DDoS ProtectionIncluded on every server
100 Gbps DDoS protection,
included on every server.
Every KVM VPS, streaming VPS and dedicated server sits behind 100 Gbps of always-on DDoS mitigation at layers 3 and 4, at no extra cost. If a workload draws bigger attacks, upgrade that server to 500 Gbps, 1, 2, 5 or 10 Tbps; the 10 Tbps tier adds Layer 7 (HTTP) filtering.
100 Gbps includedAlways-on L3/L4Up to 10 Tbps + Layer 7
Included protection
What every VPS and dedicated server gets before you add anything.
Capacity100 Gbps
ModeAlways-on
LayersL3/L4
Attacks above 100 Gbps5 a month included
PriceIncluded
01How it works
How the included protection works
Filtering is part of the network, not a switch you flip during an attack.
Always-on, no activation delay
Traffic passes through the filtering layer all the time, so mitigation starts with the first packets of an attack instead of after detection and rerouting.
Layer 3 and 4 floods filtered
Volumetric and protocol attacks, such as UDP and ICMP floods, SYN floods and amplification or reflection attacks, are dropped before they reach your port.
5 bigger attacks a month, still covered
On the included tier, an attack larger than 100 Gbps is still mitigated, up to 5 times a month. You don't need to upgrade for an occasional outlier.
After the fifth: null-route or upgrade
From the sixth attack above 100 Gbps in the same month, the targeted IP is null-routed until the attack stops, or until you move the server to a higher tier.
Layer 7 on the 10 Tbps tier
The 10 Tbps tier adds application-layer filtering for HTTP floods that look like real browser traffic. On other tiers, put a CDN or WAF in front of web apps that need it.
Every VPS and dedicated server
Hourly and monthly KVM VPS, streaming and 10Gbps VPS, and every dedicated server get the included tier. There is nothing to enable.
02Pricing
DDoS protection tiers and prices
Prices are per server, per month, excluding VAT. Pick a tier in the DDoS Protection option when you order, or upgrade an existing server from the client area.
| Mitigation capacity | Layers | Price per month |
|---|---|---|
| 100 GbpsL3/L45 attacks a month above 100 Gbps included | Included | |
| 500 GbpsL3/L4 | €156.45 | |
| 1 TbpsL3/L4 | €523.95 | |
| 2 TbpsL3/L4 | €1048.95 | |
| 5 TbpsL3/L4 | €2623.95 | |
| 10 TbpsL3/L4 + Layer 7 | €4723.95 |
Mitigation capacity is the attack size a tier absorbs. It does not change your server's port speed or traffic.
03Guide
Which tier do you need?
Size the tier to the attacks your workload actually draws, not to the biggest number on the page.
Most servers: the included 100 Gbps
APIs, websites, VPNs, bots and most community game servers rarely see attacks above 100 Gbps, and the 5 over-cap attacks a month cover the occasional outlier.
Targeted often: 500 Gbps to 2 Tbps
Game networks, popular forums, VoIP and live-streaming platforms that are hit repeatedly, where a null-route means visible downtime for users.
High-profile targets: 5 or 10 Tbps
Services that draw multi-terabit attacks, or HTTP floods aimed at the application. Only the 10 Tbps tier adds Layer 7 filtering.
04Questions
DDoS protection questions
What is included, what the paid tiers add, and what happens when an attack is bigger than your tier.
Is DDoS protection included with every server?
Yes. Every KVM VPS, streaming VPS and dedicated server includes 100 Gbps always-on DDoS protection at layers 3 and 4, at no extra cost. There is nothing to enable or configure.
What happens if an attack is bigger than 100 Gbps?
On the included tier, up to 5 attacks a month above 100 Gbps are still mitigated. From the sixth in the same month, the targeted IP is null-routed until the attack stops, or until you upgrade the server to a higher tier.
Which tier includes Layer 7 protection?
Only the 10 Tbps tier, at €4723.95 per month, adds Layer 7 filtering for HTTP floods. Every other tier filters at layers 3 and 4. For web apps on those tiers, a CDN or a reverse proxy with a WAF in front of the server covers Layer 7.
How do I add or upgrade DDoS protection?
Choose a tier in the DDoS Protection option when you order a VPS or dedicated server, or upgrade an existing server from the client area. Prices are per server, per month, excluding VAT.
Is the protection always-on or on-demand?
Always-on, on every tier. Traffic is filtered continuously, so there is no detection-and-reroute delay when an attack starts.
Do hourly VPS get DDoS protection too?
Yes. Hourly-billed KVM VPS get the same included 100 Gbps tier as monthly plans.
Does a higher tier make my server faster?
No. Mitigation capacity is the size of attack a tier absorbs. Your port speed and unmetered traffic stay the same on every tier.
Get started
Put your workload behind 100 Gbps of filtering
Order any VPS or dedicated server and the included tier is already on. Pick a bigger tier at checkout, or upgrade later from the client area.