DDoS Protection
Over 8 Tbps of network capacity, symmetric filtering built on XDP/eBPF and filters made for game servers. Always in the path, never null-routed, at no extra cost.
Through our upstream PletX
Absorbed without null-routing the target
Detected and filtered automatically
Behind the same always-on filter
What keeps your server online
Four things decide whether a server stays reachable during an attack. This is how we handle each of them.
Large-scale attacks hit a wall
More than 8 Tbps of capacity through our upstream PletX. Volumetric attacks are absorbed there, long before they could saturate an uplink.
Sees both directions
Inbound and outbound traffic pass through the same filter. It follows every connection from handshake to close, so spoofed and unsolicited packets are dropped while real sessions keep flowing.
Filtered before the kernel
eBPF programs inspect every packet at the XDP hook, directly in the network driver, before the Linux network stack spends a single cycle on it. Millions of packets per second at line rate, with no added latency.
Speaks your game's protocol
Protocol-aware filters know what legitimate game traffic looks like and drop everything else, without kicking real players.
Ports are detected from the first real handshake, custom ports included. No rules, no tickets.
Server-list and status queries are answered by the filter, so query floods never reach your server.
Malformed and invalid game packets are dropped before they cost your server CPU time.
From the internet to your server in four stages
All traffic runs through the filter permanently. Nothing is rerouted when an attack starts, so there is no switchover delay and no gap in protection.
Upstream
Incoming traffic first passes through the network of our upstream PletX. 8+ Tbps of capacity absorbs the volume, and obviously malicious traffic is dropped right there.
XDP / eBPF filtering
Redundant filter nodes inspect every packet at line rate and drop attack patterns directly in the network driver.
Symmetric state check
Only packets that belong to a tracked or legitimate new connection get through. Game filters validate the protocol on top.
Your server
Clean traffic arrives with no added latency. Your IP stays reachable, with no null-routing.
What gets filtered
Volumetric floods, protocol abuse and game-specific attacks, detected and mitigated automatically around the clock.
Volumetric & reflection
Bandwidth floods and amplified reflection attacks, absorbed by the capacity upstream.
- UDP Flood
- DNS Amplification
- NTP Amplification
- SSDP Amplification
- Memcached Amplification
- ICMP Flood
Protocol & state
Attacks on TCP state and spoofed traffic, dropped by symmetric connection tracking.
- SYN Flood
- ACK Flood
- RST / FIN Flood
- IP Fragmentation
- IP Spoofing
- Invalid TCP Flags
Game & application
Attacks that imitate real players, stopped by protocol-aware game filters.
- Query Flood
- Handshake Flood
- Connection Exhaustion
- Malformed Packets
- Protocol Abuse
A Layer 7 WAF for HTTP(S) applications is currently in development.
Filtered before traffic reaches our network
AS209874 is our own network, with POPs in Frankfurt and Eygelshoven. It connects to the internet through our upstream PletX: incoming traffic first passes through their network, with over 8 Tbps of capacity, and is filtered there. That way, volumetric attacks load neither our links nor your server.
- FrankfurtNTT FRA1
- FrankfurtEGC
- EygelshovenSkyLink Data Center
- Equinix FR7FRA
- Digital Realty FRA7FRA
- Digital Realty DUS2DUS
- NIKHEFAMS
Part of every service. Always.
Every VPS, dedicated server and game server sits behind the same protection from the moment it is provisioned.
No extra cost
DDoS protection is part of every plan. No add-on, no surcharge.
No null-routing
Your IP stays reachable during an attack. We filter the attack instead of switching you off.
No configuration
Filters apply automatically, matched to the services running on your ports.
No added latency
Filtering is always in the path, so nothing is rerouted when an attack begins.
Ready to Get Started?
Choose the perfect plan for your business and experience enterprise-grade infrastructure