Most hosts decide what your server can receive. With Glitch Guard, you do. Multi-terabit edge absorption soaks up floods around the clock, then filtering we built in-house on XDP separates your players from the attack, with protection tuned for FiveM, Rust, Minecraft and Steam games. Full control is included with every VPS and dedicated server.
Every packet heading for your IP is checked before it arrives. Attack traffic is thrown away, real players and clients get through, and outbound traffic is never touched.
Players, clients and attackers alike.
Edge absorption takes the floods, then every packet for your service is checked at line rate against what your service should be receiving. Anything that does not belong is discarded. Always on, with no rerouting and no null-routing.
Real players and clients, nothing else.
The first stage of Glitch Guard. Large floods, amplification and reflection attacks are absorbed around the clock with multi-terabit capacity, detected and stopped in under a second, without redirecting your traffic or null-routing your IP. Included on every service.
Built in-house on XDP and eBPF, Glitch Guard knows what game, VPN and application traffic should look like, from FiveM and Rust to CS2 and WireGuard. Attacks aimed at your port are discarded while real players connect as normal, so you are not relying on a volume threshold to spot trouble.
SYN proxy, TCP state checks and per-source connection limits stop SYN, ACK and RST floods and connection exhaustion before they reach your application, so your server's resources go on real users.
A simulated attack against a Glitch Guard-protected IP. Attack traffic is discarded before it reaches your server, so the line your server actually receives barely moves.
Protection is matched to what runs on your IP, from raw floods aimed at your connection to junk aimed at a single game port.
The big attacks that try to fill the pipe before anything else.
| Attack | What Glitch Guard does |
|---|---|
| Amplification and reflection | DNS, NTP, SSDP, memcached, CLDAP, SNMP and similar reflection floods are absorbed before they can fill your connection. |
| UDP floods | Junk UDP aimed at your IP is discarded, so your bandwidth goes on your players. |
| Fragment and malformed packet attacks | Broken and fragmented traffic used to tie up servers and firewalls is thrown away. |
Floods that try to exhaust your server rather than your bandwidth.
| Attack | What Glitch Guard does |
|---|---|
| SYN floods | Our SYN proxy means fake connection attempts never reach your server. Real clients connect as normal. |
| ACK and RST floods | Spoofed TCP floods are discarded before your server has to deal with them. |
| Connection exhaustion | Sources opening connections at attack rates are held back, so real users still get a slot. |
Game ports are protected against traffic that is not genuine game traffic, not just against high volume.
| Attack | What Glitch Guard does |
|---|---|
| FiveM and RedM | Our most refined protection. Protocol-aware filtering tuned on real FiveM traffic, so a flood on your city does not kick your players. |
| Source and Steam games | Protocol-aware filtering for CS2, Garry's Mod, Team Fortress 2, Left 4 Dead 2 and other Steam titles. |
| Server browser floods | A2S query caching keeps your server listed during a query flood, and the flood never reaches your server. |
| RakNet games | Protocol-aware filtering for Rust and Minecraft Bedrock Edition. |
| SA-MP and open.mp | Protocol-aware filtering on the game port, so players join and play as normal. |
Tunnels get the same treatment as game ports.
| Attack | What Glitch Guard does |
|---|---|
| WireGuard and OpenVPN | Only genuine tunnel traffic reaches the port, so your VPN stays up under flood. |
Switch on only what you use, and Glitch Guard doubles as a network firewall for your server.
| Attack | What Glitch Guard does |
|---|---|
| ICMP floods and probes | Ping floods and network probing are stopped. You can switch ping off entirely from the client area. |
| Port scans | Ports you have not opened do not answer. Remote Desktop, SSH, web, mail and database services are only reachable when you switch them on. |
| Under-attack mode | Protection on your IP tightens automatically during an attack and relaxes afterwards. It never affects other customers. |
Pick your game and Glitch Guard loads the right ports and filters. Running a non-standard port or a game that is not listed? Add your own rules: any port, any protocol, with the filter you choose.
Every Glitch Guard setting for your IP is yours to change from the client area. Changes are live within seconds. No tickets, no waiting.
One click loads the ports and filters for your game, then edit freely.
A visible rules table for your IP. Add rules for any port, pick the filter for each UDP port (Steam query, RakNet, SA-MP, WireGuard, OpenVPN or rate limiting) and remove anything you do not want.
Switch ping, SSH, Remote Desktop, HTTP, HTTPS, MySQL, WireGuard, OpenVPN and IPsec on or off.
One button for tighter limits on your server only. Automatic mode switches it on and off for you.
Allowed and blocked traffic for the last hour, six hours or 24 hours, with a breakdown of what was blocked.
Start, end, peak rate and traffic blocked for every event.
Add your own webhook and get a message when an attack starts and ends and when under-attack mode changes.
| Port | Protocol | Filter |
|---|---|---|
| 28015 | UDP | RakNet |
| 28016 | TCP | Protected (RCON) |
| 22 | TCP | SSH · service on |
| ICMP | Echo | Rate-limited |
| Everything else | Any | Closed at edge |
Example rules table for a Rust preset. Your own table shows every rule on your IP and is editable in place. Step-by-step instructions are in the Glitch Guard setup guide.
Generic scrubbing looks at how much traffic is arriving. Glitch Guard looks at what it is. A flood aimed at a game server does not look like real players, and a server browser flood does not need to reach your server at all. Protection is applied per IP, so your neighbours' attacks are not your problem and your settings never affect anyone else.
Glitch Guard runs on XDP and eBPF, so packets are filtered at line rate before they ever touch your server. Because we built it ourselves, we can add protection for a protocol we do not yet cover, tune it per game, and give you the controls directly rather than a ticket queue.
Glitch Guard protects every service. VPS and dedicated customers get full per-IP control at no extra cost, and game servers and web hosting run through it as standard.
Every Cloud VPS is protected by Glitch Guard, with per-IP rules, presets, live graphs and attack alerts included.
DDoS protected VPS →Bare metal with Glitch Guard on every IP. Each address gets its own rules, graphs and under-attack mode.
Protected dedicated servers →Every game server runs through Glitch Guard, with nothing to set up.
Protected game servers →Every web hosting plan runs through Glitch Guard, at no extra cost.
Protected web hosting →Colocation customers get Glitch Guard edge absorption as standard. Per-IP filtering is available for individual addresses on request.
View colocation →Glitch Guard is on every service from day one, and its per-IP filtering, live graphs and Discord alerts are included with every VPS and dedicated server.