How DDoS Protection Works on Endercloud

Introduction

Every Endercloud plan includes DDoS protection at no extra cost. Here's what we filter, what we don't, and what you should do during an attack.

What's Included

• Network-layer (L3/L4) protection, SYN floods, UDP floods, amplification attacks
• Up to 1 Tbps of mitigated traffic per server
• Always-on, no need to enable or pay extra
• No false-positive bans for legitimate Minecraft / game traffic

How It Works

1. 1All traffic enters our scrubbing edge before reaching your server
2. 2Heuristics flag traffic that looks like an attack
3. 3Bad packets are dropped at the edge
4. 4Clean traffic continues to your server

The result: under attack, you might see a brief latency bump, but your server stays online.

What's Not Covered (And How to Handle It)

• Application-layer (L7) attacks, slow HTTP floods. Use Cloudflare in front of web apps.
• Bot login spam, server-side rate limits (plugin or game rule)
• Account brute-force, enable 2FA

During an Active Attack

1. 1Don't restart the server, it doesn't help
2. 2Check the panel's network graph, if it's a flood, mitigation is already on
3. 3Open a ticket so we know to monitor
4. 4Keep playing, your server should be fine

Tip: Never share your server's IP publicly. Use your hostname (yourname.endercloud.cloud) instead.

Warning: Attacks targeting your home IP (your players' or yours) need protection from your ISP, not us. We can advise.

Need More Help?

Under attack right now? Open a priority ticket, we'll watch the traffic live.