Almost every organization cares about its information security. But there are times when, for some reason, the endpoints become controlled by attackers. It can be hundreds of thousands of infected devices scattered around the world. Attackers using these devices can generate gigabits of garbage traffic, which ultimately leads to a denial of service for any network resource.
DDoS protection devices support several types of protection:
• Onpremise - when the device is completely at your disposal
• Cloud - when traffic to the protected resource is redirected to the cloud for cleaning and checking for legitimacy
• Hybrid - in this case you have a device with a certain bandwidth, integrated with a cloud service, if the physical bandwidth is exceeded, the traffic to the protected resource is redirected to the cloud.