Home/Game Server DDoS Protection
Protocol-aware filtering

Game server DDoS protection that players never notice.

Lag attacks, query floods and fake-player spam kill communities. Glitch Guard validates game traffic packet by packet, dropping attack traffic while real players connect, play and rejoin as normal.

MinecraftRustFiveMCS2ARK+ many more
Why generic protection fails games

Games speak custom UDP. Generic filters guess.

Most game traffic is UDP with its own handshake and query format. A generic rate limit either lets attacks through or blocks real players. Glitch Guard's validators know what a legitimate packet looks like for your game, so anything else is dropped at the edge.

  • Source Engine: validates Source and GoldSrc traffic, including CS2, Garry's Mod, TF2 and L4D2
  • A2S query caching: Steam server-browser replies are served from cache during floods
  • RakNet: for Rust and Minecraft Bedrock
  • SA-MP / open.mp: dedicated protocol validator
  • Join-friendly limits: bursts are allowed, established sessions are never limited
$ glitchguard preset apply minecraft-java ✓ 25565/tcp syn proxy + conn limit ✓ 25565/udp closed (not used) ✓ ping enabled ✓ under-attack mode auto ✓ discord webhook connected # illustrative example
DDoS protection presets

One-click presets for popular games.

Apply a preset, then fine-tune individual port rules. Custom ports and protocols can be added with any filter.

Minecraft

Minecraft Java, Minecraft Bedrock and network proxy (Velocity / BungeeCord) presets for DDoS protected Minecraft hosting.

Survival

Rust, ARK: Survival Evolved & Ascended, DayZ, Palworld, Valheim, 7 Days to Die, Project Zomboid, Unturned.

Shooters & tactical

Source engine (CS2, Garry's Mod, TF2, L4D2), Squad, Arma 3 and Arma Reforger.

GTA & roleplay

FiveM / RedM, SA-MP / open.mp, Multi Theft Auto, RAGE Multiplayer and alt:V.

Building & sandbox

Satisfactory and Terraria / tModLoader.

Voice & apps

TeamSpeak 3, Mumble, web server / Discord bot and mail server.

Keep your community online

What happens when your server is attacked?

01

Detected

Volumetric floods are caught inline in under a second.

02

Filtered

Invalid game packets and query floods are dropped at the edge.

03

Alerted

A Discord webhook tells you when the attack starts and ends.

04

Online

Your IP is not null-routed and players stay connected.

Hosting your own VPS or bare metal? See DDoS protected VPS or DDoS protected dedicated servers. Want to understand the threat? Read DDoS attack examples.

FAQ

Game server DDoS protection FAQ

How do I protect my game server from DDoS attacks?

Host it on a network with always-on volumetric mitigation and add protocol-aware filtering. Glitch Guard validates game traffic packet by packet, so floods and fake packets are dropped while real players connect normally.

Does Glitch Guard protect Minecraft servers?

Yes. There are presets for Minecraft Java, Minecraft Bedrock (RakNet) and network proxies such as Velocity and BungeeCord.

Can Glitch Guard protect Rust, FiveM and CS2 servers?

Yes. Rust uses the RakNet validator, FiveM and RedM have a dedicated preset, and CS2 and other Source Engine games use the Source validator with A2S query caching.

Will DDoS protection add lag for my players?

No. Filtering takes place in microseconds at the network edge in the same datacentre, so there is no extra routing hop to a remote scrubbing centre.

What if my game isn't on the list?

You can add custom ports and protocols with any filter. If a protocol validator is missing, you can request it by opening a support ticket.

Get protected

Stop attacks before they reach your server.

Add Glitch Guard to a Glitch Servers VPS, dedicated server or game server and manage every rule from the client area.