What is Spaceflare

Spaceflare is one console for server security: connect servers and Cloudflare accounts once, then attach protection and monitoring products to them.

Last updated

On this page

Spaceflare is a single console for protecting and watching your infrastructure. You connect your servers and Cloudflare accounts once, and every product you own attaches to those connections. You never set up the same machine twice inside different products.

Connect once, attach products

Everything starts at the Connector page, the dashboard's connections hub. Two kinds of connections live there:

  • Servers, connected via Server OAuth. You run one install command as root, and the open-source xdpd daemon enrolls the machine as a systemd service and starts reporting every 15 seconds. The daemon only reports health and runs the installs you approve, and removing a server from the console uninstalls it.
  • Cloudflare accounts, connected with one-click OAuth or an API token. Credentials are validated against the Cloudflare API before saving and stored encrypted. We never see your Cloudflare password.

Products consume these connections through their own pickers; no product asks you to add a server or Cloudflare account inline. The relationship is always visible the other way too: every server page has a Products tab listing what is installed on it.

Products that install on your servers

These products ship work to a connected server through the daemon:

  • OpenShield-XDP: an XDP/eBPF kernel firewall installed on your own Linux server. It drops attack traffic inside the NIC driver path, before the kernel allocates a socket buffer, so floods are absorbed at line rate. Installs run through a licensed one-click wizard (no shell work) with presets, reconfigure, and config rollback.
  • Health Monitor: the fleet console every connected server reports to. Per-server health score (0 to 1000), live per-core CPU, memory and disk breakdowns, top processes, VMs, events, a timeline, and on-demand benchmarks with verified share links.
  • Server Optimization: a one-command tuning agent that applies kernel and service tune-ups and streams its output back to the console. Smart mode skips steps already applied; revert mode undoes them.
  • LiteShield-XDP: the lightweight member of the XDP firewall family. One XDP program with rule-based flood protection, auto-bans and a JSON control API, installed from its own licensed wizard.
  • Game Panel Setup: a web wizard that installs a game server panel on a connected server: dependencies, database, TLS and the admin account, with every step streamed live.
  • L4 Tunnel: pairs two of your connected servers with a GRE tunnel, a public origin in front of a hidden destination, installed and configured by the daemon on both ends.

Products that run on the platform edge

These run on shared Spaceflare edge nodes. Nothing is installed on your side:

  • Web Firewall: a managed layer-7 edge proxy for your domains: WAF, rate limits, bot challenges and load-balanced origin backends, with live traffic and mitigation analytics. You connect a domain and point DNS at the edge. The Cloudflare DNS cutover is handled for you.
  • Game Protection: managed game-server DDoS protection. Platform edge nodes terminate player traffic and proxy it over WireGuard to your origin, with per-service traffic and drop analytics.

Products that work through your Cloudflare account

These act on zones in a connected Cloudflare account:

  • Cloudflare Analytics: seat-based zone monitoring: attach zones and watch traffic, cache and threat analytics pulled live from the Cloudflare API.
  • Cloudflare WAF Setup: applies a full security baseline (WAF and rate-limit rules) to the zones you pick in one click. A snapshot is saved before every apply, so one-click rollback is always available.

The alerts engine watches your whole account: rules for server offline, health score below a threshold, failed jobs, broken Cloudflare connections, tunnel down, benchmark finished, attack started/ended, and Game Protection node, config and WireGuard conditions. Each rule fans out to in-app notifications, email, or a webhook, and is managed under Settings → Alerts.

The public REST API v1 is a read-only, token-authenticated surface for scripting: your account, your fleet servers with health scores, finished benchmark results, and your Game Protection services with their traffic metrics. Create xdp_… tokens under Settings → API. Benchmark runs can also be shared with anyone through temporary or permanent public links. No account needed to view one.

Next steps