Choose game tunnels, remote GRE/IPIP delivery, or on-premise software — all on the same XDP filtering fabric.
+8 Tbit/s
Total network capacity
9
Global PoPs
XDP
Line-rate packet filtering
3
Service deployment models
Service lineup
Every service below uses the same mitigation philosophy: drop hostile traffic early, preserve clean paths, and give your team readable incident context instead of noisy firewall output.
Hostile traffic is filtered at the NorthShield edge before clean Minecraft joins, panels, and stores are delivered over a protected tunnel to your origin.
Clean traffic is delivered over GRE or IPIP tunnels with BGP on our anycast network. Announce your prefixes, bring your own IP or ASN, and keep attack volume off your upstream.
Run the same XDP and eBPF filtering stack on appliances you own and operate, ideal for private networks, regulated environments, and teams that need mitigation inside their facility.
Global network
+8 Tbit/s
Total mitigation capacity
9 active points of presence
Germany
Frankfurt
Germany
Frankfurt
Germany
Frankfurt
France
Paris
United Kingdom
London
Türkiye
Istanbul
Netherlands
Amsterdam
United States
Ashburn
Bulgaria
Sofia
Filtering model
NorthShield does not rely on a single choke point. We combine early packet drops, programmable kernel flow analysis, and Layer 7 inspection so each attack type is handled where it is cheapest, fastest, and least disruptive to legitimate users.
Included
We help map your exposure, understand traffic patterns, and tune the policy set that protects your actual service instead of a generic template.
Engineering details
The fastest attack response is the one that happens before the origin notices. Our stack prioritizes early classification, readable outcomes, and deployment models that match real operator workflows.
Drop obvious bad traffic early to protect CPU, sockets, and application capacity during sustained floods.
Apply different policy to game tunnels, BGP transit, and on-premise service edges based on actual traffic shape.
Document attack vectors, thresholds, routing changes, and recommended improvements after each incident.
Tell us what protocols you run and where attacks hurt most. We will design the right filtering path across XDP, eBPF, and Layer 7 controls.
