Skip to content

Loading…

Included free on all VPS & dedicated plans

Keep Your Infrastructure Online

Protect your VPS, game servers and applications against network attacks with powerful DDoS mitigation.

1

Tbps

Peak mitigation capacity

<5s

Automatic detection time

0

False positives — real traffic gets through

How it works

A multi-layer scrubbing architecture.

Attacks are identified and absorbed before they ever reach your server.

01

Anycast scrubbing

Traffic is routed through our anycast network. Attack packets are identified and absorbed at the edge — never reaching your server.

02

BGP re-routing

During an attack, BGP routing is adjusted in real time to divert malicious traffic to our scrubbing centres while legitimate traffic flows directly.

03

Real-time filtering

Layer 3, 4 and 7 filtering rules are applied in hardware. SYN floods, UDP amplification, HTTP floods and application-layer attacks are all blocked.

Protection layers

Defense at every layer of the stack.

Network, protocol and application-layer filtering working together — so attack traffic never reaches your server.

Network protection

Edge-level filtering across our anycast network stops volumetric floods before they reach your server's uplink.

Attack mitigation

Automated BGP re-routing diverts malicious traffic to our scrubbing centres in real time while clean traffic flows through directly.

Traffic filtering

Layer 3, 4 and 7 filtering rules run in hardware. Legitimate requests pass through cleanly, malicious ones don't.

Multiple protection layers

Network-level protection is always on. VPS and dedicated plans add full-stack L3/L4/L7 filtering with dedicated IP protection.

24/7 monitoring

Continuous traffic analysis across the network with a real-time attack dashboard for VPS and bare metal customers.

Game-server protection

Filtering tuned for UDP-heavy game traffic — booter and stresser attacks against Minecraft, FiveM and Rust servers are absorbed at the edge.

Protection tiers

Protection on every plan.

Basic DDoS protection is included free. VPS and dedicated plans step up to full-stack filtering automatically.

Basic

Included free

  • Up to 100 Gbps mitigation
  • L3/L4 flood protection
  • Auto-detection & routing
  • Always-on, no manual activation
  • Available on all shared hosting

Enterprise

Add-on · custom pricing

  • Up to 1 Tbps mitigation
  • Multi-vector attack protection
  • Custom filtering rules
  • Dedicated scrubbing cluster
  • SLA-backed response time
  • 24/7 NOC monitoring

Talk to us about Enterprise protection

Attack coverage

Attacks we block.

From simple volumetric floods to sophisticated application-layer attacks.

SYN flood

TCP SYN packets overwhelming connection tables are rate-limited and filtered at the network edge.

UDP amplification

DNS, NTP, SSDP and Memcached amplification attacks absorbed before reaching your IP.

HTTP flood

Layer 7 HTTP GET/POST floods detected via behavioural analysis and challenge-response filtering.

ICMP flood

Ping-of-death and ICMP echo flood attacks blocked at hardware level on ingress.

Slowloris

Slow-request application attacks mitigated by connection timeout rules and rate limiting.

Botnet attacks

Traffic from known malicious IPs and botnets blocked using continuously updated threat intelligence feeds.

Server hosted elsewhere and already under attack? See GRE Tunnel DDoS shielding — protect a server on any provider without migrating.

Track record

Held up when it mattered.

"Our Minecraft community server has run for eight months without a single unplanned restart. DDoS protection actually held up during a real attack."

AS

Aditya S.

Community admin

"Migrated a production VPS after repeated booter attacks on our old host. Traffic dashboard shows exactly what's being scrubbed — no more guessing."

RK

Rohit K.

SaaS founder, Bengaluru

"Enterprise tier gave us a dedicated scrubbing cluster and an SLA our compliance team could actually sign off on."

PM

Priya M.

Agency owner, Pune

FAQ

Frequently asked questions.

Yes. Basic network-level DDoS mitigation, up to 100 Gbps, is included at no extra cost on every shared hosting, VPS and dedicated server plan. Advanced full-stack protection up to 500 Gbps is included free with all VPS and bare metal plans — no add-on required.
Our network scrubbing capacity scales up to 1 Tbps for Enterprise-tier customers, with automatic detection and routing typically completing in under 5 seconds from the start of an attack.
Our filtering is tuned to avoid false positives. Legitimate player and visitor traffic is designed to pass through cleanly while attack traffic is scrubbed at the network edge, so your uptime isn't affected by mitigation itself.
Yes. Game server hosting on HostStack includes the same always-on network protection, tuned specifically for UDP-heavy game traffic and the booter/stresser attacks common against Minecraft, FiveM, Rust and other multiplayer servers.
No. Basic and Advanced protection are always-on for every eligible plan — there's no dashboard toggle to remember during an attack. Detection and mitigation happen automatically.
Yes, via our GRE Tunnel shielding service. It routes traffic through our scrubbing network to a server on any provider without migrating — see the GRE Tunnel page for details.
Enterprise adds a dedicated scrubbing cluster, custom filtering rules, multi-vector attack protection up to 1 Tbps, SLA-backed response times and 24/7 NOC monitoring. Pricing is custom — contact us with your traffic profile.
VPS, bare metal and Enterprise customers get access to a real-time attack dashboard showing mitigated traffic volume, attack vectors and duration.

Stay online, no matter what.

DDoS protection is included with every HostStack VPS and dedicated server at no extra charge.

WhatsApp Discord