IAD
NYC
FRA
SIN
Anti-DDoS Protection

DDoS Filter Library

Multi-layered DDoS protection system with the ability to filter malicious traffic, keeping your infrastructure online even during the largest attacks.

4

PoP Nodes

2+

Tbps Capacity

3

Continents

Filtering PoPs

Mitigation Pipeline

How your traffic is protected in real-time

1

Traffic

2

GSL

Volumetric

3

Hardware

XDP/eBPF

4

Clean

Traffic

Filter Library

Every known DDoS attack vector is covered and optimized for line-rate processing on our XDP engine.

UDP Amplification Guard

UDP

Detects and mitigates DNS, NTP, SSDP, Memcached, and CLDAP amplification vectors. We never leak an amplification vector to your server.

ICMP Flood Mitigation

ICMP

Rate-limits ICMP echo requests and blocks oversized ping packets. Prevents Smurf attacks and ICMP-based reconnaissance probes.

IP Fragment Attack Filter

IP

Detects fragmented packet abuse and blocks them at line rate. Prevents IP fragmentation attacks and DoS attacks using IP fragmentation.

TCP State Validation

TCP

Stateful TCP connection tracking that detects and drops ACK floods, RST floods, and out-of-state packets. Enforces proper handshake completion.

TCP SYN Flood Protection

TCP

Advanced SYN cookie validation with stateful tracking. Drops malformed SYN packets at line rate using XDP hooks before they reach the kernel stack.

Adaptive Rate Limiter

Any

Per-source intelligent rate limiting using sliding window counters. Automatically adjusts thresholds based on real-time traffic baseline deviation.

RakNet

UDP

Purpose-built filter for game servers using RakNet (such as Rust). Validates and challenges packets to block connection floods.

FiveM (Cfx.re)

TCP/UDP

Purpose-built filter for FiveM (Cfx.re) game servers. Validates and challenges packets to block connection floods and malicious joins.

SA-MP

UDP

Purpose-built filter for SA-MP (San Andreas Multiplayer) game servers. Validates and challenges packets to block connection floods.

ARK: Survival Evolved

UDP

Purpose-built filter for ARK: Survival Evolved game servers. Validates and challenges packets to block connection floods.

Minecraft: Bedrock Edition

TCP

Validates Minecraft handshake and login sequences. Blocks bot-join floods, null-ping attacks, and malformed status request storms.

Minecraft: Java Edition

TCP

Validates Minecraft handshake and login sequences. Blocks bot-join floods, null-ping attacks, and malformed status request storms.