> ## Documentation Index
> Fetch the complete documentation index at: https://docs.gcore.com/llms.txt
> Use this file to discover all available pages before exploring further.

# About advanced DDoS protection for Bare Metal

Gcore enables basic DDoS protection on all Bare Metal equipment by default. The system mitigates volumetric and amplification attacks, but more sophisticated attacks may bypass basic protection. When that happens, the attacked IP address is blocked for a set period to protect the infrastructure and other servers from outages.

Advanced DDoS Protection is a paid upgrade for Bare Metal servers. It can be [activated](/cloud/bare-metal-servers/advanced-ddos-protection/activate-advanced-ddos-protection-for-bare-metal-servers) during server creation or from the **Networking** tab on network interfaces with public IP addresses. It redirects traffic through the Threat Mitigation System (TMS), which filters attack traffic and passes only legitimate traffic to the server. TMS access control lists (ACLs) can be configured as needed. With Advanced DDoS Protection enabled, the server IP address is not blocked during an attack, so the server stays operational.

## Advantages over basic protection

Basic protection is enabled for all customers at no extra cost. Advanced DDoS Protection operates in always-on mode: traffic passes through TMS at all times, not only during an attack. The system detects attacks within five seconds and forwards only legitimate traffic to the server.

Key advantages include:

* Improved defense against volumetric (L3), protocol (L4), and application (L7) attacks, which reduces or eliminates service disruption without interrupting uptime.
* During an attack, a higher blocking threshold or no IP blocking at all, depending on the billing plan.
* A lower trigger threshold, so smaller-volume attacks are detected.

## Additional key features

Advanced DDoS Protection provides these parameters and capabilities:

* **Clean Traffic Limit.** The limit depends on the data center location.
* **Black hole threshold (IP blocking).** No limit.
* **Time-to-Mitigate (start of mitigation)** within five seconds after an attack is detected.
* **IP addressing** with a dedicated subnet.
* **DPI.** Deep packet inspection elements analyze traffic as part of DDoS Protection.
* **Billing.** Pricing details appear in the [Gcore Customer Portal](https://portal.gcore.com) when a DDoS profile template is selected during server creation or interface configuration.

## Pricing

Advanced DDoS Protection is a paid service. The cost depends on the data center location and the volume of incoming traffic that must be filtered. Approximate prices appear on the [DDoS Protection](https://gcore.com/ddos-protection) page. For an exact quote, contact technical support via chat or email at [support@gcore.com](mailto:support@gcore.com).