With RouteFence® DDoS protection, Layer 3, 4 and 7 attacks are filtered before they reach your server. Global protection through 8 POP locations and 6+ Tbps of filtering capacity keeps everything from game servers to corporate projects secure without interruption.
The security steps attack traffic passes through before it reaches your server.
A UDP flood, SYN flood, botnet or L7 HTTP attack arrives on the network together with normal traffic.
Traffic is routed to the RouteFence® scrubbing node closest to its source.
Packets are inspected at kernel level; traffic that breaks the rules or targets unlearned ports is dropped.
Validated packets are passed to your server and your service keeps running.
A multi-layered infrastructure that analyses and filters attack traffic and delivers clean traffic to your server.
Attacks originating in Turkey and abroad are absorbed by separate pools of capacity. Volumetric traffic is scrubbed at the cleaning nodes before it reaches your server, so your players and visitors see no downtime.
L3/L4 From UDP and SYN flood attacks L7 to HTTP flood attacks, everything is filtered simultaneously.
packets are processed before they enter the operating system At NIC driver level — so CPU load stays stable even under a heavy attack.
The ports active on your server are learned automatically; only traffic to those ports is allowed through.
Protection is active 24/7. When an attack starts, filtering kicks in automatically; no manual action is needed.
VDS, Ryzen VDS and Dedicated server packages at Light Hosting include it as standard.
How threats at different layers are filtered on the RouteFence® infrastructure.
Talk to our expert team. With our strong RouteFence® infrastructure, let us find the right protected server for your game servers or corporate projects together.
A short guide to how DDoS attacks work and how your server is protected.
Traffic sent simultaneously from many devices to make a server unable to serve.
Read moreCloseDDoS (Distributed Denial of Service) means flooding a target server with traffic, usually through a botnet of compromised devices. The aim is to fill up the bandwidth, the processor or the connection table so that real users cannot reach the service.
Attacks are grouped by the layer they target: L3/L4 attacks target network and connection resources, while L7 attacks target the web application itself.
Leaving the TCP handshake half open to fill the server's connection queue.
Read moreCloseThe attacker sends a large number of SYN packets but never completes the handshake. Because the server reserves resources for every half-open connection, the backlog fills up and new users cannot connect.
RouteFence® meets this traffic with SYN proxy and TCP connection validation : connections that never complete the handshake are eliminated before they reach your server.
Using open services that answer small queries with large responses to reflect traffic at a target.
Read moreCloseThe attacker replaces the source IP address with the target's address and sends small queries to open DNS or NTP servers. Those servers send far larger responses to the target server, and its bandwidth fills up.
This kind of traffic is dropped source port and packet signature filtering at the XDP layer, while large volumes originating abroad are absorbed at the Anycast scrubbing nodes.
Light Hosting is built on a principle of high customer satisfaction.
State-of-the-art servers and Tier-3 data centre infrastructure.
Uninterrupted service for companies across Turkey.
Feel instant load performance on your websites thanks to high core speeds.
A qualified engineer replies to your support tickets in 15 minutes on average.
Clear answers to the most common questions about our DDoS protection.
No. All VDS, Ryzen VDS and Dedicated server packages include standard RouteFence® protection at no extra cost.
The RouteFence® infrastructure provides global protection through 8 POP locations and 6+ Tbps of filtering capacity via BGP Anycast.
At Layer 3/4, UDP floods, amplification, TCP SYN/ACK/RST floods and DNS/NTP reflection attacks are filtered; at Layer 7, HTTP/HTTPS floods are filtered. Application-layer protection for websites Layer 7 WAF provides this.
Protection is Always-On, so it is active at all times. When an attack starts, traffic is filtered automatically; nothing needs to be done on your side.
Attack traffic is scrubbed at the cleaning nodes before it reaches your server. Because filtering happens at kernel level with XDP, the added latency is under 1 millisecond.
Yes. Layer 4 UDP/TCP packet validation filters are active for game servers. Thanks to automatic port learning, only the ports your server uses receive traffic.
You can reach our support team over WhatsApp (+90 850 304 7683) and through the ticket system.
Required cookies keep the site running. Analytics cookies are used only with your consent. Cookie Policy
