DDoS Mitigation & Monitoring

Multi-layer protection engineered for games. Start with robust network-level coverage, or upgrade to always-on and Minecraft-aware Layer 7 filtering for the toughest threats.

Minecraft

Protection for Minecraft Servers

All plans include automatic network/transport-layer mitigation (L3/L4). For targeted communities, the TCPShield add-on provides real-time, Minecraft-specific Layer 7 filtering.

Minecraft Default DDoS Protection

Stops most volumetric and protocol-layer attacks - no setup required.


  • Filters common floods (UDP, SYN, amplification)
  • Attack detection with diversion to scrubbing
  • Automatically engages DDoS Protection during attacks

Advanced DDoS Protection (TCPShield)

Minecraft-aware Layer 7 filtering with optimized routing and live analytics.


  • Blocks invalid joins, exploit floods, and bot traffic
  • Edge routing for stable latency and high availability
  • Dashboard: live connections, blocks, history
  • 1 TB soft limit
  • No Geyser support
Dedicated

Protection for Dedicated Servers

Pick the posture that fits your workload: reactive baseline, always-on scrubbing with firewall, or CosmicGuard for game-aware filtering on a global anycast edge.

Default (Reactive) Protection

Mitigation activates when an attack is detected.


  • Diverts traffic to scrubbing on attack
  • Defends against volumetric/protocol abuse
  • Automatic filtering with no setup
  • 1-3 second DDoS Mitigation time

Always-On Protection

24/7 scrubbing with deeper visibility and instant mitigation.


  • No spin-up delay (always mitigated)
  • TCP state & outbound traffic monitoring
  • Firewall control: per-server rules & reusable profiles (ports, IPs, protocols)
  • $5/month • includes 10 TB
  • Overage Pricing: $1/TB

CosmicGuard Always-On

Global anycast edge with game-tuned filtering and caching.


  • Always-on scrubbing across global PoPs
  • Game traffic rules; supports A2S caching (e.g., Rust)
  • Firewall control: per-server rules & reusable profiles (ports, IPs, protocols)
  • $20/server • includes 10 TB
  • Overage Pricing: $3/TB
FAQ

Frequently Asked Questions

What does "Reactive" mean?

Traffic flows direct to your server normally. When our systems detect your server is under attack, the incoming traffic is automatically diverted through on-site scrubbing to remove attack traffic and clean traffic is delivered to your server.

Do Always-On and CosmicGuard include firewall control?

Yes - manage rules and reusable profiles per server (ports, IPs, protocols) in the panel.

Can I raise the 1 TB soft limit on Minecraft Advanced DDoS Protection?

Yes - open a billing ticket. We require all servers to be hosted on our shared Minecraft hosting to raise the limit above 1TB - so cannot raise the limit beyond 1TB for customers wishing to only host their proxy with us.

Does Minecraft Advanced DDoS Protection come with Geyser/Bedrock support?

Unfortunately Geyser/Bedrock support does not come with our Advanced DDoS Protection, this would need to be run directly to your servers IP/Port. You can purchase a plan from TCPShield directly to take advantage of their protection for Geyser/Bedrock