1 Tbps DDoS
protection, included
Every Syrex IP is filtered by default. Game-aware rules, always-on scrubbing and a mitigation team that answers at 3 AM — not a paid add-on you discover is missing during an attack.
Scrubbing at the edge, not on your box
Traffic reaches our scrubbing tier before it ever touches your node, so your CPU spends its time on players, not on junk packets.
Volumetric absorption
Up to 1 Tbps of Layer 3/4 flood absorbed upstream with BGP blackhole fallback as a last resort.
Game-protocol rules
Handshake-aware filters for Minecraft, FiveM, Rust, ARK, CS2 and Valheim — legit traffic passes, bots do not.
Layer 7 protection
Request-rate limiting, bot fingerprinting and geo rules for web and API endpoints.
Instant mitigation
Detection in under 2 seconds, with no manual ticket needed to “enable protection”.
Attack reporting
Post-incident graphs and vectors in the panel, plus optional webhook alerts to Discord.
Human escalation
Our NOC can add custom regex and rate rules for your traffic while the attack is live.
DDoS FAQ
Is DDoS protection really included?
Yes, on every plan and every IP, at no extra charge. There is no “protected IP” upsell.
What attacks do you not cover?
Sustained multi-terabit floods beyond our capacity, and attacks aimed at your own ISP or home connection. We will still help you mitigate.
Can I get a dedicated protected IP?
On VDS and dedicated plans, yes — secondary IPs are also filtered by default.
Do not wait for the attack.
Move to a host whose protection is on by default, not behind a paywall.