Always-on DDoS protection for game servers.

Every Hostly VPS and game server is protected in two layers: CosmicGuard’s scrubbing absorbs the attack’s volume and our edge filters the rest with XDP/eBPF. It’s included in the price and there’s nothing to configure.

Firewallhostly.network
Attack filteredOct 3, 2026 · peak 5.56 Tbps · 161 Mpps

5.56 Tbps · 161 Mpps

CosmicGuard

Scrubbing

5.56 / 30 Tbps

What's left

Hostly

XDP edge

Protocol · Handshake · Spoofing

Only legitimate traffic

Your server

Online

No drops

Does your game or app need something special? We build custom XDP filters for your server at no extra cost.

On October 3, 2026 we filtered an attack of 5.56 Tbps and 161 million packets per second. This is how an attack that size looks in Hostly’s firewall panel: blocked traffic spikes while passed traffic (the legitimate traffic) stays flat.

Scrubbing capacity

30 Tbps

CosmicGuard
5.56 Tbps · Oct 3
0102030 Tbps

18.5% used

24.44 Tbps left

Locations

United States

Dallas, TXMiami, FL

Game profiles

50

  • SA-MP
  • FiveM
  • RageMP
  • Minecraft
  • Rust
  • CS2
  • MTA:SA
  • ARK
  • DayZ
  • Palworld
  • Arma 3
  • SCP: SL
  • Unturned
  • Valheim
  • TeamSpeak 3
  • GTA V
  • Terraria
  • Garry's Mod
  • Squad
  • V Rising
  • Project Zomboid
  • Conan Exiles
  • Satisfactory
  • 7 Days to Die

What it does for your server

Filters with your game’s protocol

A flood against a SA-MP server doesn’t look like one against Minecraft. Each game has its own profile: cached queries, validated handshakes and fake connections dropped.

SA-MPFiveMRageMPMinecraftRustCS2MTA:SAARKDayZPalworldArma 3SCP: SLUnturnedValheimTeamSpeak 3GTA VTerrariaGarry's ModSquadV RisingProject ZomboidConan ExilesSatisfactory7 Days to Die
See all 50 profiles

Your own firewall rules

Open only the ports your server uses and close the rest from the panel. Rules apply at the edge, before traffic reaches your VPS.

UDP:30120FiveM
TCP:25565Minecraft: Java Edition
UDP:27015A2S Query Protection
TCP:443TCP SYN Protection
TCP:22Block traffic

Alerts in Discord

Connect a webhook and get a message when an attack starts and another when it ends, with the peak and duration.

  • Attack detected, with the affected IP
  • Peak bandwidth and packet rate
  • A follow-up when it ends

HostlyAPP03/10/2026

Under attack

An attack has been reported against 169.40.46.x. Hostly is monitoring this event and tracking its peak traffic.

Peak bandwidth

5.56 Tbps

Peak packet rate

161 M pps

Next notification

We'll send a Filtered update when this event is confirmed as ended.

Hostly · Firewall Watch • 03/10/2026

Always on

Nothing to switch on and no ticket to open: your server starts protected.

In the kernel, not in your game

XDP/eBPF drops packets before your server spends any CPU on them.

No per-attack fees

The size or length of an attack never changes your bill.

Custom filters, free

If your game or app has no profile, we build an XDP filter for it at no extra cost.

Pick your game

What we check and what we block for each one.

Filter profile

SA-MP

SA-MP / UDP

Query replies are served from cache. Cookie-request floods are dropped on any game port. Only validated players reach the instance.

How we filter

  • Query cache (info, rules, clients)
  • Cookie-request validation
  • Spoofed joins dropped in XDP

Common attacks

  • UDP floods on the game port
  • Query floods
  • Cookie-request floods

Frequently asked questions

It activates automatically when the server is provisioned. No support ticket or manual setup is required.

CosmicGuard provides the scrubbing: it absorbs large L3/L4 attacks. Hostly’s edge then filters everything else with XDP/eBPF, checking each game’s protocol before traffic reaches the service.

