Psychz - Ron
Votes: 0Posted On: Sep 23, 2016 15:35:28
When it comes to DDoS attacks, the DDoS appliance will analyze all incoming traffic and divert traffic based on detection. In some cases, it is possible that the DDoS appliance will not detect the attack and not divert the traffic thus allowing the attack to go directly to the server without any filtering. In such situation, temporary diversion and even permanent diversion come in really handy.
Temporary diversions are only useful when you are under attack and you would like to mitigate attack that is taking place by placing the IP inline. Temporary diversions are removed automatically from the DDoS appliance after some time.
On the other hand, permanent diversion will place the IP on the DDoS appliance 24/7 and will mitigate all traffic that is coming in to the network. We do give clients the option to enable/disable permanent diversion if it's causing any issues with traffic. For example, client's can disable permanent diversion if they are uploading a large files and tranferring at high speeds to the server.
If you are under attack all the time and noticing that attacks are not being placed inline, we recommend utilizing the the permanent diversion option to ensure that all traffic is being mitigated.