WC-GUARD & GUARD RP

DDoS Protected Hosting.
Two Models. One Clear Choice.

Choose protected dedicated infrastructure or reverse-proxy website protection. Compare the protection scope, service uplink and deployment model that fit your service.

2 protection models6 published plansLayer coverage by plan

01 / THE SHORT ANSWER

What are you protecting - and how?

DDoS mitigation filters hostile traffic so legitimate traffic can continue toward the protected service. WC-Guard pairs a dedicated server with a published protection tier. Guard RP provides reverse-proxy website protection. Choose the delivery model first, then compare the plan’s layers, protection capacity and service uplink.

WC-Guard
Dedicated infrastructure
Guard RP
Website reverse proxy
Protection
Plan-specific scope
Uplink
Separate service connection

02 / HOW DDoS MITIGATION WORKS

Separate the Attack from the Traffic You Need.

Incoming traffic reaches a filtering boundary. Mitigation distinguishes traffic patterns, rejects malicious flow and forwards accepted traffic toward the service.

The selected protection model and plan determine the supported scope. Filtering capability is not a promise that every attack or application behaves the same way.

Trace the permitted traffic path through mitigation to the protected service.

Inspect traffic before forwarding

03 / CHOOSE YOUR PROTECTION MODEL

Dedicated Infrastructure. Or Website Protection.

Your decisionWC-GuardGuard RP
Service modelDDoS-protected dedicated serverReverse-proxy website protection
What you receivePublished CPU, memory and storage with a protection tierProtection for the plan’s website count
Dedicated hardwareIncluded in the listed configurationNo hardware bundle is specified
Website countNot specified by these dedicated plans1, 5 or unlimited, depending on plan
Layer scopeL3/L4 on WC-Guard 20; L3/L4/L7 on WC-Guard 50; volumetric/application protection on WC-Guard 1.2+L3/L4/L7 plan fields; some packet-rate values require confirmation
Deployment24-48 Hours, depending on stock3-6 hours
Custom SSL / email relayNo plan-level entitlement specifiedCustom SSL optional; email relay protected

04 / WC-GUARD PROTECTED DEDICATED SERVERS

The Server and Its Protection Tier.

Each configuration includes dedicated hardware and its published protection scope. Protection capacity is labelled separately from the service port. Each plan lists one IPv4 address.

Deployment
24–48 Hours*
Protection models
WC-Guard / Guard RP
Protection scope
Plan-specific
Traffic
Unmetered
Minimum term
1 month

* Stock dependent.

  • WC-Guard 20Gbps

    CPU: E3-1270.

    1 x E3-1270

    Monthly price: €289.99/mo
    CPU
    1 x E3-1270
    Memory
    16GB
    Storage
    240GB SSD
    Port
    200Mbps Uplink

    20Gbps Protection
    L3 | L4

    Traffic
    Unmetered
  • WC-Guard 50Gbps

    CPU: 2 x E5-2620v4.

    2 x E5-2620 v4

    Monthly price: €449.99/mo
    CPU
    2 x E5-2620 v4
    Memory
    16GB
    Storage
    480GB SSD
    Port
    200Mbps Uplink

    50Gbps Protection
    L3 | L4 | L7

    Traffic
    Unmetered
  • WC-Guard 1.2+Tbps

    CPU: 2 x E5-2690v4.

    2 x E5-2690 v4

    Monthly price: €749.99/mo
    CPU
    2 x E5-2690 v4
    Memory
    64GB DDR4
    Storage
    1TB NVMe
    Port
    1Gbps Uplink

    1.2+Tbps Protection
    Volumetric & application-level

    Traffic
    Unmetered

Monthly prices are published plan prices. Confirm stock and order arrangements. Traffic is listed as unmetered; the port is a separate connection limit.

05 / GUARD RP REVERSE PROXY

Protect the Website. Compare the Service.

A separate reverse-proxy protection service, with no dedicated CPU, memory or storage bundle specified. Compare protected websites, layer metrics and the service uplink.

Filter requests before the origin

Reverse Proxy DDoS Protection Plans

Guard RP 100

100 Gbps
  • Protected websites: 1
  • L7 request rate: 5K req/sec
  • Service uplink: 150Mbps
  • Traffic: Unmetered
  • Email relay: Protected
  • Custom SSL: Optional

Guard RP 300

300 Gbps
  • Protected websites: 5
  • L7 request rate: 20K req/sec
  • Service uplink: 300Mbps
  • Traffic: Unmetered
  • Email relay: Protected
  • Custom SSL: Optional

Guard RP 2TB

2 Tbps+
  • Protected websites: Unlimited
  • L7 request rate: 100K req/sec
  • Service uplink: 500Mbps
  • Traffic: Unmetered
  • Email relay: Protected
  • Custom SSL: Optional

Custom SSL is optional; confirm certificate handling and any additional cost. Protected email relay does not establish a mailbox or mail-hosting package.

