Comprehensive Mitigation Filters
Our constantly updated filter library covers every known DDoS attack vector. Each filter is optimized for line-rate processing on our XDP engine.
UDP Amplification Guard
Detects and mitigates DNS, NTP, SSDP, Memcached, and CLDAP amplification vectors. We never leak an amplification vector to your server.
ICMP Flood Mitigation
Rate-limits ICMP echo requests and blocks oversized ping packets. Prevents Smurf attacks and ICMP-based reconnaissance probes.
IP Fragment Attack Filter
Detects fragmented packet abuse and blocks them at line rate. Prevents IP fragmentation attacks and DoS attacks using IP fragmentation.
TCP State Validation
Stateful TCP connection tracking that detects and drops ACK floods, RST floods, and out-of-state packets. Enforces proper handshake completion.
TCP SYN Flood Protection
Advanced SYN cookie validation with stateful tracking. Drops malformed SYN packets at line rate using XDP hooks before they reach the kernel stack.
Adaptive Rate Limiter
Per-source intelligent rate limiting using sliding window counters. Automatically adjusts thresholds based on real-time traffic baseline deviation.
SCP Secret Laboratory
Purpose-built filter for SCP: Secret Laboratory game servers. Validates preauth and challenges packets to block connection floods.
RakNet
Purpose-built filter for game servers using RakNet (such as Rust). Validates and challenges packets to block connection floods.
Wireguard
Purpose-built filter for Wireguard. Validates packets to block connection floods and ensure you stay connected in the most intense scenarios.
A2S Query Caching
Caches Steam A2S responses at the edge. Serves cached responses to legitimate queries while dropping malformed game server probes.
ARK: Survival Evolved
Purpose-built filter for ARK: Survival Evolved game servers. Validates and challenges packets to block connection floods.
Source Engine
Purpose-built filter for game servers using Source (such as GMOD). Validates and challenges packets to block connection floods.
Minecraft: Bedrock Edition
Validates Minecraft handshake and login sequences. Blocks bot-join floods, null-ping attacks, and malformed status request storms.
OpenVPN
Purpose-built filter for OpenVPN. Validates packets to block connection floods and ensure you stay connected in the most intense scenarios.
Minecraft: Java Edition
Validates Minecraft handshake and login sequences. Blocks bot-join floods, null-ping attacks, and malformed status request storms.
RDP
Purpose-built filter for Windows's Remote Desktop Protocol. Validates and challenges packets to block connection floods.
Teamspeak 3
Protects against Teamspeak 3 specific floods and does not interrupt file transfers, even under floods, unlike major providers.