SSL Gateway

Security accessible to all for free

SSL Gateway is your new comprehensive security solution.

Our free solution comes with a Let’s Encrypt certificate so you can enable HTTPS and our L4 anti-DDoS protection.

If your needs are more advanced opt for a solution with an EV certificate (Extended Validation certificate enabling the green address bar) and dedicated IPv4 and IPv6 addresses with a custom reverse DNS. Alternatively, choose to speed up your website with our CDN or increase your protection through our L7 anti-DDoS solution.

Our SSL Gateway solutions

Free SSL Gateway

  • L4 anti-DDoS
  • 100 concurrent connections
  • Metrics (24h)
  • HTTPS through Let’s Encrypt
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -
  • -


Advanced SSL Gateway

  • Advanced L4 anti-DDoS
  • 1000 concurrent connections
  • Metrics (1 month)
  • HTTPS through Let’s Encrypt
  • HSTS (HTTP Strict Transport Security)
  • Multi-sites
  • Multiple subdomains
  • Dedicated IPv4 & IPv6
  • Custom reverse DNS
  • Optional EV certificate
  • -
  • -
  • -

ex. VAT/month (or £21.60 incl. VAT)

Enterprise SSL Gateway

  • L7 - anti-DDos
  • 10,000 concurrent connections
  • Metrics (1 year)
  • HTTPS through Let’s Encrypt
  • HSTS (HTTP Strict Transport Security)
  • Multi-sites
  • Multiple subdomains
  • Dedicated IPv4 & IPv6
  • Custom reverse DNS
  • Optional EV certificate
  • Multiple backends
  • CDN
  • Anycast DNS

ex. VAT/month (or £216.00 incl. VAT)


Certificate type: DV Let’s Encrypt
Key length: 4,096 bits
Encryption: 256 bits
"Fully qualified domain name" includes one subdomain of your choice per domain
Multi-sites: unavailable
Cipher: only one level
HSTS (HTTP Strict Transport Security): not available
Included metrics (available soon):
  • Number of concurrent connections
  • Number of requests
  • Number of open sessions
Retention period: 24 hours
Anti-DDos level: advanced L4
Attacks blocked:
  • ICMP Echo Request Flood
  • IP Packet Fragment Attack
  • IGMP Flood
  • Ping of Death
  • TCP SYN Flood
  • TCP Spoofed SYN Flood
  • TCP SYN ACK Reflection Flood
  • TCP ACK Flood
  • TCP Fragmented Attack
Custom firewall: unavailable
Number of concurrent connections: 100
Monthly bandwidth: 1 TB
Datacentre number: 1 (Roubaix)
Choice of datacentre: available soon
IPv4: shared
IPv6: coming soon
Custom reverse DNS: unavailable
CDN: unavailable
DNS Anycast: unavailable

Keep up to date

Your questions answered

Who should use SSL Gateway?
SSL Gateway is mainly for people who have a private hosting solution with OVH (Dedicated servers, Private Cloud, Public Cloud and VPS), or a hosting service outside of OVH.

Can I order SSL Gateway if I have an OVH shared hosting package attached to my domain?
No. OVH shared hosting packages are not suited to SSL Gateway since they already provide SSL and anti-DDos functionalities.

Does my domain have to exist before I can order SSL Gateway?
The domain has to exist because you will have to modify an A record in your DNS zone within 72 hours of your order so that your SSL certificate can be verified.

What happens if I make a mistake and place an order for a domain that's not mine?
Don't worry, if the changes requested for the domain after you placed your order are not done within 72 hours, the order will be cancelled.

How is SSL Gateway installed?
Once the service has been set up, an email will inform you about the modifications that need to be done in your DNS zone for your domain to point towards the OVH infrastructure. Once this modification is done, we will be able to finish installing your service. A new email will be sent to your when your service is installed.

Is the SSL Gateway compatible with my domain and subdomains?
SSL Gateway is currently only compatible with subdomains. That being said, you can use the subdomain of your choice (www or anything else). However, it isn't possible to order more than one SSL Gateway service per domain. Any order for another subdomain belonging to the same domain will be declined.

Is HSTS available with SSL Gateway?
Yes but only with "Advanced" and "Enterprise" options which will be available soon.

What is HSTS?
HSTS (HTTP Strict Transport Security) ensures security between a browser and the server by preventing the use of unencrypted connections. HSTS support is essential to get an A+ grade during SSL connection tests.

What is a Cipher?
A Cipher is a cryptographic algorithm used to secure a connection to a website.

Can I choose a particular list of Ciphers?
No, for the Free offer, we only provide one level which is a compromise between security and compatibility.
The "Advanced" and "Enterprise" options will be available soon and they will offer several levels of Ciphers to maximise security or compatibility.

Can I order SSL Gateway if I already have an active SSL certificate for my domain?
Yes, but the SSL will be interrupted for the time it takes to generate the SSL certificate provided by OVH.
Indeed, the domain must initially point towards our infrastructure to generate the SSL certificate.

Where can I manage my service?
In the Sunrise section of your customer account.

What level of guarantee comes with the "Free" option?
We are in the midst of finalising this service offer, and so we cannot provide any level of guarantee yet.
However, we are very confident in our technology, which is currently being used by several millions of websites hosted at OVH.

What happens when I change the entry for my subdomain in the DNS zone before my SSL certificate is installed?
Before sending you the first email asking you to modify your DNS zone, we will preconfigure your service in order to take control of the unencrypted stream of data until your certificate is generated.
This way you can modify your DNS zone with no impact on the availability of your website in http.