DDoS Protection Limits

DigitalOcean’s DDoS Protection service provides always-on protection from Distributed Denial of Service (DDoS) attacks for your resources. The service monitors your resources for malicious or questionable volumes of incoming traffic and either mitigates or blocks traffic to the resource until the event has concluded.


  • DDoS Protection only protects DigitalOcean Droplets, Kubernetes clusters, managed databases, load balancers, and reserved IPs. Block storage and Spaces are not protected by DDoS Protection and don’t count towards your monthly resource usage. App Platform has native DDoS protection built into the platform. You do not need to enable DDoS Protection to protect your resources on App Platform.
  • DDoS Protection operates on the network (layer 3) and transport (layer 4) layers of the OSI model. It does not support application layer (layer 7) protection.