Capacity
1Tbps+ mitigation
Standard edge scrubbing capacity sized for floods up to 1Tbps+ so attack volume is dropped before it consumes your network.

DDoS Protection
XDP and eBPF drop attack traffic at the edge across London, Frankfurt, and Istanbul. Clean flows return over Cross Connect or GRE/IPIP tunnels with BGP.

Mitigation platform
Our platform is designed around how hosting, game, and transit teams actually run production traffic — not a generic scrubbing appliance with a separate control plane.
Capacity
Standard edge scrubbing capacity sized for floods up to 1Tbps+ so attack volume is dropped before it consumes your network.
Full stack
Volumetric, protocol, and application-layer attacks are filtered across L3 through L7 — not only UDP floods.
Protocol aware
Enable game, voice, and remote-access profiles from the panel. Missing applications get custom filters at no extra charge.
0 TTM
Always-on edge policy starts dropping hostile traffic immediately — zero time-to-mitigate while protection is active.
Visibility
Live charts, attack logs, source breakdowns, and exportable reports for operations and customer communication.
Policy
Create and manage as many L3/L4 rules and protection profiles as your services need from the panel.
Flexible delivery
Choose asymmetric scrubbing or symmetric paths based on how your tunnels, BGP, and network need to operate.
No surcharge
Need a protocol we do not list yet? We build tailored application filters for your stack without an add-on fee.
Always on call
Engineering and NOC coverage every day of the week for onboarding, incidents, and mitigation tuning.
Traffic flow
Legitimate requests pass through the scrub layer. Attack traffic is dropped before it reaches your infrastructure.
Bad traffic is blocked
Attack packets are dropped at the edge.
Multi-layer filtering
L3, L4, and L7 protection in one path.
Clean traffic is delivered
Only legitimate sessions reach your network.
Application filters
Enable the filters you need in a single click — no ticket, no custom rule writing to get started. If the application you run is not listed here, we build protocol-aware filtering tailored to your stack.
One-click controls
Each filter is available from the NorthShield panel. Toggle FiveM, Minecraft, CS2, Rust, voice, or remote access protection per service without rebuilding your edge policy from scratch.
A2S caching
Our A2S caching runs on the anycast path, so Steam query responses stay fast and stable while attack traffic is scrubbed away from your game servers.
Our edge sits on established upstream paths so protected traffic can be announced, scrubbed, and handed back with stable routing. We are not a Tier-1 operator; delivery depends on the transit and peering fabric we connect through.



Global topology
Three points of presence with 1Tbps+ scrub capacity. Remote Protection and IP Transit are available at every location.
Select a PoP to view available services at that location.
Pricing
Choose a clean-traffic commitment and billing period for Standard or Enterprise protection. Larger prefix scopes, cross connects, and IP Transit are engineered through Enterprise Plus.
USD display uses the reference rate 1 EUR = 1.10 USD. Final invoices use the agreed billing currency.
Essential edge protection
For growing networks
Custom infrastructure
Built around your routing, capacity, and physical handoff.

Talk to our team about remote transit, IP Transit, or on-premise deployment on the same mitigation platform.