Game Protection
Game Protection
Managed DDoS-protected ports for game servers — players connect to our edge, not your origin.
How it works
01
Pick your game
Minecraft Java, Bedrock, and more — we allocate the default ports or you pick from the allocated ranges. Custom TCP/UDP, even both on one port.
02
Players hit the PoP
GeoDNS steers them to the nearest scrubbing PoP. Our XDP guard drops the junk at line rate.
03
Clean traffic to you
A WireGuard pipe carries clean sessions to your origin with real player IPs intact.
Features
Game-aware proxying
Minecraft hostname routing on shared ports — many customers share an edge IP safely.
XDP scrubbing at the edge
Each PoP runs its own line-rate filter before the proxy ever sees a packet.
GeoDNS multi-PoP
Asia, Europe and growing — players land on the closest scrubber automatically.
Rate profiles
Balanced defaults per game, tunable per service — the same engine that drives our firewall.
Silent features
The parts nobody advertises but everybody relies on.
Direct-IP rejection
Connections without a valid registered hostname are dropped — scanners can't enumerate the edge.
Private NIC isolation
The game filter lives in its own network namespace, so it coexists with whatever firewall you already run.
Per-service WireGuard
Every service gets its own keys and CGNAT pair — no shared secrets between customers.