Barracuda Active DDoS Prevention protects you from volumetric DDoS by automatically identifying and mitigating attacks. Barracuda Active DDoS Prevention has two operating modes: Peace and War. Operations are different in the two modes.
- Peace – To maximize performance of your application, DDoS protection features are turned off when not needed. In Peace mode, Barracuda does not enable DDoS protection features.
- War – When Barracuda detects that you are being targeted with a volumetric DDoS attack, Barracuda automatically enables DDoS protection features to defend you against the attack.
- Barracuda enables different protection features based on the type of DDoS attack detected. For example, if you are being targeted with a SYN flood, Barracuda enables defenses that detect fake SYN packets. For your security, Barracuda does not release specific information on the ways in which attacks are detected or the specific mitigations deployed for any given attack.
- You cannot change Barracuda Active DDoS Prevention configuration while in War mode.
By default, Barracuda automatically detects DDoS attacks and switches the operating mode to War. When the attack has subsided, Barracuda automatically switches to Peace operating mode.
Overriding Automatic Switching
You can temporarily override Barracuda’s automatic determination and force the system to be in a specific operating mode. You can do this if you believe you are under attack but Barracuda is not detecting it, or if Barracuda has detected an attack that you do not think is an actual attack.
If you choose, you can turn off automatic switching between operating modes and switch modes manually. However, if you do not quickly activate War mode when a DDoS attack begins, your application will likely be offline from the attack, and your application servers may even crash due to the overload.