Novonode

DDoS protection that holds under fire

Launch an attack on a test server and watch our network edge filter it while players stay connected. Included on every plan at no extra cost.

Pick an attack

3

A simulation against a test server.

Live protection demo Standing by
Internetedgeserver Online
  1. Normal
  2. Detected
  3. Filtering
  4. Stable
Incoming
2.4k/s
Dropped at edge
0
Reaching your server
2.4k/s
Players
48
Their ping
24 ms
Always on · Automatic · No extra cost See what's protected

Included with VPS and dedicated servers

Every attack lands in your portal

The attack above is logged as it happens: graphed live, written to your attack log and sent to your Discord.

See the firewall portal

No extra cost

Protected on every plan

Every Novonode service sits behind the always-on network shield. Some plans add more layers on top.

FiveM server hosting

From $20/mo

Protection built around FiveM, ready before you log in.

  • Network shieldFloods filtered automatically, around the clock
  • Enhanced protectionFor very aggressive and unique Layer 7 vectors
  • Game traffic filtersCustom protection tuned for FiveM traffic
  • Firewall rulesOn VPS and dedicated servers
  • Portal and alertsOn VPS and dedicated servers
See FiveM hosting

Defense architecture

How Novonode stops a DDoS attack

Protection in layers, in the order your traffic meets them. Each one takes out what the last let through, so by the time traffic reaches your server, only your players are left.

  1. 1

    Network shield

    Layer 3 and 4, every plan

    Every packet headed for your server meets our network edge first. Floods are recognized by their volume and shape and dropped there, so the bandwidth they were meant to fill never reaches you.

    • UDP floods
    • Amplification attacks
    • TCP floods
  2. 2

    Enhanced protection

    Layer 7, every plan

    Some attacks look like real traffic until you read them closely. Enhanced protection inspects what gets past the shield and catches the very aggressive and unique vectors built to slip through.

    • Application floods
    • Unusual attack vectors
    • Traffic that mimics players
  3. 3

    Game traffic filters

    Built for your game

    Games speak their own protocols. Filters that understand them let real players and server queries through and drop anything that only pretends to be game traffic.

    • Fake query floods
    • Bogus join requests
    • Malformed game packets
  4. 4

    Firewall rules

    Yours to set

    On VPS and dedicated servers you decide the rest: allow the services you rely on, block a network or a country, and rate-limit any port from your firewall portal.

    • Known bad networks
    • Unwanted countries
    • Abusive sources

Portal and alerts, watching them all. Every attack is logged with what it was and its peak, and a message lands in your Discord when one starts and ends.

Threat model

The attacks we stop, and how to spot them

DDoS attacks come in three families. Each hits a different part of your server, and each looks different from the inside.

Layer 3 and 4

Volumetric attacks

The brute-force kind: so much traffic that the connection to your server is full and nothing else gets through. Often sent by botnets, or bounced off open servers on the internet to multiply it.

Common forms
  • UDP flood
  • DNS amplification
  • NTP amplification
  • Memcached reflection
Signs on an unprotected server
  • Every player lags at once
  • The server drops off server lists
  • Bandwidth pinned at its limit

Dropped at the network shield, before it reaches your server.

Layer 3 and 4

Protocol attacks

Instead of filling the pipe, these exhaust the server itself, opening connections it has to track and never finishing them, until it has no room left for real ones.

Common forms
  • TCP SYN flood
  • ACK flood
  • Fragmented packets
  • Connection floods
Signs on an unprotected server
  • New players cannot connect
  • Existing players time out
  • High load with little real traffic

Filtered by the network shield and enhanced protection.

Layer 7

Application layer attacks

The quiet kind: traffic that looks like players or server queries, aimed at the work your game server does for each one. Small enough to slip past volume checks, heavy enough to bring the server down.

Common forms
  • Game query floods
  • Fake player joins
  • HTTP floods
  • Slow connection attacks
Signs on an unprotected server
  • The server list shows the server, but it will not load
  • CPU spikes with a normal player count
  • Logs fill with junk connections

Caught by enhanced protection and game traffic filters.

Hosting rated 4.7 out of 5 by our customers

4.7

from 213 customer reviews

DDoS protection questions, answered

Straight answers on what's covered, what you need to do and what happens during an attack.

Support online 24/7 · Discord and tickets

Ask on Discord Browse guides
Help1/8

Question 01

Is DDoS protection included on every plan?

Yes. Every Novonode service sits behind DDoS protection at no extra cost: FiveM and game servers, VPS, dedicated servers, Discord bots and web hosting.

Stay online when the attacks come

Pick your server and it's protected from the minute it goes live. No add-on to buy, nothing to configure.

FiveM server hosting All game servers
  • Every plan
  • Always on
  • Nothing to set up
  • 24/7 support