[Yandex Cloud documentation](../../../index.md) > [Yandex Smart Web Security](../../index.md) > [Tutorials](../index.md) > Creating an L7 load balancer with DDoS protection at OSI L3-L4 > Overview

# Creating a load balancer with DDoS protection


Distributed denial of service, or [DDoS](https://en.wikipedia.org/wiki/Denial-of-service_attack), is a type of cyberattack that involves sending massive numbers of requests to a server or network to overwhelm it or make it inoperable.

In this tutorial, you will deploy a DDoS protection infrastructure for app backends in Yandex Cloud. To do this, you will create a cloud network, set up [Yandex Virtual Private Cloud](../../../vpc/index.md) security groups, create a [Yandex Compute Cloud](../../../compute/index.md) instance group to serve as backends, and link it to the infrastructure of a [Yandex Application Load Balancer](../../../application-load-balancer/index.md) L7 load balancer with a DDoS-protected public IP address.

You can create a DDoS protection infrastructure using the following tools:

* [Management console, CLI](console.md): Use the Yandex Cloud management console or the CLI to create your infrastructure step by step.
* [Terraform](terraform.md): Streamline creating and managing your resources using the infrastructure-as-code (IaC) approach. Download a Terraform configuration example and deploy your infrastructure using the [Yandex Cloud Terraform provider](../../../terraform/index.md).