1 website
Protect one primary domain for business sites, landing pages, WordPress or online stores.
AntiDDoS/WAF for websites
Website WAF Protection
Place a Web Application Firewall in front of your website to filter bots, reduce HTTP Flood impact and keep the site reachable during Layer 7 attacks.
7-day money-back guarantee if you are not satisfied
SSL support
Enable SSL when DNS is pointed correctly and the website configuration is valid.
Request limit
Default 2,000 requests/10 seconds to reduce abnormal application-layer traffic.
Large bandwidth
The WAF plan includes 5,000 GB/month for stable access needs.
WAF package
AntiDDoS/WAF specs
Protect one website, suitable for business sites, landing pages, WordPress, online stores and public APIs.
AntiDDoS/WAF 1 Web $10/month Order WAF
Rental period
1 months3 months6 months12 months24 months36 months
- Websites
- 1 website
- Price
- $10/month
- Request limit
- 2,000 requests/10 seconds
- Bandwidth
- 5,000 GB/month
- Activation DNS
- Point A record to the assigned WAF IP
- Default ports
- HTTP 80, HTTPS 443
Layer 7 WAF
Filter requests before origin
WAF receives HTTP/HTTPS traffic, separates clean requests from abnormal traffic, and forwards only valid traffic to the origin server. This helps protect login forms, APIs, checkout pages and admin areas.
HTTP/HTTPS filter
Block abnormal requests, bot flood and Layer 7 attack patterns.
Origin shield
Hide the origin server behind the WAF layer to reduce direct malicious traffic.
Request limiting
Keep traffic within a safe threshold so fake spikes do not exhaust the site.
HTTP/HTTPS
When does a website need WAF?
Many DDoS attacks imitate real users and continuously hit login pages, carts, APIs or product pages. WAF filters this traffic before it reaches the origin server.
HTTP Flood
Continuous requests against heavy pages, search endpoints or product pages.
Bot traffic
Crawlers, scanners, spam forms and repeated requests that waste resources.
Login/API abuse
Traffic targeting login forms, public APIs, webhooks or checkout pages.
E-commerce websites
Landing pages, WooCommerce, online stores and order pages.
Login forms and APIs
Protect login areas, public APIs, checkout, carts and admin panels.
Excessive bot crawling
Reduce repeated requests, HTTP Flood, bot scanning and abnormal website traffic.
No infrastructure move
Add protection in front of the current origin server without migrating the website.
DNS + WAF
How to order AntiDDoS/WAF
Prepare the domain before ordering
Point the domain A record to a WAF IP. If the website uses both root domain and www, point both records.
If using Cloudflare or DNS proxy
Temporarily disable proxy/CDN and keep the record DNS only during ordering so the system can verify the WAF IP correctly.
Fill in the order form
Enter only the domain, use the real origin server IP, and set HTTP Port to 80 and HTTPS Port to 443 unless your site uses custom ports.
Activation
Activation process
1. Point DNS
Update the domain A record to the assigned WAF IP.
2. Submit config
Enter domain, origin server IP, HTTP/HTTPS ports and SSL preference.
3. Verify access
VPSTTT checks DNS, origin connectivity and website response status.
4. Enable protection
WAF receives traffic, filters abnormal requests and forwards clean requests to the origin server.
Service selection guide
When should you choose Website WAF Anti-DDoS?
Website WAF Anti-DDoS should be selected by workload goal, user location, security needs and scaling path, not only by the lowest monthly price.
Best for ecommerce sites, ad landing pages, login portals, public APIs or systems facing abnormal Layer 7 requests.
Enable WAF before campaigns, sale seasons, or after spam requests, bots, form scans and HTTP flood attempts.
Point DNS to WAF, confirm origin IP, HTTP/HTTPS ports and SSL so malicious requests are filtered first.
Quick comparison by situation
| Situation | Website WAF Anti-DDoS | Also consider |
|---|---|---|
| Login/checkout/API exposed | WAF filters abnormal requests before the origin | Network firewall protects lower layers only |
| High-traffic campaign | Reduce bots, form spam, HTTP flood and downtime risks | CDN helps but does not replace custom WAF rules |
| Hide origin IP | DNS points to WAF and origin receives cleaner traffic | SSL/port configuration must be correct first |
FAQ
Website WAF FAQ
How is Website WAF different from Anti-DDoS Firewall?
Anti-DDoS Firewall protects broader network-layer and service traffic. Website WAF focuses on HTTP/HTTPS, bots, abnormal requests and Layer 7 attacks against websites.
How much does AntiDDoS/WAF 1 Web cost?
AntiDDoS/WAF 1 Web costs $10/month and can be rented for 1, 3, 6, 12, 24 or 36 months.
