Recs.
Updated
Incapsula is a cloud based security platform that delivers applications. Features provided by Incapsula include DDoS protection, failover services and load balancing.
Specs
Pros
Pro Intelligently recognizes bots to counter layer 7 attacks
Incapsula has a bot recognition engine to achieve a low rate of false positives on layer 7 attacks. These attacks are notoriously hard to detect as they are designed to look like regular network traffic.
Their always-on recognition solution automatically triggers layer 7 protection without user intervention, protecting you during downtimes like holidays, weekends, and late nights.
Pro Instant propagation of security rules
Rules configured through IncapRules are able to instantly propagate to Incapsula's reverse proxy based global network. This is in contrast to DNS based systems that are subject to TTL/DNS cache delays, which slow down the propagation of custom security rules.
Pro Powerful security rule scripting through IncapRules
IncapRules is a full fledged scripting language that gives clients full and detailed control of security policies. The language provides access to dozens of filters for analyzing incoming traffic, including headers, client type, location, access rates, and more. There are also a multitude of trigger responses on how to deal with the filtered traffic, including alerts, captchas, and blocking.
Pro Massive network capacity
Incapsula's proprietary "Behemoth" machines handle 170 Gbps each, and process up to 100 million packets per second. As of March 10th 2015, they have a network of 13 data centers with these machines, allowing them to process more than 2 Tbps of bandwidth on top of their existing capabilities.