L3 / L4
Volumetric attacks
Designed to overwhelm network bandwidth with massive traffic volume.
Stack
Cloudflare Magic Transit
Outcome
Absorbed before origin
- ▸UDP and ICMP floods
- ▸CLDAP floods
- ▸GRE / VXLAN floods
- ▸Large-scale botnets
CODE HOSTLY10Save 10% on your first VPS from $5.99 USD with +500 Tbps DDoS protection
Low-latency infrastructure for serious projects
Always-on infrastructure protection
DDoS protection built to keep your server online.
Protect your VPS and game servers with Cloudflare Magic Transit's global network and Hostly's specialized traffic filtering.
Cloudflare provides a global network with +500 Tbps of capacity; Hostly adds XDP/eBPF filtering and protocol-aware profiles for supported games.
Cloudflare Magic TransitHostlyProtection included with eligible plans
Global mitigation
+500 Tbps
Edge detection
XDP/eBPF filtering
Protocol inspection
Game traffic profiles
Custom firewall rules
+500 Tbps
Mitigation capacity
Magic Transit
L3 / L4 network mitigation
XDP/eBPF
Hostly filtering
L3 / L4 / L7
Protected layers
Mitigation pipeline
How traffic reaches your server
First, Cloudflare Magic Transit mitigates volumetric, reflection, and amplification attacks across its global network. Hostly then applies XDP/eBPF filters and supported game profiles before delivering traffic to your server.
Always on · 0 ms added latencyCloudflare Magic TransitHostly
Cloudflare Magic TransitHostlyINTERNET
CLOUDFLARE
HOSTLY
SECURE
Magic Transit · L3 / L4
L3/L4 mitigation across Cloudflare's global network helps reduce attack traffic before it reaches Hostly's infrastructure.
Hostly
Hostly validates protocols and drops invalid connections with XDP/eBPF.
Your server
The server receives only traffic that passes the filtering layers.
Attack coverage
See what stops each type of attack
Select an attack type to view the filtering layer and result.
Stopped by
Game-aware protection
Profiles tuned for the games people actually play.
Open a game to see how its traffic profile handles common attacks without compromising latency.
Filter profile
SA-MP
SA-MP / UDP
Query replies are served from cache. Cookie-request floods are dropped on any game port. Only validated players reach the instance.
How we mitigate
- Query cache (info, rules, clients)
- Cookie-request validation
- Spoofed joins dropped in XDP
Typical attacks
- UDP floods on the game port
- Query floods
- Cookie-request floods
Included from day one
Protection should not be an afterthought.
Eligible Hostly services include the mitigation core by default, so you can deploy without configuring a separate security add-on.
- +500 Tbps mitigation capacity
- Game-aware filtering for latency-sensitive traffic
- Protection active when the server starts
- Firewall controls from the Hostly panel
Protection profile
- Mitigation capacity
- +500 Tbps
- Edge scrubbing
- Cloudflare Magic Transit
- Core technology
- XDP / eBPF
- Layers covered
- L3 / L4 / L7
- Activation
- Automatic
- Extra cost
- Included
Frequently asked questions
It activates automatically when the server is provisioned. No support ticket or manual setup is required.
Cloudflare Magic Transit filters large L3/L4 attacks. Hostly XDP/eBPF then filters invalid protocol and game traffic before it reaches the service.
It is unwanted traffic that remains after edge filtering, such as malformed packets, fake connections, and spoofed queries. Hostly filters it on the server network.
Hostly checks the protocol used by each supported game and discards invalid connections and packets. Valid player traffic continues to the server.
It can vary by route, but the filtering is designed to minimize added latency. Traffic is filtered at the edge and on Hostly’s network before reaching the service.
Eligible services use Cloudflare Magic Transit and Hostly XDP/eBPF. Supported games also use protocol-specific filtering.
Yes, on eligible plans. There is no separate per-IP protection fee or surcharge based on attack volume.
