Anycast Load Balancer
Made in Germany

EU-wide load balancing with HTTP/TCP termination at multiple PoPs. Operated on our own infrastructure with our own AS and IP networks. Your sovereign alternative to Cloudflare and Akamai.

Learn More

Leading companies trust our technology ↘

UDS
Volkswagen
Liebherr
T-Systems
Program51
FJD
DWT
INH
Hades
HiOrg-Server
own3d
Tikfinity
Connext
Buben & Mädchen
Portainer
Prime Insights
TELTEC
Elevantiq
Moovit
CFTools
OCC
Reiner SCT
Schwarze Gruppe
Stadt Köln
Vivavis
Avemio Tech
Business Intelligence
Cosanta
Datamints
Rimian
Clade
Cyreen
Inett
Paperless Group
Pikon
PXIO
SaaS Systems
Seven2One
SEWOBE
Taywa
VJupix
UDS
Volkswagen
Liebherr
T-Systems
Program51
FJD
DWT
INH
Hades
HiOrg-Server
own3d
Tikfinity
Connext
Buben & Mädchen
Portainer
Prime Insights
TELTEC
Elevantiq
Moovit
CFTools
OCC
Reiner SCT
Schwarze Gruppe
Stadt Köln
Vivavis
Avemio Tech
Business Intelligence
Cosanta
Datamints
Rimian
Clade
Cyreen
Inett
Paperless Group
Pikon
PXIO
SaaS Systems
Seven2One
SEWOBE
Taywa
VJupix

Anycast Load Balancing

Our Load Balancer infrastructure runs on our own systems at multiple EU PoPs. We operate our own Autonomous System (AS) with our own IP networks and offer Anycast routing for maximum availability and minimal latency.

Anycast Routing

Geo-optimized traffic distribution

Traffic is automatically routed to the nearest PoP. If a PoP fails, another automatically takes over – without DNS propagation or manual intervention.
Anycast BGP Geo-Routing Failover

Own AS

Autonomous System & IP Networks

We operate our own infrastructure with our own AS and IP address space. No dependency on third parties – full control over routing and peering.
AS BGP Peering Infrastructure

HTTP/TCP Termination

Layer 4 & Layer 7

Termination of HTTP/HTTPS and TCP traffic at our PoPs. TLS offloading, header manipulation, and intelligent backend routing included.
L4 L7 TLS Offloading

Web Application Firewall

Optional WAF integration

Protect your endpoints with an upstream Web Application Firewall. Protection against OWASP Top 10, DDoS mitigation, and bot management.
WAF DDoS OWASP Bot Protection

Bring Your Own IP

BYOIP Support

Use your own IP addresses for maximum flexibility. We announce your IP networks through our AS at all PoPs.
BYOIP IP Networks Flexibility Migration

Endpoint Monitoring

Automatically integrated

All load balancer endpoints are automatically part of our Endpoint Monitoring – with optional security assessments.
Monitoring Alerting Security Automatic

Comprehensive Metrics

For each load balancer and endpoint, you receive detailed metrics and statistics – in real-time and historical.

Throughput

Requests & Connections

Detailed metrics on request rate, active connections, and bytes transferred – per endpoint and aggregated.
Requests Connections Throughput

Bandwidth

Traffic analysis

Ingress and egress bandwidth per endpoint, backend, and PoP. With historical trends and peak analysis.
Bandwidth Traffic Trends

Latency

End-to-end latency

Latency metrics from client to load balancer, to backend, and back. Percentile-based evaluation (p50, p95, p99).
Latency P99 Performance

Error Rate

Error tracking

Overview of HTTP status codes, backend timeouts, and connection errors. With alerting on threshold violations.
Errors HTTP Alerting

Geo Distribution

Traffic by region

Visualization of traffic by geographic origin and PoP used. For capacity planning and optimization.
Geo PoP Distribution

Prometheus Export

Native integration

All metrics available as Prometheus endpoint. Seamless integration into your APM Stack.
Prometheus Grafana APM

Comparison with Alternatives

Our load balancer solution is the sovereign alternative to US-based CDN and proxy providers – with full control over your data and infrastructure.

vs. Cloudflare

Kriterium ayedo Cloudflare
Jurisdiction
EU / GDPR compliant
US / Cloud Act
Infrastructure
Own AS & IP networks
No transparency
Pricing
Transparent
Complex
BYOIP
Supported
Enterprise only

vs. Akamai

Kriterium ayedo Akamai
Jurisdiction
EU / GDPR compliant
US / Cloud Act
Pricing
Transparent
Complex, Enterprise focus
Setup
Fast, Self-Service
Lengthy, Sales process
Target Market
SMB to Enterprise
Enterprise only

vs. AWS ALB/NLB

Kriterium ayedo AWS ALB/NLB
Jurisdiction
EU / GDPR compliant
US / Cloud Act
Pricing
Transparent
LCU-based, complex
Monitoring
Endpoint monitoring incl.
Additional costs
Vendor Lock-in
Standard protocols
AWS-specific

Features in Detail

Our load balancers offer enterprise features for demanding workloads.

