Setup Guide

1. Sign up and pay

Go to /signup, enter the fully qualified domain name (FQDN) of the site you want to protect, and complete payment via Stripe ($49/month).

We resolve your domain to its current IP address before you make any DNS changes. This becomes the "origin IP" that Yod proxies traffic to.

2. Wait for provisioning (~3 minutes)

After payment, we automatically provision a dedicated VM for your instance. You'll receive an email with your instance IP address, admin password, and DNS instructions.

You can also watch provisioning progress on your dashboard.

3. Update your DNS

Create two DNS A records pointing to your Yod instance IP:

example.com<your-instance-ip>

yod.example.com<your-instance-ip>

The first record routes your site's traffic through Yod. The second gives you access to the Yod console.

DNS propagation typically takes 5-30 minutes. Your dashboard auto-checks and shows a green indicator when ready. Caddy automatically provisions Let's Encrypt TLS certificates for both domains.

4. Configure your Yod console

Once DNS is verified, open your console at https://yod.yourdomain.com and log in with your admin password.

Session cookies (recommended)

Enter your application's session cookie name(s) — for example PHPSESSID, connect.sid, or _session_id. This enables session-level attack detection (correlating multiple requests from the same attacker). Without it, Yod still detects per-request attacks.

AI provider (optional)

For AI-powered attack analysis, configure an Anthropic API key or Ollama URL. Without an AI provider, Yod still detects and redirects — just without AI analysis summaries.

5. Origin firewall (recommended)

For maximum protection, configure your origin server's firewall to only accept HTTP/HTTPS traffic from your Yod instance IP. This prevents attackers from bypassing Yod by connecting directly to your origin.

# Example: UFW on Ubuntu

ufw allow from <yod-instance-ip> to any port 443

ufw allow from <yod-instance-ip> to any port 80

Automatic failover

If the Yod router ever becomes unresponsive, Caddy automatically fails over to proxying traffic directly to your origin server. Your site stays up — just temporarily unprotected. When Yod recovers, traffic routes back through it automatically. You'll see failover alerts on your dashboard and receive an email notification.

FAQ

What happens if Yod goes down?

Your site stays online. Caddy health-checks the Yod router every 5 seconds and automatically fails over to proxying directly to your origin. When Yod recovers, it switches back.

Do I need to change my application code?

No. Yod works as a transparent reverse proxy. No SDKs, no code changes, no agents to install.

What's included in $49/month?

A dedicated VM running the full Yod stack, automatic TLS, real-time detection console, automatic updates with rollback, and failover protection. AI analysis is BYOAI — you provide your own Anthropic API key or Ollama URL.

Why do I need to bring my own AI provider?

Keeping AI costs out of the base price lets us offer Yod at $49/month with 88% gross margin. You control your AI spend and can choose between cloud (Anthropic) or self-hosted (Ollama) models.

Is my data shared with other customers?

No. Every customer gets a completely isolated VM with its own database. No shared infrastructure, no shared state. Your traffic and detection data never leaves your VM.

What if my site gets more than 1M requests/month?

Contact us. We can upgrade your VM to a higher tier to handle more traffic.

How do updates work?

Yod has an update agent that checks for new versions every 15 minutes. Updates roll out via canary strategy (10% of instances first) with automatic rollback if health checks fail. Zero maintenance on your end.

Can I cancel anytime?

Yes. Go to Dashboard > Billing > Manage Subscription to cancel. Your instance will be destroyed after the current billing period.

What session cookies should I configure?

The cookie your application uses to track logged-in users. Common examples: PHPSESSID (PHP), connect.sid (Express.js), _session_id (Rails), JSESSIONID (Java). Check your browser's developer tools (Application > Cookies) to find yours.

Is there an SLA?

Not for the MVP tier. Yod is designed for high availability with automatic failover, but we don't offer formal SLA guarantees yet.