DDoS Protection & Security

VoxiShield

Enterprise-grade two-layer mitigation delivering 4+ Tbit/s capacity. Keep mission-critical services online and secure under sustained attacks. Included free with all VoxiHost services.

4+ Tbit/s

Mitigation Capacity

2 Layers

Defense System

24/7

Active Protection

Two Layers of Defense

Traffic is filtered twice before it reaches your network! First at the PletX edge, then by our in-house firewall layer.

Layer 1 · Edge

PletX edge scrubbing

Global traffic first passes through PletX scrubbing centres in Germany and the Netherlands, soaking up volumetric floods before they touch our infrastructure.

Capacity 4+ Tbit/s global
Focus Volumetric floods
Controls Automatic edge rules
Layer 2 · Firewall

VoxiHost firewall layer

Traffic that passes Layer 1 reaches our transparent pfSense firewall with SNORT IDS/IPS, adding exploit detection, outbound monitoring, and customer controls.

Capacity 20 Gbps / node
Focus Exploits & abuse
Controls GEO / custom rules

Who Needs VoxiShield?

Mission-critical infrastructure that can't afford downtime or security breaches. From game servers to e-commerce platforms, VoxiShield keeps you online under attack.

View FAQ

Game Server Hosting

Minecraft, Rust, CS:GO, and ARK servers targeted by jealous competitors or griefers

  • Game-specific DDoS filters for common attack patterns
  • Sub-second mitigation activation keeps players connected
  • Custom firewall rules to block specific IPs or regions

Stay online during 4+ Tbps DDoS floods

E-commerce & Online Stores

Protect revenue during Black Friday, flash sales, and peak traffic events

  • Bot protection prevents credential stuffing and cart attacks
  • No downtime = no lost sales during critical periods
  • Geo-blocking to prevent attacks from specific countries

Process 10,000+ checkouts/hour under attack

SaaS & API Services

Mission-critical APIs and web apps with strict uptime SLAs

  • Maintain 99.9% uptime even during sustained attacks
  • Real-time analytics to monitor attack patterns
  • Protect authentication endpoints from brute-force

Meet enterprise SLAs with confidence

Community Platforms & Forums

Discord bots, community forums, and social platforms facing DDoS attacks

  • Keep Discord bots and community services online 24/7
  • Protect forums and social networks from vandalism attacks
  • Rate limiting and geo-blocking for spam prevention

Support 100,000+ active community members

VoxiShield Protection Tiers

All services include full VoxiShield protection. Tier 1 is standard, Tier 2 on Premium or by selection.

Tier 1 · Automatic

Simplicity & ease

Always-on protection with full Layer 1 & 2 coverage, automatic threat blocking, and a monitoring dashboard-zero configuration required.

  • Full Layer 1 & 2 protection (PletX + Firewall)
  • Automatic threat blocking (no setup needed)
  • Basic configuration options (Incoming/Outgoing, IP allow/deny)
  • Basic monitoring (Doesn't include detailed analytics)
  • GEO blocking / custom rules / outbound filtering not included

Tier 2 · Advanced

Full control & customization

Everything in Tier 1 plus customer-managed policies, GEO controls, outbound filtering, and detailed analytics for complex workloads.

  • Everything provided in Tier 1
  • Extended configuration options (GEO blocking, Custom rules)
  • Extended monitoring (Detailed analytics, reporting, alerts)

Protection in Numbers

Real-world VoxiShield performance metrics from production infrastructure.

Attacks Blocked

Last 30 days

285 Gbps
Avg Attack Size

Successfully mitigated

<3s< /span>
Mitigation Speed

Attack detection to mitigation

Monitored across all VoxiHost infrastructure • Real-time data from production workloads

Need a protected server?

See our Premium VPS line with flagship AMD Ryzen 9 7950X3D hardware and Tier 2 VoxiShield protection.

How VoxiShield Works

Our two-layer system filters attacks progressively, ensuring maximum protection with minimal false positives.

1

Mixed Traffic Arrives

Your server receives incoming traffic from the internet - both legitimate users and malicious attackers. Without protection, DDoS attacks can overwhelm your infrastructure within seconds.

The Challenge: Attack traffic is mixed with real users, making it impossible to simply block everything. VoxiShield's two-layer system filters threats while keeping your services accessible.

DDoS Attack Volumetric Traffic Malicious Packets + Legitimate Users
2

Layer 1: Edge Scrubbing

Traffic first passes through our edge network with 4+ Tbit/s capacity located in Germany and Netherlands. This layer absorbs massive volumetric attacks before they reach our infrastructure.