Setup
3-6 hours
Published reverse-proxy provisioning estimate; confirm onboarding requirements.
Minimum term
1 month
Applies to the Guard RP protection service.
Refund policy
Published no-refund condition
Review the governing agreement and service-specific conditions.
Read the Service Agreement ↗

06 / UNDERSTANDING L3, L4 & L7

Different Traffic. Different Measurements.

LayerTraffic becomes more specificWhat the metric means
L3 · NetworkNetwork-layer traffic; RP plans publish a bit-rate protection capacity.
L4 · TransportTransport traffic patterns; packet rate is distinct from bit rate.
L7 · ApplicationApplication requests; RP plans publish requests per second.

These are conceptual layers, not three physical appliances. WC-Guard 20Gbps lists L3/L4; WC-Guard 50Gbps lists L3/L4/L7. The top dedicated tier specifies volumetric and application-level protection. Application filtering does not establish complete network mitigation.

08 / ATTACK TYPES & WORKLOAD FIT

Match the Exposure to the Protection.

VOLUMETRIC FLOODS

Compare the published protection capacity and the separate service uplink. Do not treat unmetered traffic as unlimited connection speed.

NETWORK / TRANSPORT ATTACKS

Check the selected plan’s layer scope. Packet-rate and bit-rate fields describe different limits.

APPLICATION REQUEST FLOODS

Review application-level coverage and published request rates. Layer 7 is not listed on WC-Guard 20Gbps.

HIGH-TRAFFIC WEBSITES

For Guard RP, compare website count, request rate and uplink together. Confirm your application and origin requirements.

STREAMING / MEDIA SERVICES

Review the protocol and delivery workload against dedicated protection. Do not assume reverse-proxy eligibility for every media protocol.

PUBLIC-FACING APPLICATIONS

Choose the delivery model and layer scope around the exposed service. Confirm deployment and service-control requirements.

09 / MONITORING, DEPLOYMENT & SERVICE CONTROL

Plan the Setup. Confirm the Operating Scope.

WC-Guard deployment
24-48 Hours, depending on stock
Dedicated hardware provisioning depends on stock and the selected configuration.
Guard RP deployment
3-6 hours
Website reverse-proxy provisioning has its own onboarding requirements.
Monitoring & control
Confirm the service scope
Agree on escalation, reporting and available controls before provisioning.
Commercial terms
One-month minimum
Both families publish a no-refund condition; the governing agreement applies.

10 / FAQ

The details worth knowing before you choose.

What is DDoS-protected hosting?

It uses traffic mitigation to reduce the risk of malicious traffic overwhelming a protected service. WC-Guard and Guard RP provide two different delivery models.

What is the difference between WC-Guard and Guard RP?

WC-Guard includes a dedicated server configuration and its published protection tier. Guard RP is reverse-proxy website protection, with website counts and protection metrics specified by plan.

Is protection capacity the same as service uplink?

No. Protection capacity identifies the published mitigation tier. Uplink describes the separate service connection. A high protection figure does not increase the listed server or service port speed.

What do L3, L4 and L7 mean?

L3 concerns network-layer traffic, L4 concerns transport traffic patterns, and L7 concerns application requests. Bit rate, packet rate and request rate measure different aspects of protection.

Does every WC-Guard plan include Layer 7 protection?

WC-Guard 20Gbps publishes Layer 3 and Layer 4 protection. WC-Guard 50Gbps lists Layers 3, 4 and 7. WC-Guard 1.2+Tbps uses volumetric and application-level protection wording.

How quickly is WC-Guard deployed?

The published setup estimate is 24-48 Hours, depending on stock. Confirm the configuration and current availability before planning deployment.

How quickly is Guard RP deployed?

The published reverse-proxy setup estimate is 3-6 hours. Confirm your website requirements and provisioning arrangements before scheduling the change.

Can Guard RP use a custom SSL certificate?

Custom SSL is listed as optional on all three Guard RP plans. Confirm certificate handling, configuration and any additional cost before ordering.

Does mitigation guarantee uninterrupted availability?

Mitigation reduces risk from supported attack traffic. It does not create an absolute availability guarantee. Review the selected service scope and governing agreement.

What are the minimum term and refund conditions?

Both families publish a one-month minimum and a no-refund condition. Review the family-specific listing and Service Agreement for the applicable policy and provisions.

YOUR NEXT CONFIGURATION

Choose Your
Protection Model.

Start with the service you need to protect. Then compare the plan’s layers, mitigation capacity and service connection.

Talk to Our Team ↗