rVM Virtual Machine DDoS Filtering
The full power of RIOS filtering. No dedicated hardware required.
rVM runs the same RIOS analytics that power our hardware appliances, deployed as a virtual machine on your existing infrastructure. Subscription based, no capex, no long-term lock-in. In-line or off-ramp. Protection starts within minutes of deployment.
What every rVM instance delivers
Filtering starts within minutes of deployment
No signatures to load, no rules to write, no learning period. RIOS analytics begin protecting your network automatically from the first packet. Legitimate traffic passes through unaffected even during heavy attacks.
TCP, TCP-HTTP, UDP, and ICMP based attacks are detected and mitigated automatically. Coverage includes volumetric floods, protocol abuse, fragmentation attacks, and Layer 7 application attacks. IPv4 and IPv6 supported.
A single rWeb instance manages all your rVM deployments across multiple sites. Multi-tenant zones, customer-facing portals, real-time traffic data, historical reporting, and a full REST API for integration with external systems.
When rVM is the right choice
rVM works best when
- You have purpose-built server infrastructure capable of meeting the resource requirements for your chosen tier, including a dedicated NIC in PCI passthrough
- You want filtering capacity on a subscription basis without a hardware procurement cycle
- You want to scale filtering capacity by adding instances in parallel with no single device ceiling
- You are an MSSP building a DDoS protection service and prefer a subscription model over hardware capex
- You want to build your own off-ramp scrubbing center using rVM instances with Director
How rVM compares to hardware
- Same RIOS filtering analytics and the same 25 attack class coverage as hardware appliances
- Performance is critically dependent on host infrastructure. A dedicated NIC in PCI passthrough is strongly recommended. Virtual interface configurations deliver significantly reduced performance.
- Resource requirements are substantial at higher tiers. An rVM-100 requires 30 CPU cores and 120 GiB of RAM. This is infrastructure-grade deployment, not a workload you add to spare server capacity.
- Hardware appliances offer purpose-built performance, integrated bypass options, and full HA design without host infrastructure dependency
- rVM is subscription only. Hardware is available as a purchase or on a hardware subscription model.
Minimum host infrastructure requirements
A dedicated NIC in PCI passthrough is strongly recommended for all data plane interfaces. Virtual interface configurations work but deliver significantly reduced performance. The 100G tier is tested against a Mellanox ConnectX-5 Ex in PCI passthrough. Full interface requirements, NIC compatibility, and NUMA configuration guidance are in the installation documentation (login required).
No single instance ceiling.
rVM instances can be deployed in parallel to multiply filtering capacity without limit. A deployment running three rVM-100 instances provides up to 150M PPS of combined scrubbing capacity. Scale up by adding instances as your network grows, and scale down when you do not need them. The same rWeb instance manages all of them.
rWeb management platform
Visibility and control are part of the package, not an afterthought.
At least one rWeb license is required per deployment. Pricing is shown below.
Required with every deployment
rWeb is the management and reporting platform that runs alongside every RioRey deployment. It gives you real-time visibility into traffic and attacks, direct controls over mitigation behavior, historical reporting for analysis and compliance, and a REST API for integration with external systems. At the enterprise tier it becomes a full multi-tenant portal — operators can expose controlled visibility to their own customers at the zone level, making it the foundation for a customer-facing DDoS protection service.
VM rWeb Light
$132/mo
$1,320 annual prepaid
- ✓1 filtering instance
- ✓5 zones
- ✓3 users
VM rWeb
$240/mo
$2,400 annual prepaid
- ✓4 filtering instances
- ✓50 zones
- ✓10 users
VM rWeb Enterprise
$324/mo
$3,240 annual prepaid
- ✓Unlimited instances
- ✓1,000 zones
- ✓Unlimited users
- ✓Customer portal included
VM filtering instances
All pricing based on a 12 month commitment, paid monthly. Annual prepaid pricing is available at a lower total cost.
rVM-1
1.5 million PPS
Monthly
$480/mo
Annual prepaid
$4,800
RR-VR0201LM
rVM-5
3 million PPS
Monthly
$540/mo
Annual prepaid
$5,400
RR-VR0205LM
rVM-10
5 million PPS
Monthly
$660/mo
Annual prepaid
$6,600
RR-VR0210LM
rVM-20
12 million PPS
Monthly
$1,080/mo
Annual prepaid
$10,800
RR-VR0240LM
rVM-40
24 million PPS
Monthly
$1,560/mo
Annual prepaid
$15,600
RR-VR0240LM
rVM-100
50 million PPS
Monthly
$1,920/mo
Annual prepaid
$19,200
RR-VR02100LM
Pricing based on a 12 month commitment, paid monthly. Contact sales to inquire about alternative terms, quantity discounts, or proof of concept pricing. Subscription includes Standard Support. Contact sales for Enterprise Support or alternative support terms. Performance is subject to resources allocated to the VM instance by the host environment.
Need capacity beyond your edge?
rCloud scrubbing works alongside rVM deployments. Own what you regularly need on-premise. Reach into the cloud for large volumetric events. Same rWeb visibility across both layers.
Prefer dedicated hardware?
RioRey hardware appliances offer purpose-built performance, integrated bypass options, and full HA design. Available as a capital purchase or on a hardware subscription model.