Hosting Shield: DDoS Protection for Your Own Server

Keep your server and your provider: a protected IP from AS214918, always-on filtering at our edge, a GRE tunnel, a setup script you run yourself, three status signals and 39 game profiles.

  • 3:23 video
  • English captions & transcript
  • 15 November 2026

Transcript

The full narration, chapter by chapter. Click a time to play the video from there.

The problem

Your game server is cheap, it's fast, and it's unprotected. Then the first attack hits. Your provider null-routes the IP, and your players are gone for hours.

The cost of moving

Moving to a protected host means paying several times more, and migrating every server, every IP, and every player.

Hosting Shield

There's a better option. Keep your server. Keep your provider. Put our protection in front of it. This is ESAGAMES Hosting Shield.

How it works

We give you a protected IP from our own network, announced from our own AS214918. Players connect to that address. Every packet is filtered at our edge, and only real traffic goes down a GRE tunnel to your server. Your server answers through the same tunnel, and still sees every player's real IP.

Setup

Setup is one script. You run it yourself, on your own server. We never ask for SSH access. Not at setup. Not ever. And the checklist turns green as each step starts working.

Three signals

Then, the dashboard. Not one green dot, but three signals. Routed: our edge announces your address. Forwarding: we're pushing your traffic down the tunnel. Origin: your server is answering.

When something is wrong

And when something is wrong, it tells you. Here, we forward every packet, but the server behind the tunnel never answers. Most panels would still show a green light. This one tells you exactly which side to fix.

Always-on filtering

The filtering runs in the network card's driver path, with XDP. It's always on. Not switched on after an attack is noticed. And it runs before the tunnel, so an attack never reaches your server, your provider, or your bandwidth bill. SYN floods, ACK floods, UDP floods, fragments, reflection, malformed packets. All dropped at our edge.

Game profiles

And it understands games. 39 game profiles are built in. FiveM, Minecraft, Rust, Counter-Strike, and many more. On Counter-Strike 1.6, a connect that echoes a challenge we never sent is a forgery, and it's dropped. We understand the game's protocol, not just its packet rate. Running a game we don't cover yet? We build its profile for you.

Traffic charts

Your traffic is measured per address, in both directions, with charts from 1 hour to 30 days. A gap in the data is drawn as a gap. Never as zero.

Routing & audit log

Each protected address is routed on its own, so one can move between servers in seconds, without touching anything else. And every action lands in an audit log.

The network

The network is ours. Our own address space, two upstream providers, and 3.76 ms, measured from our node to Hetzner Falkenstein. Your tunnel can end anywhere you have a public IP. Hetzner, OVH, another host, or your own rack.

Who it's for

It's built for game hosters on unprotected dedicated servers, for FiveM and RedM communities, for Counter-Strike, Minecraft and Rust servers, and for anyone who is tired of being null-routed. It protects game and network traffic. If your website is under an HTTP flood, you need a web firewall, and that's a different product.

Recap

Keep your server. Keep your provider. Pay only for the protection. ESAGAMES Hosting Shield. Talk to us at esagames.ro.

More video tutorials

  • 10:58
    Anti-DDoS

    How to use the Anti-DDoS Manager

    A full tour of the ESAGAMES Anti-DDoS Manager (Layer 4): the Overview, the Filter, Drop and Accept modes, auto mitigation and the protection score, maintenance windows, Geo/ASN filters, firewall rules, presets, IP lists (blacklist vs whitelist vs trust), the protection wizard, attacks, alerts and reports.

  • 1:05
    Anti-DDoS

    Is my game server being DDoSed?

    How to tell a DDoS from ordinary lag: everyone drops at once while CPU and RAM look normal, suspicious timing and an inbound traffic wall, what to do in the moment (and not do), and the lasting fix: always-on filtering.

  • 1:09
    Minecraft

    Best Minecraft modpacks to host in 2026

    The Minecraft modpacks worth hosting in 2026 and the RAM each needs: All The Mods 10, RLCraft, Create packs, Vault Hunters, Pixelmon, Better MC and Prominence, plus the RAM rule of thumb by mod count.

Skip the troubleshooting

Managed, protected hosting in Frankfurt — we handle the Linux, the network and the DDoS so you don't have to.