Protected Prefix
Protected prefix (public IP)
Section titled “Protected prefix (public IP)”The protected prefix is your organization’s public IP address block that Cloud defends against DDoS attacks.
| Requirement | IPv4 | IPv6 |
|---|---|---|
| Minimum size | /24 (256 IPs) | /48 |
| Routability | Publicly routable (non-RFC 1918) | Global unicast (non-ULA) |
| Registration | RIR-assigned (ARIN, RIPE, APNIC) | RIR-assigned |
| Proof | LOA or IRR/ROA registration | LOA or IRR/ROA registration |
Traffic flow:
- Cloud announces your prefix globally via BGP anycast
- All Internet traffic destined for your IPs routes through scrubbing centers
- Attack traffic is dropped; clean traffic is delivered via GRE tunnels