What do I need before ordering?
Prepare your domain, real origin server IP, HTTP/HTTPS ports and point the A record to 160.30.156.9 or 160.30.156.10 before activation.
Does WAF support SSL?
Yes. SSL can be enabled when DNS is pointed correctly and the website information is valid. For complex setups, open a ticket for technical support.
Security Manager
Clear WAF and Firewall Management Interface
Monitor protection status, traffic, bandwidth, blocked requests, and WAF/Firewall policies in real time. Centralized interface helps detect anomalies early, control filtering, and maintain website, application, and system security.
WAF/Firewall service information
Monitor the domain name or IP being protected, service status, applicable policies and expiry date to always understand the current defense layer of the system.
7+ Years Supporting Stable, Scalable Digital Infrastructure
Key numbers that help customers choose VPSTTT VPS, proxy, hosting, server and digital infrastructure services with confidence.
years deploying and operating digital infrastructure
customers and partners trust the VPSTTT ecosystem
technical support throughout the service lifecycle
uptime target for business-critical infrastructure
high-speed connectivity for diverse workloads
Trusted By More Than 50,000 Customers And Partners Worldwide
VPSTTT In The Press And Media
Customer Reviews Of VPSTTT Service Quality
Feedback from customers running websites, VPS, proxy, hosting and server systems with VPSTTT.
Google ★★★★★ Rating: 5/5 | 125 Reviews
Facebook ★★★★★ Rating: 4.9/5 | 62 Reviews
Trustpilot ★★★★★ Rating: 5/5 | Trustpilot Reviews
HostAdvice ★★★★★ Rating: 5/5 | HostAdvice Reviews
Stable service, responsive support and configuration advice closely aligned with real operating needs.
The infrastructure is easy to scale and manage, with flexible options for separating workloads by campaign.
The VPS runs our production systems reliably, with clear support whenever resources need checking or upgrading.
Customer Performance Journeys With VPSTTT VPS
Customers with low-performing websites achieved major gains after moving to VPSTTT VPS infrastructure. A faster, more stable and SEO-ready platform also helps search engines and AI systems discover, understand and recommend their content.
View all
VPSTTT.COM Performance 36 → 100
VPSTTT.COM Reaches A 100 Performance Score On NVMe VPS
VPSTTT.COM previously scored 36 for performance. After moving to a suitable NVMe VPS and optimizing caching, images, CSS and JavaScript, performance reached 100, with SEO and Best Practices also scoring 100. The faster and more stable platform helps search engines and AI systems crawl, understand and surface service content more effectively.
DEVTTT Performance 36 → 100
DEVTTT Improves From 36 To 100 With VPSTTT VPS
Before using VPSTTT VPS, DEVTTT scored only 36 for performance, slowing access to its portfolio and web design services. After migrating and optimizing resources, performance reached 100 while accessibility, Best Practices and SEO improved together, creating a stronger foundation for Google and AI tools to discover and evaluate the content.
MAYCHURIENG.VN Performance 32 → 99
MAYCHURIENG.VN Improves From 32 To 99 After Its VPS Migration
MAYCHURIENG.VN previously scored only 32 on its former infrastructure. After moving to VPSTTT VPS and optimizing images, CSS, JavaScript, caching and priority resources, performance rose to 99 while accessibility, Best Practices and SEO reached 100. Faster responses make its server content easier for search engines and AI systems to find and understand.
THUERACK.VN Performance 27 → 99
THUERACK.VN Improves From 27 To 99 On VPSTTT VPS
Before migrating, THUERACK.VN scored 27 for performance, causing slow service pages and weaker engagement. Running on VPSTTT VPS with optimized images, code and caching raised performance to 99, while the other three Lighthouse categories reached 100. Better speed and structure help Google and AI systems crawl and evaluate the website more effectively.
THUECHODAT.VN Performance 32 → 99
THUECHODAT.VN Improves From 32 To 99 After Moving To VPSTTT VPS
THUECHODAT.VN previously scored 32 before moving to VPSTTT VPS. After upgrading the infrastructure and optimizing assets across devices, performance reached 99, accessibility reached 99, and Best Practices and SEO reached 100. The faster, clearer website gives its service content a stronger foundation for traditional and AI search.
ASENRA.VN Performance 31 → 99
ASENRA.VN Improves From 31 To 99 And Becomes More AI-Search Ready
ASENRA.VN presents architecture and interior design and construction services. Before moving to VPSTTT VPS, the site scored only 31 for performance; after upgrading the infrastructure and optimizing images, JavaScript, CSS and internal links, the score rose to 99. Faster loading, stronger stability and clearer structure help Google, AI Overviews and AI search systems crawl, understand and recommend its content to prospective customers.
