Edge Firewall

Stateless packet filtering and DDoS mitigation

Service operational

Inbound unsolicited connections are dropped at the perimeter by eBPF/XDP filters running at line rate.

Blocked Packets
4.2M / 24h
Verified live
Mitigation Capacity
3.2 Tbps
Nominal range
Active Rules
128 Policies
Synchronized
Component Region / Scope Protocol State
zen-core-06a eu-central-1 (Frankfurt) WireGuard / UDP Active
zen-edge-06b us-east-1 (Virginia) mTLS / TCP-443 Active
zen-relay-06c ap-northeast-1 (Tokyo) Anycast BGP Active