Most of our services use multiple layers of traffic filtering to mitigate DDoS attacks. Below is a brief rundown and explanation of how the protection works, from the beginning to end.
Note: Clients can manage the network firewall and game firewall (if applicable) for IPs that they are assigned in the client area after ordering. This lets you modify network firewalls rules, enable or disable the network firewalls, and enable or disable permanent mitigation. You can read more about this feature here.
Locations this is used in:
- Montreal, Canada (KVM VPS, KVM Game VPS, Minecraft)
- Gravelines, France (KVM VPS, KVM Game VPS, Minecraft)
- Singapore (KVM VPS, Minecraft)
- Vint Hill, Virginia (KVM Game VPS)
- London, UK (KVM Game VPS)
- Sydney, Australia (Minecraft)
The Game Firewall (OVH Game) is available for the following locations:
- Montreal, CA
- London, UK
- Gravelines, France
- Vint Hill, Virginia
Traffic path while attack is being mitigated:
.. Public Network
... Backbone Routers ↓
.... Network Firewall ↓
.... Pre-Firewall ↓
.... Tilera (Game Firewall) ["Game Anti-DDoS"] ↓
.... Shield / Armor ↓
... Datacenter Routers ↓
.. Your Server
Here is an explanation of what each one does:
Pre-Firewall: The Pre-Firewall (VAC) blocks most common attacks, allowing TCP/UDP/ICMP/GRE and blocking other protocols.
Network Firewall: The Network Firewall allows the client to add custom rules to modify traffic to their IP. This includes allowing/blocking IPs/IP ranges, allowing/blocking traffic protocols (AH,ESP,TCP,UDP,GRE,ICMP), allowing/blocking ports, allowing/blocking SYN/TCPs.
Tilera ["Game Anti-DDoS"]: The Tilera (Game Firewall) allows clients to use customized filters for blocking L7 attacks towards their game or voice servers, such as Teamspeak, Ark, Minecraft, Source/CSGO, GTA, etc. This means only legitimate user traffic to the applications will be allowed to your server. It also limits ICMP, blocks DNS amp, malformed IP/UDP header/incorrect checksum. Note: The Tilera (Game Firewall) may not available in certain locations where game servers aren't offered.
Shield / Armor: The Shield and Armor firewalls are two mitigation layers traffic is sent through and does some of what previous methods do, including blocking most known attacks that work via amplication methods. These are developed by OVH and don't rely on a third partys hardware or software.
Dallas DDoS Protection
VPS plans in our Dallas, Texas location include best effort DDoS protection on the Dedicated.com (AS63018) network. 10Gbps local, inline mitigation is included, however larger attacks may be mitigated by upstream providers (via GSL - Global Secure Layer). If your server receives an attack over the threshold of our protection plan the IP could be null routed for a short time.
Los Angeles DDoS Protection
VPS plans in our Los Angeles, California location include 100G DDoS protection on the ReliableSite network. You can read more about their DDoS protection capabilities here.
Miami DDoS Protection
VPS plans in our Miami, Florida location include 100G DDoS protection on the ReliableSite network. You can read more about their DDoS protection capabilities here.
As a reminder, we do not provide support for protecting VPNs or proxy services against DDoS attacks. This includes things such as OpenVPN, Wireguard VPNs, server-to-server proxies for purposes such as off-site game servers or web servers.
Populaarsemad artiklid
SolusVM "New root password invalid" error
If you're trying to reset your VPS root password via SolusVM and are getting a "New root password...
Is ExtraVM GDPR Compliant?
ExtraVM is a company based in the United States, however, from the basic understanding of the...
Does ExtraVM take backups of my server?
For some services we do take included, free backups of client servers, however we don't run these...
Change billing panel language to English
If a link is clicked in search engine results it might be indexed in another language, click the...
Can I upgrade or downgrade my server plan?
Yes. For upgrades, you will be billed a prorated price that is for the remainder of your current...