Health Checks

Backend monitoring

Active and passive health checks for your backends. Automatic removal of failed backends from the pool.
Health Checks Backends Failover

Session Persistence

Sticky Sessions

Cookie-based or IP-based session affinity for stateful applications.
Sessions Cookies Stateful

Rate Limiting

Traffic control

Configurable rate limits per endpoint, IP, or header. Protection against traffic spikes and abuse.
Rate Limiting Throttling Protection

Custom Headers

Header manipulation

Add, remove, or modify HTTP headers. X-Forwarded-For, Real-IP, and custom headers.
Headers X-Forwarded Custom

TLS Configuration

Secure encryption

Modern TLS versions and cipher suites. Automatic certificate management or Bring Your Own Certificate.
TLS Certificates Cipher

Multi-Backend

Backend pools

Load balancing across multiple backends with configurable weights and routing rules.
Backends Pools Weights

Compliance & Regulatory Requirements

The ayedo Software Delivery Platform meets the requirements of current EU regulations. From GDPR to NIS-2 to DORA – our platform is designed for regulated industries and critical infrastructures.

GDPR-Compliant Data Processing

Privacy by Design & Default.

EU data residency (Germany), Customer-Managed Keys (BYOK/BYOHSM), encryption at rest/in transit. ISO 27001-certified data protection management. Support for data subject rights, DPA, incident response. More about GDPR.

NIS-2-Compliant Operations

Resilience for critical infrastructures.

24/7 monitoring, incident response, BCP/DR processes, supply chain transparency (SBOM). EU-based operations, MFA/PAM, vulnerability management, patch processes. Ideal for essential/important entities. More about NIS-2.

DORA-Ready for Financial Institutions

ICT resilience tailored.

ICT risk management framework, documented exit strategies, third-party risk management, TLPT readiness. Structured incident reporting chains, continuous resilience testing, ISO 27001-certified. More about DORA.

CRA-Compliant Software Supply Chain

Security by Design across the entire lifecycle.

SBOM generation, CVE scanning, vulnerability disclosure processes, update management. Signed container images, GitOps-based audit trails, transparent supply chain. More about CRA.

Cloud Sovereignty Framework

Digital sovereignty made measurable.

EU-based operations, open standards, exit capability without lock-in. Designed for SEAL-4 (Full Digital Sovereignty) across all eight sovereignty objectives. No dependencies on non-EU control. More about the Framework.

Data Act-Compliant Portability

Switching without barriers.

Open APIs (OpenAPI), standardized formats (YAML/JSON/OCI), complete exit runbooks, Infrastructure-as-Code portability. Multi-cloud capable, no egress fees, functional equivalence. More about Data Act.

Integrated Compliance Roadmap

Holistic approach.

How ayedo systematically addresses GDPR, NIS-2, DORA, CRA, Data Act, Cloud Sovereignty Framework, ISO 27001/9001. Certifications, processes, technical measures, audit readiness. To overview.

Pricing

Transparent pricing without hidden costs.

Load Balancer

Per Load Balancer

€25 /month

  • ✓ €25 base price/month
  • ✓ 1 TB traffic included
  • ✓ 10k connections included
  • ✓ Anycast routing EU-wide
  • ✓ HTTP/TCP termination
  • ✓ TLS offloading included
  • ✓ Health checks included
  • ✓ Endpoint monitoring included
  • ✓ Prometheus metrics

Additional Resources

When exceeded

  • ✓ + €5 / TB / month additional traffic
  • ✓ + €0.125 / 1k connections / month
  • ✓ Transparent billing
  • ✓ No hidden costs

Options

Extensions

  • ✓ Web Application Firewall
  • ✓ Bring Your Own IP
  • ✓ Custom SSL certificates
  • ✓ Rate Limiting
  • ✓ Dedicated IPs
  • ✓ Premium Support

Integration with Polycrate

Our load balancers are an integral part of the Polycrate Software Security Framework and are managed through the Polycrate API.

Polycrate API

Central management

Configure load balancers, backends, WAF rules, and metrics through the Polycrate API web interface or REST API.
API Web-UI REST
Explore API

Kubernetes Integration

Native K8s connection

Load balancers can serve as ingress backend for your Managed Kubernetes clusters – with automatic service discovery.
Kubernetes Ingress Services
Learn More

You build it. We run it.

Excellent performance and maximum uptime - that’s what we wake up for. And sometimes even in the middle of the night.

270 Million End Users

per month

More than 9 million end users use software we deploy every day, on the internet or on-premise.
User Endanwender Software

99.99% Uptime

annual average

Our managed services are unavailable for less than 1 hour per year on average.
Uptime Verfügbarkeit SLA

MTTD < 5 Minutes

on average

Our granular alerting system detects errors and outages faster than you can say ‘Service Level Agreement’.
MTTD Monitoring Detection

15 Billion Logs

per month

More than 2000 logs per second are collected by our collectors and stored GDPR-compliant.
Logs Observability Ingestion

46 Million Active Timeseries

per month

1.7 million datapoints are measured per second by our monitoring systems.
Monitoring Metrics Datapoints

50 TB Backups

per month

More than 2000 backups are stored daily on our encrypted long-term storage.
Backup Storage Sicherheit