Premium Protection provides always-on Layer 4 DDoS protection for IPv4 and IPv6 traffic. It covers:
- UDP floods
- TCP floods
- GRE floods
- Other protocol floods
- ICMP floods
- Resource exhaustion attacks
- Amplification floods
- Zero-day attacks that normal countermeasures cannot filter, or where another mitigation method uses fewer hardware and computing resources
Port ranges
Use the port range assigned to your application:
- Arma 2, Arma 3, Arma Reforger and DayZ:
2300-2400 - Other games not listed here:
7000-8999 - TeamSpeak 3:
9000-9999 - Hurtworld:
12800-13100 - Minecraft Pocket Edition:
19132 - Rage-MP:
22000-22020 - Source games such as CS:GO and Garry's Mod:
27000-28000 - FiveM:
30000-32000 - OpenVPN:
1194 - WireGuard:
51820 - Factorio:
34100-34200
Known restrictions
GRE tunnels
GRE tunnels are blocked over IPv4.
TCP authentication
When a TCP attack is detected, new clients must retransmit their first connection attempt. Clients that connected before the attack started are not affected.
UDP authentication
New UDP connections are also checked while a UDP attack is in progress. In most cases this has no visible effect, although a client may need to retransmit its first UDP connection. Clients that connected before the attack started are not affected.
Rate limits
TCP traffic may be rate limited during a TCP attack. UDP traffic may be rate limited during a UDP attack.
Layer 7 protection
Premium Protection does not include Layer 7 protection. This means it does not cover HTTP or HTTPS application attacks, game bots, or other real application traffic. PCAP replay is an exception and is covered.
