VoxiShield DDoS Protection & Smart Firewall

Yes! VoxiShield is included free with all VoxiHost services. Every virtual server comes with full edge filtering and custom firewall controls enabled from day one at no additional cost. You don't pay extra for DDoS protection, traffic scrubbing, or rule configuration - it's built into every plan.

Traffic is analyzed and filtered progressively through two distinct defense layers:

Layer 1: Edge Scrubbing - Our global edge network with 4+ Tbit/s capacity absorbs massive volumetric floods (like UDP/SYN floods) before they can reach our network core.

Layer 2: Core Firewall - Cleaned traffic reaching our hypervisors is inspected by an intelligent core firewall. This is where your custom rules, port access, GeoIP filters, and rate limits are enforced with sub-second propagation.

VoxiShield protects against a wide range of threat vectors: volumetric UDP/TCP floods, NTP/DNS amplifications, invalid protocol payloads (e.g. game query exploits for Minecraft, Rust, and FiveM), application layer (L7) HTTP floods, brute-force attempts, and port scans. Our edge templates automatically adapt to game and web traffic, dropping malicious packets while letting real users connect.

Yes! Every customer gets full management access to the firewall via the VoxiHost dashboard. You can create custom port rules, restrict protocols, set packet rate limits, block specific countries using our GeoIP filter, toggle anonymous VPN/Tor network blocks, and inspect blocked connections in real-time via the live analyzer feed.

In most cases, you don't need to do anything at all. VoxiShield mitigates attacks automatically within seconds. If you notice any service degradation, you can check the live firewall log in your panel or contact our support team. We can immediately write custom Layer 2 rules or adjust edge filtering patterns for your specific application port.

No. Unlike traditional tunneling protections that route traffic through distant cleaning centers, our Layer 1 edge network is strategically located near main transit nodes, and Layer 2 filtering runs at the hypervisor level. This means security filtering happens inline without introducing routing loops or increasing latency, keeping game tickrates and api response times low.