Network security
DDoS protection with 30 Tbps+ of capacity
Always-on, multi-layer filtering that absorbs volumetric, protocol and game-specific attacks before they reach your server. Included free on VPS plans.
How it works
Detect. Divert. Scrub. Deliver.
Every packet that reaches our network is analysed. When an attack starts, traffic for the targeted IP is routed through 30 Tbps+ of mitigation capacity, and only clean traffic continues to your server.
- 01
Detect
Traffic patterns, packet rates and protocol behaviour are analysed continuously to spot an attack within moments of it starting.
- 02
Divert
Traffic for the targeted IP is routed through filtering infrastructure at the edge of the network, before it reaches your port.
- 03
Scrub
Layer 3/4 floods, amplification and malformed packets are dropped. Game and protocol-aware rules keep real sessions connected.
- 04
Deliver
Clean traffic is forwarded to your server. When the attack ends, routing returns to normal automatically.
Protection against every type of attack
Volumetric, protocol and application attacks need different defences. Our network handles the first two automatically and helps you with the third.
Volumetric floods
UDP floods, ICMP floods and amplification attacks (DNS, NTP, SSDP, CLDAP, Memcached) are absorbed by 30 Tbps+ of capacity before they can saturate your link.
Protocol attacks · Layer 3/4
SYN, ACK and RST floods, fragmentation and state-exhaustion attacks are filtered before they reach your server.
Game server protection
UDP-aware filtering for Minecraft, Rust, ARK, Arma 3 and other game servers, tuned to keep real players connected during an attack.
Application attacks · Layer 7
HTTP/S floods can be reduced with rate limiting and filtering. Pair them with a WAF or CDN for login abuse and scraping.
Edge servers
Hide your origin IP behind a protected edge server so attackers cannot bypass filtering by hitting your server directly.
Host security
Patch software, close unused ports, use SSH keys and restrict admin access. Network protection and host security work together.
Technical details
| Feature | Details |
|---|---|
| Mitigation capacity | 30 Tbps+ of network-wide filtering capacity. This is separate from your server port speed, which is listed on each plan. |
| Activation | Always-on monitoring with automatic mitigation. No manual activation, DNS change or ticket is needed. |
| Layer 3 / 4 | UDP, ICMP, SYN, ACK, RST and fragmentation floods, plus reflection and amplification (DNS, NTP, SSDP, CLDAP, Memcached, Chargen). |
| Game traffic | UDP-aware rules that separate real player sessions from floods, including query floods and malformed packets aimed at game ports. |
| Layer 7 | HTTP/S floods can be reduced with rate limiting and filtering on request. For login abuse, scraping and application bugs, use a WAF and application-level limits as well. |
| Clean traffic | Legitimate traffic keeps flowing to your server during an attack, so your service stays reachable while the flood is filtered. |
| Origin protection | Put an edge server in front of your origin to hide its IP address and filter traffic close to your users. |
| Incident support | Engineers investigate attacks, false positives and routing 24/7. Send the service ID, affected IP and ports, and the start time with timezone. |
Protection by product
| Product | Protection |
|---|---|
| Linux VPS | DDoS protection included free |
| Windows VPS, SSD VPS, Cloud VPS, Lightsail VPS | Anti-DDoS Pro included free |
| Game servers | Game-aware Anti-DDoS filtering included |
| Dedicated servers | Protection options available. Ask sales for your configuration |
| Edge servers | Filtering at the edge, with your origin IP hidden |
Your uptime commitment and service credits are set out in our Service Level Agreement. Using our network to attack others is forbidden by the Acceptable Use Policy. Under attack right now? Open a ticket and an engineer will help 24/7.
// FAQ · 5 answers
DDoS protection FAQs
Yes. Protection from our 30 Tbps+ mitigation network is included free on VPS plans, and game servers include game-aware filtering. The DDoS row on each plan shows the protection it includes. Ask sales about options for dedicated servers.
No. Traffic is monitored continuously and mitigation starts automatically when an attack is detected. You do not need to open a ticket or change DNS to activate it.
Volumetric floods (UDP, ICMP and amplification attacks such as DNS, NTP, SSDP, CLDAP and Memcached), protocol attacks (SYN, ACK and fragmentation floods) and game-specific floods against UDP game ports. For HTTP floods and other application-layer attacks, combine network protection with rate limiting or a WAF.
Clean traffic is forwarded to your server after filtering, normally with little or no noticeable added latency. If you see packet loss or legitimate players being blocked, send us timestamps and affected ports so we can tune the filtering.
Yes. DDoS filtering stops floods before they reach your port. It does not replace patching, a host firewall, strong passwords or SSH keys, or application rate limits.
Stay online.
Whatever comes.
30 Tbps+ DDoS protection is included free with every VPS.
Choose a protected plan