Always-on mitigation at the edge of our network, and rules you customize from the panel. We filter the malicious traffic so the legitimate traffic reaches your server.
Illustrative simulation · the figures and attacks are not real or live
Every packet goes through three filters, in order, before it touches your server. Whatever fails one never reaches the next: the attack is stopped at the edge of our network, not on your machine.
One attack, layer by layer
In 48.6 Gbps · your server gets 539 Mbps of clean traffic
The first line: drops junk packets and volumetric attacks at the network edge, far from your server.
deny ip 198.51.100.0/24 deny geo KP,IR
It controls how TCP and UDP connections are opened and kept. Stops state floods before they exhaust your server.
limit tcp dport 443 conn 32 per ip block tcp syn rate > 20k/s
It understands what is requested, not just how much. Stops bots, HTTP floods and protocol abuse; your rules decide how strict it is.
limit http path /login 20r/m per ip block bots reputation < 20
Ready-made profiles and your own rules, no tickets and no console. Changes apply in seconds.
Web, gaming, SSH or your own: one click and the rules are set.
Allow, block or limit by protocol and origin.
Close whole countries that are not your audience.
Know about every active attack — automatic alerts every 2 minutes.
Every attack is detected, classified and stopped at the right layer. This is what you would see in your panel — sample data.
We analyze traffic flows and signatures at the edge, all the time.
always onWe identify the layer and attack type: L3, L4 or L7.
L3 · L4 · L7We apply your rules and the global ones. Legitimate traffic keeps flowing.
at the edgeLog in the panel and an automatic alert if an attack is active.
in your panelEnable a profile and tweak it to your taste. You can combine them per service.
Per-route rate limit, bots and HTTP floods.
UDP handshakes and anti-amplification for your game server.
Brute force, IP allow-list and closed ports.
Your own rules, with no artificial limits.
The firewall is part of each service’s panel, not a separate add-on. Custom rules and profiles are enabled from the panel.
Seconds. You save the rule in the panel and it propagates to the network edge without restarting your server.
Yes. Geo-blocking is just another rule: you choose the countries and the action (block or limit).
Enable your firewall in one click and pick a profile.