StormWall has launched StormWall Appliance, a software solution designed to filter DDoS attacks directly within a customer's infrastructure instead of sending network traffic to an external cloud.
The product is installed on the company's own servers, ensuring that traffic never leaves the internal perimeter. This approach targets banks, hosting providers, internet service providers, and other organizations that demand high infrastructure availability and strict control over their data.
StormWall Appliance can function in fully isolated networks without internet access thanks to offline licensing that uses a hardware key. It filters attacks at OSI layers L3–L5, covering volumetric floods, attacks on the TCP stack, reflection and amplification schemes, DNS attacks, and gaming protocols.
The solution also claims to process attacks in TLS and QUIC traffic without decrypting it. Packets are handled using DPDK and StormWall's proprietary algorithms.
Customers can deploy the product on its own or combine it with the company's cloud platform. In hybrid scenarios, the on-premises system stops network-level attacks inside the perimeter while the cloud layer adds protection for applications at L7.
According to the vendor, deployment takes as little as one day. After installation, organizations receive a free 30-day trial period. Pricing is not publicly disclosed and depends on active port capacity, number of installations, and other factors. Both perpetual and subscription licenses are available, along with three tiers of technical support. The highest tier includes 24/7 rule tuning, attack mitigation, and incident analysis by the company's monitoring center.
StormWall states that the release responds to demand from Russian customers who either require more than cloud-based protection or cannot route traffic outside their own networks.