It is unwanted traffic that remains after edge filtering, such as malformed packets, fake connections, and spoofed queries. Hostly filters it on the server network.

Hostly checks the protocol used by each supported game and discards invalid connections and packets. Valid player traffic continues to the server.

It can vary by route, but the filtering is designed to minimize added latency. Traffic is filtered at the edge and on Hostly’s network before reaching the service.

Eligible services use CosmicGuard and Hostly XDP/eBPF. Supported games also use protocol-specific filtering.

Yes, on eligible plans. There is no separate per-IP protection fee or surcharge based on attack volume.

The supported game list is shown on this page and includes Minecraft, FiveM, SA-MP, MTA, Rust, CS2, DayZ, Arma, and others.

Yes on VPS and dedicated servers. Managed game servers are administered through the Hostly panel.

Yes. The panel and support are available in both languages.

Yes. Eligible services include a three-day trial with DDoS protection enabled.

Failures involving third-party DNS, external internet providers, or datacenter events outside Hostly’s control are excluded. Check the service terms for the complete scope.

Yes. If your game or application doesn’t have a profile, we build a custom XDP filter for it on our edge at no extra cost. Ask us on Discord or open a ticket.

Compare with other providersCapacity, technology and price, as each one publishes them.+
AspectHostlyWeXeroHostExtraVMBuyVM100UPIcelineTorchByteGTXGamingNitradoOVH Game
ProductsVPS, games & dedicatedGames, VPS, dedicated & botsVPSVPSVPS & dedicatedDDoS + hostingVPSManaged gamesManaged gamesDedicated & VPS
DDoS capacity30 Tbps100 Gbps SLA capHigh (GSL + XDP)3.5 Tbps add-onHigh10 Tbps1+ Tbps1–10 Tbps1–5 TbpsMulti-Tbps
DDoS includedYesYes (100 Gbps cap)Yes$3 / IP add-onYesYesYesYesYesYes
TechnologyCosmicGuard + Hostly XDP/eBPFUpstream enterpriseUpstream + XDPPaid add-on ($3/IP)Stateful XDPIn-house game-awareXDP + profilesAnycast + scrubbingAnycastProprietary VAC
Game-specific filters50 XDP profilesMany games, panel-levelGeneric + some gamesGeneric L4–L7FiveM, TS3, othersAuto-discoveryWide profile listModerateModerateOfficial game profiles
CPURyzen / EPYC / 9950X3DRyzen 9 5900X / 9950XRyzen 9 / EPYCRyzen 9 3900XEPYC / RyzenVariesVariesRyzen 9 / i9VariesRyzen / EPYC
Single-coreExcellentExcellentVery goodVery goodExcellentGoodGoodExcellentGoodExcellent
Max network port10 GbpsVaries5–10 Gbps1 GbpsUp to 25 GbpsVariesVariesTypically 1 Gbps1 Gbps1–10 Gbps
~24 GB plan price$69.99/moVaries~$84/mo$90–115/mo$80–120/moVariesVaries$90–150/mo$100+/mo$100+/mo
Storage (high plan)200 GB NVMeNVMe SSD360 GB NVMe480 GB SSDVariesVariesVaries100–300 GBVariesVaries
Root accessYesVPS yes / games managedYesYesYesYesYesNoNoYes (dedicated)
Ease of useVery high — AI, few clicksHighMediumMediumMediumMediumMediumHighHighMedium
LocationsUnited StatesNA, SA, EU, APAC8 locationsLV, NYC, LuxembourgEU / USUKEUUK, EU, US, AUGlobalGlobal
Trial3 daysVaries3 days3 daysVariesVariesVaries24–72 hoursLimitedLimited

Public specs as published. Hostly “DDoS included” is highlighted. BuyVM protection is a $3/IP add-on. Figures change; verify on each provider’s site.

Try it on your own server.

3 days free, protected from the first minute.

CosmicGuard is Hostly's commercial DDoS mitigation partner.

DDoS Protection 30 Tbps | Hostly