How Endercloud Shield Stops DDoS Attacks

What It Is

Endercloud Shield is the upstream DDoS mitigation layer that sits in front of every game node in our India and Germany data centers. It runs 24/7, there is no "enable" button. You're already protected.

How It Works

1. 1Continuous traffic monitoring, the edge watches packet rates, source-IP entropy, and protocol shape on every port
2. 2Anomaly detection, sudden volumetric spikes, SYN floods, UDP amplification reflections, and known botnet signatures get flagged within seconds
3. 3Automated filtering, flagged traffic is dropped at the edge. Player traffic is fingerprinted by behavior (handshake, tick cadence) and let through
4. 4Path-aware re-routing, under sustained attack the upstream can shift the announced route to a scrubbed path without dropping established TCP connections

What This Means For You

• Players keep playing during volumetric attacks (UDP floods, ICMP, basic L4 stuff)
• No config required. No plugins required. No extra cost
• Shield protects the network. It doesn't stop in-game exploits, bad plugins, crash packets that look like real handshakes, or compromised admin accounts

Things Shield Does Not Cover

• Server-side crash exploits (malformed packets in the game protocol), those need LPX / AntiCrash plugins. See Mitigate Crash Packets
• Player account compromise, that's on 2FA. See Enable 2FA
• Application-layer abuse from logged-in players, that's moderation, not networking

What To Do During An Attack

Usually nothing. If your server is unreachable during an active attack:

1. 1Check status.endercloud.in
2. 2If status is green but you can't connect, open a ticket with the time + your IP
3. 3We can confirm whether Shield is actively mitigating against your specific node

Need More Help?

Suspect you're being attacked? Open a ticket, we can show you the mitigation graphs for your IP.