What is included
Volumetric and protocol floods are filtered at the network edge and inside your instance. New Linux VPS and game servers get SYN cookies, per-source connection limits, iptables burst throttling, and fail2ban. Game workloads also get RAM locking and a 60-second health watchdog.
How it works
Public traffic reaches our edge first, where we apply per-account rate limits on new TCP and UDP connections. Clean traffic is forwarded to your VM, which runs the guest hardening stack above. During large events we may throttle briefly to protect shared uplinks.
Limits
Protection covers typical hosting attack sizes on unmetered 1 Gbps ports. Sustained attacks beyond our capacity may require temporary null routing. Enterprise customers with dedicated uplinks should contact sales for custom scrubbing.
Your responsibilities
Keep your OS and apps patched, use SSH keys, and set panel firewall rules for only the ports you need. DDoS protection helps keep your service online during floods; it does not replace application security or strong passwords.