1Tbps+ mitigation
Standard edge capacity sized for floods up to 1Tbps+ so attack volume is scrubbed before it reaches your network.
State-of-the-art XDP DDoS Protection
1Tbps+ scrub capacity across London, Frankfurt, and Istanbul. Clean flows are handed back over Cross Connect or GRE/IPIP tunnels with BGP on our anycast network.
- 1Tbps+ mitigation with L3–L7 DDoS Protection
- Instant Attack Mitigation (0 TTM) and application filters
- 24/7 support, attack analytics, and unlimited firewall rules
Protection features
Everything you need at the mitigation edge.
Unlimited mitigation, L3–L7 filtering, application profiles, instant response, and 24/7 support — built for hosting, game, and infrastructure teams under attack.
L3–L7 DDoS Protection
Volumetric, protocol, and application-layer attacks are filtered across the full stack — not just UDP floods.
Application Filters
Prebuilt profiles for games, voice, and remote access. Missing stacks get custom filters at no extra charge.
Instant Attack Mitigation (0 TTM)
Always-on edge policy starts dropping hostile traffic immediately — zero time-to-mitigate for active protection.
Attack Analytics and Reports
Live charts, attack logs, source breakdowns, and exportable reports for operations and customer communication.
Unlimited Firewall Rules
Create and manage as many L3/L4 rules and profiles as your services need from the panel.
Asymmetric or Symmetric Routing
Deploy asymmetric scrubbing or symmetric paths based on how your network and tunnels need to operate.
Custom Application Filters
Need a protocol we do not list yet? We build tailored application filters for your stack with no surcharge.
24/7 Support
On-call engineering and NOC coverage every day of the week for onboarding, incidents, and policy tuning.
Application filters
Protect your application with our prebuilt filters.
Enable the filters you need in a single click — no ticket, no custom rule writing to get started. If the application you run is not listed here, we build protocol-aware filtering tailored to your stack.
One-click controls
Each filter is available from the NorthShield panel. Toggle FiveM, Minecraft, CS2, Rust, voice, or remote access protection per service without rebuilding your edge policy from scratch.
A2S caching
Our A2S caching runs on the anycast path, so Steam query responses stay fast and stable while attack traffic is scrubbed away from your game servers.
DDoS Protection
Scrub centers close to where traffic enters.
1Tbps+ scrub capacity across London, Frankfurt, and Istanbul. Attack traffic is dropped at the edge; clean traffic returns over Cross Connect or GRE/IPIP tunnels with BGP on our anycast network.
3Tbps+
Global capacity
3
PoPs
Loading map...