The supported game list is shown on this page and includes Minecraft, FiveM, SA-MP, MTA, Rust, CS2, DayZ, Arma, and others.
Yes on VPS and dedicated servers. Managed game servers are administered through the Hostly panel.
Yes. The panel and support are available in both languages.
Yes. Eligible services include a seven-day trial with DDoS protection enabled.
Failures involving third-party DNS, external internet providers, or datacenter events outside Hostly’s control are excluded. Check the service terms for the complete scope.
Comparison
Compare Hostly with other providers
This table compares published mitigation capacity, filtering layers, and protection costs. Hostly includes DDoS protection with eligible plans.
Green: strongest published figureRed: unavailable or charged separately
| Aspect | HostlyWe | XeroHost | ExtraVM | BuyVM | 100UP | Iceline | TorchByte | GTXGaming | Nitrado | OVH Game |
|---|---|---|---|---|---|---|---|---|---|---|
| Products | VPS, games & dedicated | Games, VPS, dedicated & bots | VPS | VPS | VPS & dedicated | DDoS + hosting | VPS | Managed games | Managed games | Dedicated & VPS |
| DDoS capacity | +500 Tbps | 100 Gbps SLA cap | High (GSL + XDP) | 3.5 Tbps add-on | High | 10 Tbps | 1+ Tbps | 1–10 Tbps | 1–5 Tbps | Multi-Tbps |
| DDoS included | Yes | Yes (100 Gbps cap) | Yes | $3 / IP add-on | Yes | Yes | Yes | Yes | Yes | Yes |
| Technology | Cloudflare Magic Transit + Hostly XDP/eBPF | Upstream enterprise | Upstream + XDP | Paid add-on ($3/IP) | Stateful XDP | In-house game-aware | XDP + profiles | Anycast + scrubbing | Anycast | Proprietary VAC |
| Game-specific filters | 50 XDP profiles | Many games, panel-level | Generic + some games | Generic L4–L7 | FiveM, TS3, others | Auto-discovery | Wide profile list | Moderate | Moderate | Official game profiles |
| CPU | Ryzen / EPYC / 9950X3D | Ryzen 9 5900X / 9950X | Ryzen 9 / EPYC | Ryzen 9 3900X | EPYC / Ryzen | Varies | Varies | Ryzen 9 / i9 | Varies | Ryzen / EPYC |
| Single-core | Excellent | Excellent | Very good | Very good | Excellent | Good | Good | Excellent | Good | Excellent |
| Max network port | 10 Gbps | Varies | 5–10 Gbps | 1 Gbps | Up to 25 Gbps | Varies | Varies | Typically 1 Gbps | 1 Gbps | 1–10 Gbps |
| ~24 GB plan price | $69.99/mo | Varies | ~$84/mo | $90–115/mo | $80–120/mo | Varies | Varies | $90–150/mo | $100+/mo | $100+/mo |
| Storage (high plan) | 200 GB NVMe | NVMe SSD | 360 GB NVMe | 480 GB SSD | Varies | Varies | Varies | 100–300 GB | Varies | Varies |
| Root access | Yes | VPS yes / games managed | Yes | Yes | Yes | Yes | Yes | No | No | Yes (dedicated) |
| Ease of use | Very high — AI, few clicks | High | Medium | Medium | Medium | Medium | Medium | High | High | Medium |
| Locations | United States | NA, SA, EU, APAC | 8 locations | LV, NYC, Luxembourg | EU / US | UK | EU | UK, EU, US, AU | Global | Global |
| Trial | 7 days | Varies | 3 days | 3 days | Varies | Varies | Varies | 24–72 hours | Limited | Limited |
Public specs as published. Hostly “DDoS included” is highlighted. BuyVM protection is a $3/IP add-on. Figures change; verify on each provider’s site.
Deploy infrastructure that is protected from the first packet.
Start with a protected VPS or talk to the Hostly team about your traffic profile.
Cloudflare, the Cloudflare logo, and Magic Transit are trademarks of Cloudflare, Inc.