Optimized for FiveM, Rust, Minecraft & More

Advanced DDoS
Protection

Custom L7 filters for game protocols, backed by Cloudflare's global anycast network and multi-terabit mitigation capacity. 0.0% packet loss on clean traffic.

Multi-Tbit/s Capacity <1s Response 0.0% Packet Loss 24/7 Always-On
ddos/scrubber
Mitigating
Cloudflare Edge142 Gb/s · 21 vectors
Scrubbing Filters21 active
L3/L4 Flood Defense
92%
Game Protocol Filters
78%
A2S Query Cache
64%
Adaptive Engine
71%
Dropped99.8%
Your Server2.4 Gb/s clean
0.0%
loss
Multi-Tbit/s
Capacity
< 1s
Response
0.0%
Loss

Capabilities

Core Protection Capabilities

Multi-layer defense system protecting against all attack vectors.

Capacity
Multi-Tbit/s

Volumetric Attack Defense

Multi-terabit capacity against UDP floods, TCP floods, ICMP floods, and amplification attacks with 0.0% packet loss on clean traffic.

Protocols
21+

Protocol Attack Mitigation

Custom L7 filters dissect game and application protocols. Dedicated filtering for Source Engine, RakNet, FiveM, and proprietary UDP protocols.

Inspection
L7

Application Layer Protection

HTTP/HTTPS protection with SSL termination, proof-of-work challenges, TLS fingerprinting, and behavioral analysis.

Routing
Anycast

Cloudflare-Powered Edge Mitigation

Attack traffic is absorbed at Cloudflare's global anycast edge — far from your origin. Massive capacity, low latency, and presence in hundreds of cities worldwide.

Response
< 1s

Sub-Second Response

Automated threat detection and mitigation activates in under 1 second of attack onset.

Backbone
Global

Hybrid Offload

Volumetric attacks exceeding local capacity are automatically routed to our global cloud backbone for distributed scrubbing at scale.

Technical

Advanced Protection Features

Deep technical capabilities for comprehensive threat mitigation.

A2S Query Caching

Steam Server Browser

We cache A2S_INFO queries at the edge. Even if your backend server is under heavy load, it remains visible in the Steam Server Browser. No more delisting during attacks.

  • A2S_INFO edge caching
  • Query response preservation
  • Automatic cache refresh

FiveM / GTA Protection

FXServer & Citadel

Protocol-aware filtering for FiveM servers with GETINFO and asset caching to maintain server visibility and reduce origin load.

  • GETINFO caching
  • Asset caching
  • Player validation

Rust / Unity Protection

RakNet v2 Packet Validation

Stateful packet validation with player connection tracking for Rust, Palworld, and other RakNet-based titles.

  • Packet validation
  • Player tracking
  • Connection state management

Minecraft Protection

Java & Bedrock

Protocol-specific filtering for both Minecraft Java Edition and Bedrock Edition with full handshake validation. Designed to scale.

  • Java Edition filtering
  • Bedrock Edition filtering
  • Handshake validation

HTTP/HTTPS Protection

Layer 7 Request Validation

Deep packet inspection with cryptographic challenges, user-agent fingerprinting, and behavioral analysis for web and API endpoints.

  • SSL termination
  • Proof-of-Work challenges
  • Per-endpoint rate limiting

Adaptive Filtering Engine

Covering Your Blind Spots

Never be left in the dark. Adaptive filtering keeps you protected with real-time threat intelligence and machine learning fed data.

  • Proprietary mitigation algorithms
  • Real-time threat detection
  • Zero-day flood detection

Filters

Protocol & Application Filters

Comprehensive filtering across flood, game, and network protocols.

Flood & Amplification

Layer 3-4 volumetric attacks · 4 active

ICMP FloodTCP FloodUDP AmplificationTCP Amplification

Game Protocols

Protocol-aware deep inspection · 15 active

Source EngineFiveMA2S CacheCS2 (CSGO2)RustMinecraft JavaMinecraft BedrockDayZPalworldUnreal Engine 5Unreal Engine 4SCP: SLRakNet v2RakNet v1LiteNetLib v11

Network Protocols

VPN & voice filtering · 3 active

WireGuardOpenVPNTeamspeak 3

By the Numbers

Always-On Defense

Performance metrics from our production scrubbing infrastructure.

Multi-Tbit/s
Mitigation Capacity
<1s
Response Time
0.0%
Packet Loss
24/7
Always-On Protection

Stay online. Always.

DDoS protection is included on every plan — no add-ons, no add-on pricing. Pick a server and you're protected the second it boots.