DDoS protection in every plan, at no extra cost
Under attack right now?
The filter is already working. If your service is still unreachable, report it like this so we can check right away.
- Open a ticket in the client area. Include the affected IP address, the service and port, and the time the problem started.
- Ping us on Discord. A short message with your ticket number is enough for the team to pick it up faster.
- Do not reinstall your server. An attack is not a fault on your machine. A reinstall only wipes the logs that help with the analysis.
Filtered twice before it reaches your server
This is the path your traffic takes, step by step.
Filtering in the SmartNet network
Our upstream SmartNet in Frankfurt am Main specializes in DDoS mitigation. Large attacks are taken out there, with dedicated filters for games like Minecraft and FiveM, long before they reach our data center.
Filters right on the network card
Whatever gets through is sorted by an XDP program on the network card, before the kernel even allocates memory for the packet. Obvious junk costs your server almost no CPU time.
Firewall with SYN proxy
On service ports, the firewall completes the TCP handshake itself before your server commits any resources. Per-address limits on concurrent and new connections come on top, with temporary blocks instead of permanent bans.
Filters for game protocols
For Minecraft Java and Bedrock, FiveM and Source games, dedicated filters check that the traffic really speaks the game’s protocol. Generic floods on the game port never reach the server.
Strict mode during attacks
In normal operation the filters are tolerant. When an address is attacked they tighten automatically and relax again afterwards, so your players never keep paying for an attack that is over.
Protection for web services
For websites, a web application firewall and HTTP request rate limiting keep a flood of page requests from taking your web server down.
Filters for game protocols
If your game server’s port is in one of these ranges, the matching filter automatically checks that packets speak the game’s protocol. On our game servers this is already set up for you.
See game servers| Game | Port range | Protocol |
|---|---|---|
| Minecraft Java | 24565 to 26565 | TCP |
| Minecraft Bedrock | 18132 to 20132 | UDP |
| FiveM | 29120 to 31120 | TCP and UDP |
| Source / A2S | 26015 to 28015 | UDP |
Which products include UnioShield?
All of them, from the smallest game server to the biggest VPS. Running your server somewhere else? Our IP tunnel brings the same filtering to it, from €3.00 a month. IP tunnel (page in German)
DDoS protection FAQ
Does DDoS protection cost extra?
No. UnioShield is included in every plan, from the €2.00 game server to the largest VPS. There is no add-on to book and no fee per attack.
Do I need to turn the protection on?
No. The filter is active from provisioning and stays active. It does not wait for an attack to switch on: your traffic always takes the same filtered path.
Does the protection stop every attack?
The vast majority of attacks on game servers and websites end in the SmartNet network or at our own filters. No provider offers protection without any limit. A firewall on your server does not replace UnioShield and vice versa: keep services that do not need to be public closed.
Why don’t you publish exact thresholds?
Because a published limit like “blocked above N connections per second” shows everyone how to stay just below it. Thresholds also differ per service: they follow the normal traffic of each one.
My server is hosted elsewhere. Can I still protect it?
Yes, with the IP tunnel. Your server gets an IP address filtered by UnioShield, and traffic reaches it over GRE, VXLAN or WireGuard, so its real IP address no longer shows. The tunnel starts at €3.00 a month.
Not sure which plan fits?
Message us on Discord. We’ll help you pick the right plan and answer every question before you order.