How our DDoS protection works

DDoS attacks are an unfortunate reality of running public game servers. Our protection is always-on, automatic, and requires zero configuration.

What is a DDoS attack

A Distributed Denial of Service attack floods your server with malicious traffic to overwhelm network resources, crash services, or force players offline.

Our layered defense

Tier 1 — Edge absorption

All traffic hits our edge network first. With 1.2 Tbps of scrubbing capacity, we absorb volumetric attacks before they ever reach your server.

Tier 2 — Protocol-aware filtering

After volume is scrubbed, we inspect packets at the protocol level. Game-specific rules recognize valid Minecraft, FiveM, Source Engine, and Rust traffic patterns.

Tier 3 — Server-level rules

Your server applies connection-rate limits and IP reputation scoring. Suspicious IPs are temporarily blacklisted at the kernel level.

What you do not need to worry about

• No configuration required — protection is active from the moment your server boots
• No false positives for legitimate players
• No bandwidth overage charges — scrubbed traffic does not count toward your plan limits
• No action needed during an attack — you will receive an email alert, but the server stays online

What you should still do

• Keep your panel password strong and unique
• Do not advertise your raw server IP on public forums — use a domain name
• Report repeated attacks to our support team so we can tune rules for your traffic pattern