# What is Spaceflare

> Spaceflare is one console for server security: connect servers and Cloudflare accounts once, then attach protection and monitoring products to them.
>
> Canonical: https://spaceflare.org/docs/getting-started/what-is-xdp-network · Updated 2026-08-22

Spaceflare is a single console for protecting and watching your infrastructure. You
connect your servers and Cloudflare accounts once, and every product you own attaches
to those connections. You never set up the same machine twice inside different products.

## Connect once, attach products

Everything starts at the **Connector** page, the dashboard's connections hub. Two
kinds of connections live there:

- **Servers**, connected via *Server OAuth*. You run one install command as root, and
  the open-source `xdpd` daemon enrolls the machine as a systemd service and starts
  reporting every 15 seconds. The daemon only reports health and runs the installs you
  approve, and removing a server from the console uninstalls it.
- **Cloudflare accounts**, connected with one-click OAuth or an API token. Credentials
  are validated against the Cloudflare API before saving and stored encrypted. We
  never see your Cloudflare password.

Products consume these connections through their own pickers; no product asks you to
add a server or Cloudflare account inline. The relationship is always visible the
other way too: every server page has a **Products** tab listing what is installed on
it.

## Products that install on your servers

These products ship work to a connected server through the daemon:

- **OpenShield-XDP**: an XDP/eBPF kernel firewall installed on your own Linux server.
  It drops attack traffic inside the NIC driver path, before the kernel allocates a
  socket buffer, so floods are absorbed at line rate. Installs run through a licensed
  one-click wizard (no shell work) with presets, reconfigure, and config rollback.
- **Health Monitor**: the fleet console every connected server reports to. Per-server
  health score (0 to 1000), live per-core CPU, memory and disk breakdowns, top processes,
  VMs, events, a timeline, and on-demand benchmarks with verified share links.
- **Server Optimization**: a one-command tuning agent that applies kernel and service
  tune-ups and streams its output back to the console. Smart mode skips steps already
  applied; revert mode undoes them.
- **LiteShield-XDP**: the lightweight member of the XDP firewall family. One XDP
  program with rule-based flood protection, auto-bans and a JSON control API,
  installed from its own licensed wizard.
- **Game Panel Setup**: a web wizard that installs a game server panel on a connected
  server: dependencies, database, TLS and the admin account, with every step streamed
  live.
- **L4 Tunnel**: pairs two of your connected servers with a GRE tunnel, a public
  origin in front of a hidden destination, installed and configured by the daemon on
  both ends.

## Products that run on the platform edge

These run on shared Spaceflare edge nodes. Nothing is installed on your side:

- **Web Firewall**: a managed layer-7 edge proxy for your domains: WAF, rate limits, bot
  challenges and load-balanced origin backends, with live traffic and mitigation
  analytics. You connect a domain and point DNS at the edge. The Cloudflare DNS
  cutover is handled for you.
- **Game Protection**: managed game-server DDoS protection. Platform edge nodes
  terminate player traffic and proxy it over WireGuard to your origin, with per-service
  traffic and drop analytics.

## Products that work through your Cloudflare account

These act on zones in a connected Cloudflare account:

- **Cloudflare Analytics**: seat-based zone monitoring: attach zones and watch
  traffic, cache and threat analytics pulled live from the Cloudflare API.
- **Cloudflare WAF Setup**: applies a full security baseline (WAF and rate-limit
  rules) to the zones you pick in one click. A snapshot is saved before every apply,
  so one-click rollback is always available.

## Alerts, the public API, and share links

The alerts engine watches your whole account: rules for server offline, health score
below a threshold, failed jobs, broken Cloudflare connections, tunnel down, benchmark
finished, attack started/ended, and Game Protection node, config and WireGuard
conditions. Each rule fans out to in-app notifications, email,
or a webhook, and is managed under **Settings → Alerts**.

The public REST API v1 is a read-only, token-authenticated surface for scripting:
your account, your fleet servers with health scores, finished benchmark results, and
your Game Protection services with their traffic metrics.
Create `xdp_…` tokens under **Settings → API**. Benchmark runs can also be shared with
anyone through temporary or permanent public links. No account needed to view one.

## Next steps

- [Quickstart](/docs/getting-started/quickstart)
- [Health Monitor](/docs/servers/health-monitor)
- [REST API](/docs/reference/api)