Off-Ramp or In-Line Filtering:
DDoS Defense Appliances for Every Network
DDoS filtering hardware
Same filtering intelligence. Regardless of how you deploy.
RioRey hardware runs RIOS, our analytics-driven filtering software, directly on purpose-built appliances. Every device covers all 25 attack classes across Layer 3 to Layer 7, deploys in minutes, and operates automatically without signatures or manual rules.
What every RioRey device delivers
Filtering starts within minutes of powering up
No signatures to load, no rules to write, no learning period. RIOS analytics begin protecting your network automatically from the first packet. RioRey is designed not to drop legitimate traffic even during the heaviest attacks.
All 25 attack classes covered at line rate
TCP, TCP-HTTP, UDP, and ICMP based attacks are detected and mitigated automatically. Coverage includes volumetric floods, protocol abuse, fragmentation attacks, and Layer 7 application attacks. Detection is based on attack methodology, not signatures.
Managed through rWeb across every device and site
A single rWeb instance manages all your RioRey devices across multiple sites. Multi-tenant zones, customer-facing portals, real-time traffic data, historical reporting, and a full REST API for integration with external systems.
Deployment models
In-line deployment
Always-on filtering at the network edge
The appliance sits directly in the traffic path. All traffic is inspected continuously. Attack traffic is dropped at line rate while legitimate traffic passes through without interruption. No operator action required to activate mitigation.
Off-ramp deployment
On-demand scrubbing via RioRey Director
Director monitors traffic via netflow and sflow. When suspicious traffic is detected it is redirected to your RioRey scrubbing devices, filtered, and returned clean. Normal traffic never touches the filtering device. Ideal for high-capacity networks where in-line deployment across all links is not practical.
Hardware appliances
RE10
Single 10G link
Entry level
Entry level
Interface
1 x 10 Gbps
Single-mode and multimode SFP+
Max PPS
6 million
Any mix of DDoS traffic
Form factor
1U
Standard 19" rack
HA features
Hardware bypass
Integrated NIC bypass
Deployment
In-line or off-ramp
Best for
Single 10G sites
SME, hybrid on-premise anchor, client-premise deployment
RS40
Up to 4 x 10G links
Multi-link HA
Multi-link HA
Interfaces
Up to 4 x 10 Gbps
SFP+ interfaces, licensed by pair
Max PPS
40 million
10M PPS per active interface pair
Form factor
2U
Standard 19" rack
HA features
Full HA design
Hardware bypass, redundant hot-swap PSU, hot-swap fans
Deployment
In-line or off-ramp
Best for
Multi-ISP sites
Enterprise edge, ISP, hosting with multiple 10G uplinks
RE100 family
40G or 100G networks
License-scalable
License-scalable
Interface
1 x QSFP28
Supports 40G or 100G optics on the same hardware
Max PPS
40M or 80M
RE100/40 license: 40M PPS, license-upgradable to full RE100 throughput at 80M PPS. Same hardware, upgrade without replacement.
Form factor
1U
Standard 19" rack
HA features
External bypass option
Optional 1U external hardware bypass
Deployment
In-line or off-ramp
Best for
High-capacity sites
ISP, hosting provider, carrier, large enterprise with 40G or 100G uplinks
RE400
400Gbps protection (coming soon)
Interface
2 x 400 Gbps ports
2x NIC
Max PPS
TBD
After final testing
Form factor
1U
Standard 19" rack
HA features
TBD
Deployment
In-line or off-ramp
Best for
400G core networks
Large networks or scrubbing center providers that have transitioned to 400Gbps at their core
No single-device ceiling.
RIOS filtering scales horizontally. Run multiple RE100 units in parallel to multiply scrubbing capacity. The RS40 scales by licensing additional interface pairs as you add uplinks. Start with what you need today and expand the same hardware as your network grows. For capacity beyond your edge, rCloud extends your mitigation architecture into the cloud with the same visibility and controls.
Need capacity beyond your edge?
rCloud scrubbing works alongside any RioRey appliance. Own what you regularly need. Reach into the cloud for the rest. Same rWeb visibility across both layers.
Prefer software over hardware?
rVM virtual machine filtering runs the same RIOS analytics on your existing infrastructure. Available from 1.5M PPS to 50M PPS on a subscription basis.
Hardware configurator
Find the right filtering hardware for your network.
Answer a few questions about your sites and uplinks. The configurator will recommend a starting point and explain what to consider as your needs grow. Your sales conversation starts where this tool leaves off.
1
How do you want to deploy RioRey filtering?
In-line filtering
RioRey sits directly in the traffic path at each site. All traffic passes through the filtering device continuously. Best for always-on protection where you want immediate mitigation at the edge.
Off-ramp scrubbing
RioRey Director monitors your traffic via netflow. When suspicious traffic is detected it is redirected through your RioRey scrubbing devices. Clean traffic returns to your network. Good for high-capacity networks where in-line deployment across all links is not practical.
Your recommended configuration
This is a starting point for your conversation with the RioRey team. Exact sizing may vary based on your specific traffic profile.
Need capacity beyond your edge?
rCloud scrubbing extends your mitigation capacity on demand, with the same rWeb visibility as your on-premise devices. No black box.
Ready to talk through your configuration?
The RioRey team will review your network topology and confirm the right fit before you commit to anything.
Device archive
Have an old RioRey device? It may still be supported
Find details about their status and eligibility for support here.
Expand to view archive
End-of-Sale Devices: Fully eligible for Support, Software updates, hardware warranty
These devices are no longer available to order but remain fully supported.
Legacy Devices: Eligible for Support, Software updates, but has changes to renewal rates and how RMAs and repairs are handled
Support and software updates continue under modified terms. Contact us for renewal and repair details.
End-of-Support Devices: No longer eligible for maintenance or current software
These devices are no longer eligible for support contracts, software updates, or maintenance services.