Network Protection & DDoS Security
Overview
DDoS protection depends on the location
DDoS protection is available in Lisbon (PT) only. Prague (CZ) has no DDoS protection: an attacked IP is blackholed for the duration of the attack.
| Lisbon (PT) | Prague (CZ) | |
|---|---|---|
| DDoS protection | Yes, always-on, included | No |
| What happens under attack | Attack traffic is scrubbed, legitimate traffic passes | The attacked IP is blackholed |
| Mitigation capacity | Bursts up to 400 Gbit/s and 80 Mpps | None |
| Network capacity | About 20x Prague | Base |
| Recommended for game servers | Yes | No |
Lisbon (PT)
Scrubbing directly on the line
Our Lisbon servers sit in the ONI datacenter. ONI's own Arbor runs on site and scrubs traffic directly on the line. Traffic is not routed away to an external scrubbing center, as with Combahton or Cloudflare, so protection adds no detour and no extra latency. We have input into its configuration.
- Always-on mitigation handles bursts up to 400 Gbit/s and 80 Mpps.
- The largest attack we have recorded was a 60 Gbit/s flood with a 12 Mpps burst.
- Standard protection is included at no extra cost. Most attacks are absorbed and you never hear about them.
Prague (CZ)
No DDoS protection
Prague has no anti-DDoS. When an IP is attacked, it is blackholed for the duration of the attack and the server is unreachable from the internet until it ends.
Prague is a smaller datacenter. We run it for customers in the Balkans and Georgia, for faster websites and apps. Real DDoS protection needs an Arbor owned by the datacenter, sitting on its own pipes. That is a cost a large telecom like ONI carries for tens of thousands of its own users. A small datacenter does not.
If you need protection in Prague, put a dedicated protection service such as Combahton in front of your server, or choose Lisbon.
Game Servers
Game servers attract DDoS attacks. Host them in Lisbon.
- Regular attacks are covered by the included protection at no cost.
- Multi-pps pulse attacks cannot be handled by a trigger alone. They need constant scrubbing on the IP, and that scrubbing is the paid part.
- Nothing extra is charged on ordering. Only after an attack that caused problems on our side do you choose one of three options:
- Buy your own protection from Combahton or a similar service.
- We apply constant scrubbing on your IP for EUR 10/month.
- Neither, and your IP is blackholed for the duration of each such attack.
Tunnelling a Lisbon IP to a Prague server
We do not recommend it. A tunnel or proxy from a protected Lisbon IP to a Prague server always works worse than a dedicated gaming protection service like Combahton.
Testing Latency
Before choosing a location, test the latency from your own connection with our Looking Glass:
- Lisbon (PT): lg-pt.euronodes.com
- Prague (CZ): lg-cz.euronodes.com
What DDoS Protection Does Not Cover
- Security inside your VM: OS hardening, patching and application security are your responsibility.
- Application bugs and vulnerabilities.
- Keeping a game server reachable under attack is your responsibility. We provide the network protection described above.
FAQ
Is DDoS protection included?
In Lisbon, yes, at no extra cost. In Prague there is no DDoS protection.
How large attacks can Lisbon handle?
Always-on mitigation handles bursts up to 400 Gbit/s and 80 Mpps. The largest attack we have recorded was 60 Gbit/s with a 12 Mpps burst.
What happens to my Prague server under attack?
Its IP is blackholed for the duration of the attack.
Can I move my server from Prague to Lisbon?
Yes. Open a support ticket. The IP address changes with the move.
Contact
- DDoS issues: open a priority support ticket in the client panel.
- Sales: [email protected]