NorthShield DDoS protection filtering infrastructure

DDoS Protection

Premium DDoS Protection

XDP and eBPF drop attack traffic at the edge across London, Frankfurt, and Istanbul. Clean flows return over Cross Connect or GRE/IPIP tunnels with BGP.

NorthShield protected global network

Mitigation platform

Built for operators who need clean delivery under attack.

Our platform is designed around how hosting, game, and transit teams actually run production traffic — not a generic scrubbing appliance with a separate control plane.

Capacity

1Tbps+ mitigation

Standard edge scrubbing capacity sized for floods up to 1Tbps+ so attack volume is dropped before it consumes your network.

Full stack

L3–L7 DDoS Protection

Volumetric, protocol, and application-layer attacks are filtered across L3 through L7 — not only UDP floods.

Protocol aware

Application Filters

Enable game, voice, and remote-access profiles from the panel. Missing applications get custom filters at no extra charge.

0 TTM

Instant Attack Mitigation

Always-on edge policy starts dropping hostile traffic immediately — zero time-to-mitigate while protection is active.

Visibility

Attack Analytics and Reports

Live charts, attack logs, source breakdowns, and exportable reports for operations and customer communication.

Policy

Unlimited Firewall Rules

Create and manage as many L3/L4 rules and protection profiles as your services need from the panel.

Flexible delivery

Asymmetric / Symmetric Routing

Choose asymmetric scrubbing or symmetric paths based on how your tunnels, BGP, and network need to operate.

No surcharge

Custom Application Filters

Need a protocol we do not list yet? We build tailored application filters for your stack without an add-on fee.

Always on call

24/7 Support

Engineering and NOC coverage every day of the week for onboarding, incidents, and mitigation tuning.

Traffic flow

How does our filtering platform work?

Legitimate requests pass through the scrub layer. Attack traffic is dropped before it reaches your infrastructure.

UserAttackerAttackerUserNorthShieldDDoS ProtectionNorthShield ProtectionServerServer

Bad traffic is blocked

Attack packets are dropped at the edge.

Multi-layer filtering

L3, L4, and L7 protection in one path.

Clean traffic is delivered

Only legitimate sessions reach your network.

Application filters

Protect your application with our prebuilt filters.

Enable the filters you need in a single click — no ticket, no custom rule writing to get started. If the application you run is not listed here, we build protocol-aware filtering tailored to your stack.

FiveM

SAMP

MTA

CS2

Rust

Garry's Mod

Team Fortress 2

TeamSpeak 3

SCP: Secret Laboratory

RDP Protection

SSH Protection

One-click controls

Each filter is available from the NorthShield panel. Toggle FiveM, Minecraft, CS2, Rust, voice, or remote access protection per service without rebuilding your edge policy from scratch.

A2S caching

Our A2S caching runs on the anycast path, so Steam query responses stay fast and stable while attack traffic is scrubbed away from your game servers.

Connected to proven transit partners.

Our edge sits on established upstream paths so protected traffic can be announced, scrubbed, and handed back with stable routing. We are not a Tier-1 operator; delivery depends on the transit and peering fabric we connect through.

Global topology

Protected network map

Three points of presence with 1Tbps+ scrub capacity. Remote Protection and IP Transit are available at every location.

Select a PoP to view available services at that location.

Loading map...

Pricing

Remote Protection Pricing.

Choose a clean-traffic commitment and billing period for Standard or Enterprise protection. Larger prefix scopes, cross connects, and IP Transit are engineered through Enterprise Plus.

USD display uses the reference rate 1 EUR = 1.10 USD. Final invoices use the agreed billing currency.

Essential edge protection

Standard

€100/mo
Billed monthly
Clean traffic commit100 Mbps
  • 5 x /24 IPv4 prefixes
  • Up to 1Tbps+ mitigation
  • L3-L7 DDoS protection
  • Instant attack mitigation
  • Application filters
  • Attack analytics and reports
  • Unlimited firewall rules
  • Symmetric or asymmetric routing
  • 24/7 support
  • Support ticket & email
Choose Standard

Custom infrastructure

Enterprise Plus

€600/mo
Starting price · tailored scope

Built around your routing, capacity, and physical handoff.

  • 25+ protected IPv4 prefixes
  • Custom clean traffic commitment
  • Cross connect & IP Transit options
  • BGP, BYOIP, and BYOAS design
  • Dedicated onboarding and runbook
  • 24/7 priority escalation
Build a custom plan

Need protected delivery for your traffic?

Talk to our team about remote transit, IP Transit, or on-premise deployment on the same mitigation platform.

Contact us