Anti-DDoS System

Service Provider Ready – Modular Architecture

Lowest Operating Cost – Learning Algorithms

Flexible Licensing Model – Add Capacity as Needed


Service Providers no longer need to rely on null routes to mitigate DDoS attacks. Our Anti-DDoS System is a fast, reliable, and scalable appliance that provides real-time mitigation of DDoS attacks, while allowing legitimate traffic to continue to pass through.


The ADS is the ideal solution for today’s advanced and evolving DDoS attacks. Available in a range of cost and performance optimized appliances, purpose-built to deliver high quality defenses for Service Providers of any size.


Example In-line ADS Deployment

Features and Benefits


Comprehensive DDoS Attack Protection

NSFOCUS ADS not only defends against attacks on the transport layer, such as SYN Flood, SYN-ACK Flood, ACK Flood, FIN/RST Flood, UDP Flood, ICMP Flood, and IP Fragment Flood attacks, but it also defends against attacks targeting the application layer, such as HTTP/HTTPS/HTTP2 Flood, slow-rate, DNS, game service and audio/video attacks.

Lowest False Positive and Negative Rates

Unlike other anti-DDoS products that rely on null routes, traffic thresholds, and packet limits to mitigate DDoS attacks, NSFOCUS ADS uses a multi-stage inspection and analysis process that combines RFC checks, protocol analysis, access control lists, IP reputation, anti-spoofing, L4-L7 algorithmic analysis, user behavior analysis, regular expressions, connection/rate limiting, and more to mitigate attacks. This comprehensive approach leads to the lowest rates of both false positives and negatives as compared to any other technology. Not only is it highly accurate, it is also highly effective at mitigating DDoS attack traffic.

Flexible and Scalable Deployments

Available in a range of performance-optimized appliances, the ADS Series has been designed to meet the needs of any size Service Provider.