 & 4 Mitigation
Includes protection against protocol abuse and reflection attacks such as TCP SYN/ACK floods and GRE floods. Full Shield provides deeper inspection, rate-based filtering, and can be adapted to your infrastructure for high-risk or latency-sensitive deployments.
Expert DDoS Support
Custom Rules, Emergency Tunnels & L7 Strategy
For critical applications and unique threat profiles, our team provides hands-on configuration — including per-service thresholds, Layer 7 filtering, and GRE tunnel support. Designed for ISPs, carriers, and enterprise platforms requiring tailored protection.
EXPERT MITIGATION SERVICE
Advanced DDoS Engineering Support
For high-risk environments or complex attack scenarios, our DDoS engineers provide deep technical assistance and custom mitigation design. We go beyond standard protection by reviewing your traffic profiles, analyzing prior incidents, and crafting bespoke filter rules and threshold strategies.
Whether you need emergency intervention or a hardened defense for critical applications, we deliver precision support built on real-world expertise. Ideal for IP Transit clients, large-scale infrastructure, and sensitive workloads.
Expert Mitigation Services - starting at €125/hour.
