rVM Virtual Machine DDoS Filtering
rVM virtual machine filtering
The full power of RIOS filtering. No dedicated hardware required.
rVM runs the same RIOS analytics that power our hardware appliances, deployed as a virtual machine on your existing infrastructure. Subscription based, no capex, no long-term lock-in. In-line or off-ramp. Protection starts within minutes of deployment.
What every rVM instance delivers
Filtering starts within minutes of deployment
No signatures to load, no rules to write, no learning period. RIOS analytics begin protecting your network automatically from the first packet. Legitimate traffic passes through unaffected even during heavy attacks.
All 25 attack classes covered at line rate
TCP, TCP-HTTP, UDP, and ICMP based attacks are detected and mitigated automatically. Coverage includes volumetric floods, protocol abuse, fragmentation attacks, and Layer 7 application attacks. IPv4 and IPv6 supported.
Managed through rWeb across every instance and site
A single rWeb instance manages all your rVM deployments across multiple sites. Multi-tenant zones, customer-facing portals, real-time traffic data, historical reporting, and a full REST API for integration with external systems.
When rVM is the right choice
rVM works best when
- You have purpose-built server infrastructure capable of meeting the resource requirements for your chosen tier, including a dedicated NIC in PCI passthrough
- You want filtering capacity on a subscription basis without a hardware procurement cycle
- You want to scale filtering capacity by adding instances in parallel with no single device ceiling
- You are an MSSP building a DDoS protection service and prefer a subscription model over hardware capex
- You want to build your own off-ramp scrubbing center using rVM instances with Director
How rVM compares to hardware
- Same RIOS filtering analytics and the same 25 attack class coverage as hardware appliances
- Performance is critically dependent on host infrastructure. A dedicated NIC in PCI passthrough is strongly recommended. Virtual interface configurations deliver significantly reduced performance.
- Resource requirements are substantial at higher tiers. An rVM-100 requires 30 CPU cores and 120 GiB of RAM. This is infrastructure-grade deployment, not a workload you add to spare server capacity.
- Hardware appliances offer purpose-built performance, integrated bypass options, and full HA design without host infrastructure dependency
- rVM is subscription only. Hardware is available as a purchase or on a hardware subscription model.
Minimum host infrastructure requirements
| rVM tier | WAN speed | Memory | CPU cores | Storage |
|---|---|---|---|---|
| rVM-1 | 1 Gbps | 13 GiB | 4 cores | 4 GB virtual |
| rVM-5 | 5 Gbps | 18 GiB | 5 cores | 4 GB virtual |
| rVM-10 | 10 Gbps | 24 GiB | 8 cores | 4 GB virtual |
| rVM-40 | 40 Gbps | 82 GiB | 25 cores | 4 GB virtual |
| rVM-100 | 100 Gbps | 120 GiB | 30 cores | 4 GB virtual |
A dedicated NIC in PCI passthrough is strongly recommended for all data plane interfaces. Virtual interface configurations work but deliver significantly reduced performance. The 100G tier is tested against a Mellanox ConnectX-5 Ex in PCI passthrough. Full interface requirements, NIC compatibility, and NUMA configuration guidance are in the installation documentation (login required).
No single instance ceiling.
rVM instances can be deployed in parallel to multiply filtering capacity without limit. A deployment running three rVM-100 instances provides up to 150M PPS of combined scrubbing capacity. Scale up by adding instances as your network grows, and scale down when you do not need them. The same rWeb instance manages all of them.
rWeb management platform
Visibility and control are part of the package, not an afterthought.
At least one rWeb license is required per deployment. Pricing is shown below.
Required with every deployment
rWeb is the management and reporting platform that runs alongside every RioRey deployment. It gives you real-time visibility into traffic and attacks, direct controls over mitigation behavior, historical reporting for analysis and compliance, and a REST API for integration with external systems. At the enterprise tier it becomes a full multi-tenant portal, so operators can expose controlled visibility to their own customers at the zone level, making it the foundation for a customer-facing DDoS protection service.
| License | Filtering instances | Zones | Users | Monthly | Annual prepaid | Part number |
|---|---|---|---|---|---|---|
| VM rWeb Light | 1 | 5 | 3 | $132/mo | $1,320 | RR-VWE001LM |
| VM rWeb | 4 | 50 | 10 | $240/mo | $2,400 | RR-VWE010LM |
| VM rWeb Enterprise | Unlimited | 1,000 | Unlimited, customer portal included | $324/mo | $3,240 | RR-VWE100LM |
rVM filtering instance pricing
All pricing based on a 12 month commitment, paid monthly. Annual prepaid pricing is available at a lower total cost.
| Model | Filtering capacity | Monthly | Annual prepaid | Part number |
|---|---|---|---|---|
| rVM-1 | 1.5 million PPS | $480/mo | $4,800 | RR-VR0201LM |
| rVM-5 | 3 million PPS | $540/mo | $5,400 | RR-VR0205LM |
| rVM-10 | 5 million PPS | $660/mo | $6,600 | RR-VR0210LM |
| rVM-20 | 12 million PPS | $1,080/mo | $10,800 | RR-VR0240LM |
| rVM-40 | 24 million PPS | $1,560/mo | $15,600 | RR-VR0240LM |
| rVM-100 | 50 million PPS | $1,920/mo | $19,200 | RR-VR02100LM |
Pricing based on a 12 month commitment, paid monthly. Contact sales to inquire about alternative terms, quantity discounts, or proof of concept pricing. Subscription includes Standard Support. Contact sales for Enterprise Support or alternative support terms. Performance is subject to resources allocated to the VM instance by the host environment.
Need capacity beyond your edge?
rCloud scrubbing works alongside rVM deployments. Own what you regularly need on-premise. Reach into the cloud for large volumetric events. Same rWeb visibility across both layers.
Prefer dedicated hardware?
RioRey hardware appliances offer purpose-built performance, integrated bypass options, and full HA design. Available as a capital purchase or on a hardware subscription model.