Yandex Cloud
Search
Contact UsGet started
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
  • All Services
  • System Status
    • Featured
    • Infrastructure & Network
    • Data Platform
    • Containers
    • Developer tools
    • Serverless
    • Security
    • Monitoring & Resources
    • ML Services
    • Business tools
  • All Solutions
    • By industry
    • By use case
    • Economics and Pricing
    • Security
    • Technical Support
    • Start testing with double trial credits
    • Cloud credits to scale your IT product
    • Gateway to Russia
    • Cloud for Startups
    • Center for Technologies and Society
    • Yandex Cloud Partner program
  • Pricing
  • Customer Stories
  • Documentation
  • Blog
© 2025 Direct Cursus Technology L.L.C.
Yandex Smart Web Security
  • Getting started
    • All tutorials
    • Basic SWS setup
    • Creating an L7 load balancer with a security profile through an Application Load Balancer ingress controller
      • Overview
      • Management console, CLI
      • Terraform
    • API Gateway protection with Smart Web Security
    • Emergency L7 DDoS protection in Application Load Balancer
    • Centralized online publication and DDoS protection of applications
    • Deploying a web application on BareMetal servers with an L7 load balancer and Smart Web Security protection
    • Overview
    • Security profiles
    • WAF
    • ARL (request limit)
    • Rules
    • Conditions
    • Lists
    • Protecting domains
    • Logging
    • Quotas and limits
  • Access management
  • Pricing policy
  • Terraform reference
  • Monitoring metrics
  • Audit Trails events
  • Release notes
  1. Tutorials
  2. Creating an L7 load balancer with DDoS protection at OSI L3-L4
  3. Overview

Creating a load balancer with DDoS protection

Written by
Yandex Cloud
Updated at July 14, 2025

Distributed denial of service, or DDoS, is a type of cyberattack that involves sending massive numbers of requests to a server or network to overwhelm it or make it inoperable.

In this tutorial, you will deploy a DDoS protection infrastructure for app backends in Yandex Cloud. To do this, you will create a cloud network, set up Yandex Virtual Private Cloud security groups, create a Yandex Compute Cloud instance group to serve as backends, and link it to the infrastructure of a Yandex Application Load Balancer L7 load balancer with a DDoS-protected public IP address.

You can create a DDoS protection infrastructure using the following tools:

  • Management console, CLI: Use the Yandex Cloud management console or the CLI to create your infrastructure step by step.
  • Terraform: Streamline creating and managing your resources using the infrastructure-as-code (IaC) approach. Download a Terraform configuration example and deploy your infrastructure using the Yandex Cloud Terraform provider.

Was the article helpful?

Previous
Creating an L7 load balancer with a security profile through an Application Load Balancer ingress controller
Next
Management console, CLI
© 2025 Direct Cursus Technology L.L.C.