DDoS protection
All VexaNode services sit behind always-on DDoS filtering at the network edge. You do not need to buy it separately.
What is filtered
- Volumetric floods (Gbps-sized)
- Common amplification attacks (DNS, NTP, memcached)
- Minecraft/bot specific packet floods
What you should do
- Keep proxying on for HTTP services (Cloudflare orange cloud) — it hides your real IP and absorbs Layer 7.
- Never share your raw server IP publicly for bot/HTTP services; use proxying.
- If you are being attacked, open a ticket with timestamps — we can tighten filters for your service.
- Do not run a vulnerable service that can be amplified (open DNS resolver, public memcached) — that can get a service suspended for being an attack source.
What is not covered
- Application-layer abuse you invite (a plugin that allows packet spam).
- Attacks against third-party services you use (your Cloudflare, your domain host).
INFO
No protection keeps a 0-RAM server online. Resource exhaustion is a capacity problem, not an attack problem — upgrade if you are legitimately at the limit.