SolaraHost

Opening your Solara world

Cloud & game hosting

Solara in season. A good home for your next world.Explore this season →
SolaraShield Mitigation Stack • Active

Anti-DDoS Architecture & Protection Scope

A transparent technical disclosure on how SolaraShield protects container instances, the difference between volumetric L4 attacks and L7 protocol exploits, and our operational network thresholds.

🛡️

How SolaraShield Inspects & Scrubs Ingress Traffic

Distributed Denial of Service (DDoS) attacks attempt to saturate uplink bandwidth or exhaust CPU/memory queues by generating massive volumes of illicit packets.

Our edge scrubbing architecture analyzes incoming traffic before it reaches compute nodes. Volumetric UDP amplification (NTP, DNS, SSDP, Memcached) and TCP SYN floods are identified by hardware packet inspection and dropped wire-speed at the border routers, allowing legitimate player connections to continue unimpeded.

⚖️

Honest Technical Perspective: Why No Provider Guarantees 100% Zero-Impact Immunity

Many budget hosts make misleading claims of “100% total immunity against all attacks forever.” In real networking, attack vectors continuously evolve.

While SolaraShield successfully absorbs and neutralizes over 99% of internet volumetric and protocol floods, novel zero-day application layer exploits (such as unauthenticated packet spam directly into unpatched game server plugins) require application-level patches and rate limits. We provide transparent tooling to identify and block abusive IP ranges directly from your panel.

🖥️

Architectural Difference: VPS Compute vs. Game Containers

Because workloads have distinct protocol footprints, protection mechanisms differ between Virtual Private Servers and dedicated game containers:

VPS Instances

On VPS instances, users run arbitrary daemons (Docker, databases, mail, VPNs, custom APIs). Filtering is kept neutral to prevent false positives that could disrupt SSH keys, webhook callbacks, or control panel management ports.

Game Containers

Game protocols (Minecraft, Source Engine, Palworld) follow well-defined handshake structures. We apply stateful packet inspection specifically tuned to validate protocol handshakes and discard malformed queries before processing.

Mitigation Matrix Across Plan Tiers

Attack Vector VPS Infrastructure Standard Game Plans Advanced Game Shield
L3/L4 Volumetric Floods (UDP/SYN) Automated Ingress Scrubbing Automated Ingress Scrubbing Automated Ingress Scrubbing
SSH / Control Panel Integrity Dedicated Management Route Protected Panel Route Isolated Reverse Proxy
Game Protocol Handshake Spam User-managed iptables/firewall Standard rate-limiting Stateful Protocol Filter
BGP Border Uplink Scrubbing Active Multi-homed Active Multi-homed Priority Edge Flow

Emergency Upstream Thresholds & Abuse Prevention

To preserve stability across neighboring nodes and the core border network:

Questions Regarding Specific Attack Vectors?

Our network operations team is available to review your firewall requirements.

Contact Network Support →