# How Shield works

> Inline scrubbing, attack detection and custom filtering profiles explained.

Source: https://docs.avenlith.com/en/how-shield-works  
Category: DDoS protection  
Last updated: 2026-09-20

## Architecture

Every packet entering the Avenlith network passes through scrubbing appliances at the edge of each region. Clean traffic continues to your server with less than 0.3 ms of added latency.

## Detection

Shield builds a traffic baseline for each IP. When volume or packet patterns deviate, mitigation starts automatically — typically within one second.

## Filtering profiles

Profiles tune filtering for specific protocols such as game servers, VoIP or DNS:

```bash
avenlith shield rule create \
  --target 203.0.113.24 \
  --protocol udp --port 27015 \
  --profile game-a2s
```

## Capacity

| Plan | Capacity | Layers |
| --- | --- | --- |
| Standard | 500 Gbps | L3/L4 |
| Advanced | 3 Tbps | L3–L7 |
| Enterprise | 18 Tbps | L3–L7 + SOC |