10 of 15 server configurations in stockInstant deliveryNo setup fees

Network & DDoS protection

DDoS protection,
included on every server.

A multi-homed network with redundant routing in all 8 locations. Volumetric attacks are detected automatically and filtered upstream, before they reach your port, at no extra cost.

  • Always-on L3/L4 mitigation
  • Unmetered 1 & 10 Gbps
  • IPv4 + /64 IPv6
  • Free private VLAN
Deploy a protected server
Dex holding a shield that deflects attacks

How mitigation works

Attack in, clean traffic out

Mitigation runs all the time, not only after an attack is reported. Most attacks are filtered before you notice them.

  1. 01

    Detect

    Traffic to every IP is watched continuously. Floods and amplification patterns are flagged automatically.

  2. 02

    Divert

    Traffic for the targeted IP is steered through filtering capacity upstream of your port.

  3. 03

    Filter

    Attack packets are dropped by signature and behavior. Legitimate packets go through.

  4. 04

    Deliver

    Clean traffic reaches your server. When the attack stops, routing returns to normal by itself.

Clear scope

What we filter, and what stays on your side

Honest limits help you plan: network-level attacks are on us; application-level traffic needs application-level tools.

Filtered for you, always on

  • UDP floods
  • SYN floods
  • ACK floods
  • DNS amplification
  • NTP amplification
  • SSDP reflection
  • Memcached reflection
  • CLDAP reflection

Covers game servers and other UDP services too: traffic is filtered by behavior, not blocked by port.

On your side

  • HTTP floods and bots (layer 7): use a reverse proxy, CDN or WAF
  • Rate limits in your web server and APIs
  • Closing open resolvers and amplifiers on your own server
  • A firewall exposing only the ports you use
DDoS protection guide

Network architecture

Built for steady, predictable traffic

The same design in every location, so a server behaves the same in Tokyo as in Frankfurt.

  • Multi-homed transit

    Several upstream providers over BGP. If one route degrades, traffic shifts to the others.

  • Redundant edge

    Redundant routers and uplinks in each location: no single uplink between a location and the internet.

  • 1 and 10 Gbps ports

    Dedicated ports, unmetered. Upgrade any 1 Gbps server to 10 Gbps for $129/mo.

  • Native IPv6

    A routed /64 on every server and a /56 on request, with reverse DNS for every address.

  • Private VLAN

    Connect your servers in the same location privately, for replication and backups, at no cost.

  • Transparent status

    Incidents and planned maintenance are published on the status page, 48 hours ahead for maintenance.

Unmetered, in numbers

What a port can really move

Unmetered means the port is yours around the clock. Here is the maximum a port can transfer in a 30-day month at full speed.

Unmetered bandwidth, explained
Theoretical maximum at 100% utilization, in each direction, over 30 days.
PortPer secondPer dayPer month
1 Gbps125 MB10.8 TB324 TB
10 Gbps1.25 GB108 TB3.24 PB

Where it runs

One network, 8 locations

Pick a city for its servers and estimated latency, or rank all locations from your own city.

NYCMIALAXLONAMSFRASINTYO
Check latency from my city Network status

FAQ

Network questions

All questions
Do you null-route servers under attack?

Our approach is to filter, not to blackhole: attack traffic is scrubbed upstream while legitimate traffic keeps flowing to your server. Null-routing is a last resort, used only when an attack threatens the network for other customers, and we tell you when it happens.

Is DDoS protection really included on every server?

Yes. Always-on, network-level mitigation covers every server in every location, from the $59 Xeon to the 96-core EPYC, with no add-on to buy and no traffic-based surcharge.

Does the mitigation protect websites against HTTP floods?

Network-level filtering stops volumetric layer 3 and 4 attacks. Application-layer (HTTP) floods look like real requests, so for public websites we recommend a reverse proxy or CDN with a web application firewall, plus rate limits in your web server.

Read the DDoS protection guide

Is bandwidth really unmetered?

Yes. Your port is not billed per gigabyte. You can use the full 1 Gbps or 10 Gbps of your plan around the clock. The only limit is in the Acceptable Use Policy: bandwidth may not be resold as IP transit.

Do I get IPv6?

Every server gets a routed /64 IPv6 subnet in addition to its IPv4 address. A /56 is free on request, for example if you run many virtual machines or containers.

Configure IPv6

Protected from the first packet.

Every server ships with DDoS mitigation and unmetered bandwidth, from $59/mo. No setup fee, cancel anytime.

Deploy a serverTalk to an engineer