Skip to main content

Frankfurt DDoS scrubbing

Templass cleans inbound attack traffic in Frankfurt, inside Equinix FR5. Edge capacity is in the over 1 Tbps class. Clean packets leave FR5 toward your origin on the path you ordered: GRE or a Cross-Connect.

What "scrubbing" means here​

  1. Users and attackers send packets to your protected address on AS208743.
  2. That traffic arrives at Templass in FR5, not at your origin's public NIC.
  3. Volumetric and Layer 3 / Layer 4 abuse is dropped or limited on the Templass side.
  4. Remaining traffic is forwarded to you.

Your origin should not have to absorb the attack bandwidth. It still has to accept the clean rate in your quote. See Clean bandwidth.

Capacity​

Over 1 Tbps is the mitigation class of the edge, not a per-customer commit.

  • Your quote is about clean Mbps delivered to the origin, not about buying a terabit.
  • A large attack can still be dropped in FR5 while your clean channel stays within the quoted rate.
  • A different clean rate or handoff is a new quote.

For day-to-day behavior, read How mitigation works.

Location consequences​

  • Latency to users is the path to Frankfurt, then the path from Templass to your origin.
  • If your origin is far from FRA, GRE adds that extra stretch on every clean packet.
  • A Cross-Connect only removes the Templass-to-origin internet hop when you are also in FR5.

There is no second scrubbing site documented here. If you need another campus, ask [email protected] rather than assuming anycast or extra metros.

What you do in Panel​

Watch Dashboard and Attacks. Change firewall or rate limits when you need policy on top of default mitigation.

People look for this page as Frankfurt DDoS scrubbing, Equinix FR5 DDoS, or Templass Frankfurt. Those all refer to the same FR5 platform described above.