What's blocked: DDoS floods, amplification attacks, and protocol exploits. Custom filters protect game servers and high-traffic applications. Rules deploy automatically - no manual configuration needed.

4+ Tbit/s Capacity Auto Rule Deploy Game Server Filters
3

Layer 2: Smart Firewall

Traffic reaching VoxiHost is inspected by our intelligent firewall that processes up to 20 Gbps and analyzes traffic for security threats.

What's blocked: Exploits, malware, brute-force attacks, and suspicious packets that passed Layer 1. Also monitors outbound traffic to prevent abuse from your server.

Backup Protection: If attacks persist, we deploy custom rules instantly and coordinate with Layer 1 for enhanced edge filtering.

Exploit Detection Malware Blocking Traffic Analysis Outbound Monitoring

Clean Traffic Delivered

After filtering through both layers, only clean, legitimate traffic reaches your server. Your services stay online and accessible to real users while attacks are blocked automatically.

Always Protected: Layer 1 handles massive DDoS attacks at the edge, while Layer 2 blocks exploits and malware. Both layers work together 24/7 without manual intervention.

Need Help? If you notice unusual traffic, contact support immediately. We'll deploy custom rules within minutes and coordinate with our edge network for enhanced protection.

Clean Traffic Only 100% Uptime Goal Rapid Support

Frequently asked questions

Everything you need to know about VoxiShield.

Is VoxiShield included with my service? +

Yes! VoxiShield is included free with all VoxiHost services. Every VPS, dedicated server, and hosting plan comes with Tier 1 protection at no additional cost. Premium VPS customers automatically get Tier 2 protection with advanced features. You don't pay extra for DDoS protection - it's built into every plan.

What's the difference between Tier 1 and Tier 2? +

Tier 1 (Standard) includes full two-layer protection with automatic threat blocking, basic firewall configuration (port toggles, IP allow/deny), and monitoring dashboard. Perfect for most users who want set-it-and-forget-it protection.

Tier 2 (Advanced) adds custom firewall rules you can configure yourself, GEO blocking by country, outbound filtering, and detailed analytics with attack reports and alerts. Best for advanced users or high-value targets needing granular control.

How does the two-layer protection work? +

Traffic is filtered twice before reaching your server:

Layer 1 (Edge Scrubbing) - Global network with 4+ Tbit/s capacity in Germany and Netherlands absorbs massive volumetric floods (like UDP/SYN floods) before they reach our network.

Layer 2 (Smart Firewall) - Our intelligent firewall inspects packets for exploits, malware, and abuse. It learns your traffic patterns and blocks sophisticated attacks while allowing legitimate users through.

What types of attacks does VoxiShield protect against? +

VoxiShield protects against: DDoS attacks (volumetric floods, amplification, protocol attacks), exploits (SQL injection, XSS, remote code execution), malware (botnet traffic, C&C connections), brute-force attempts (SSH/RDP login attacks), and abuse (port scanning, spam sending). Both layers work together to stop threats automatically without impacting your legitimate traffic.

What should I do during an active attack? +

Most attacks are automatically mitigated by our system - you don't need to do anything! If your service is still experiencing issues or unusual traffic patterns, contact support immediately. We'll analyze traffic flows, deploy custom Layer 2 rules within minutes, and coordinate with our edge network for escalated mitigation if needed. Our team monitors attacks 24/7 and will proactively reach out if we detect critical incidents.

Can I configure firewall rules myself? +

Yes! Every customer can manage basic firewall rules in the VoxiHost portal - toggle ports on/off, create IP allow/deny lists, and configure incoming/outgoing traffic rules.

Tier 1 users get preset templates managed by VoxiHost with assisted configuration via support tickets.

Tier 2 users unlock full control: write custom rules, set up GEO blocking by country, create advanced filtering logic, and access detailed analytics showing exactly what's being blocked and why.

How do I upgrade from Tier 1 to Tier 2? +

Tier 2 is automatically included with all Premium VPS plans. If you're on Budget VPS or another service and need Tier 2 features, contact our support team - we can enable advanced protection on a case-by-case basis. Upgrading your VPS from Budget to Premium also upgrades your Shield protection automatically with no extra steps required.

Still Have Questions?

Our support team is available 12:00-20:00 CET (best effort outside hours) to help you get started with VoxiHost.

Languages