Vexelia
Contact us
VPSDedicated serversVoice serversVPN serversGame serversWhite label
DDoS protectionNetworkPricing
About usBlogDocs
Contact us
Vexelia/DDoS protection

Attacks, filtered
before your
server

Always on, and included on every hosted game server and dedicated server. Network and DDoS protection run on Terabit.

See game serversHow it works
500+ TbpsUpstream capacity
13+ TbpsIn-house filtering
13+Anycast PoPs
Always onNo threshold, nothing to switch on

Bad traffic stops at the edge.

Every packet passes the same four stages. Nothing reroutes when an attack starts.

Filtering starts at the first packet and adds no latency to hosted services.

What it filters.

Layers 3 and 4, on every open port. Your own firewall rules run in addition, never instead.

Floods

Dropped before they fill your port.

TCP: SYN, ACK, RST, PSH, mixedUDPICMPESP and GTP tunnelsBotnet floods

Reflection and amplification

Stopped by stateful filtering.

SYN-ACKDNSNTPMemcachedSSDPLDAPSNMPChargenTFTPQUIC

Malformed packets

Packets that break the rules are dropped.

Invalid flagsFragmentationBogons

Game filters

Filters that know the protocol of the game they guard.

Arma ReforgerSquadSource titlesRustMinecraftGTA V and FiveMApp-specific
Layer 7 is not covered.Web application attacks, slow queries and weak logins are a job for your own software.

See what it dropped.

Passed against dropped traffic, top source countries and ASNs, protocols, ports, an attack list.

Spike. Noted.
Protection · web-01Filtering
InboundPassed to your server
TimeTypeFilterPeakResult
14:02UDP floodedge: volumetric312 Gbit/sDropped
09:47Query floodgame filter4.1 MppsDropped
21:15SYN floodedge: stateful9.8 MppsDropped
Per-IP firewall rulesPacket capturesWebhooksTraffic reports

For other networks.

The same filtering, sold on its own to businesses.

Remote mitigation

$950per Gbps per month

Send traffic to the filter over GRE or a direct tunnel.

  • For businesses, self-serve start
  • GRE adds one hop

On-premise and white label

$1,250per month

Traffic stays on your hardware. You control the branding.

The numbers.

Uptime SLA
99.9%
Time to mitigate
Filtering starts at the first packet. Unlisted attacks are patched, usually in minutes.
Largest attack
30 Tbps absorbed.
On call
Engineers on call 24/7.

Questions

Something missing? Contact us.

Is it on by default?
Yes, on every hosted game server and dedicated server. No threshold, no scrubbing mode, no reroute mid-attack.
What does it cost?
Nothing extra on hosted game servers and dedicated servers.
What if it blocks a real player?
Traffic reports include packet captures, so you can see what was dropped. Firewall rules per IP stay in your hands.

Pick a server. Protection comes with it.

Game servers and dedicated servers, filtered from the first packet.