What is Kestrel DDoS Guard?
Kestrel DDoS Guard is Kestrel's managed security service for teams that need predictable throughput without babysitting infrastructure. Provisioning takes under a minute, billing is per use with no minimums, and the same API works in every region. The service drops into existing CI pipelines and Terraform modules without rewrites. Kestrel operates it as a fully managed service: patching, capacity, and failover are handled upstream, while access controls and spend alerts stay in your hands.
Key features
- Sub-minute provisioning through console, CLI, or API
- Automatic replication across availability zones
- Private networking with no cross-zone transfer fees
- Drop-in Terraform provider and CloudFormation templates
- Built-in daily snapshots with 35-day retention
- Transparent egress rates published per region
Typical use cases
- SaaS platforms scaling from first customer to full estate
- Media and content workloads with heavy read traffic
- Seasonal businesses that scale down aggressively off-peak
- Internal platforms serving dozens of product teams
Why Kestrel?
Kestrel publishes list prices for every region and never gates core capabilities behind enterprise-only tiers. Capacity is pre-provisioned, so the performance you benchmark in a sandbox is the performance you get in production. And because egress rates are flat, the bill at the end of the month matches the estimate you made at the start.
Getting started
Create an account, pick a region, and the default configuration is live in under a minute. The quickstart walks through your first deployment in about ten minutes, and the managed Terraform module turns the same setup into code you can review.
