Always-on volumetric scrubbing up to 400 Gbps with low added latency.
Distributed denial-of-service attacks come in two flavors that need different defenses. Volumetric attacks (L3/L4) flood the upstream pipe with reflection-amplification traffic — DNS, NTP, SSDP, memcached. Application attacks (L7) target the application stack directly with bot traffic that looks superficially like real users. Both happen routinely in offshore-relevant niches: streaming services, game servers, controversial commentary sites, crypto nodes, and DDoS-for-hire victims caught in the crossfire.
We ship volumetric scrubbing as standard on every plan. Capacity scales with tier: 10 Gbps on entry VPS, 80 Gbps on mid-tier, 200 Gbps on DS Pro, and 400 Gbps on DS Beast. The scrubbing is always-on, so there's no detection-and-reroute delay during an attack — packets that match attack signatures get dropped at the edge before they reach the customer port. Game and streaming traffic gets a low-latency filter profile that adds 1–3 ms versus the 50–200 ms common on generic scrubbers.
L7 protection is application-stack work. We don't replace Cloudflare for it; we recommend Cloudflare in front of public web properties for bot management, WAF rules, and rate-limiting. The two layers compose cleanly: edge L3/L4 absorbs the volumetric noise, Cloudflare absorbs the L7 abuse, and the customer port stays clean.
Traffic enters our edge globally. Attacks are detected and tagged within 50 ms.
Up to 400 Gbps absorbed at the edge — reflection-amplification, SYN floods, UDP storms all dropped.
Common L7 patterns blocked; customer-defined rules apply via the panel or Cloudflare in front.
Included on every plan from VPS-1 up. Optional enterprise tier scales to 1+ Tbps for sustained attacks.
Six concrete things ddos protection delivers — without an upsell, an asterisk, or a tier gate.
Standard on every tier listed below — no add-on, no upsell.
Mid-tier offshore VPS — sweet spot for production.
Heavy-duty offshore VPS for traffic-heavy projects.
Mid-tier offshore dedicated — Ryzen 9 power.
EPYC-grade offshore dedicated for production.
Top-spec dual-Xeon dedicated for enterprise loads.
Active in all 8 datacenters — capacity scales with the plan tier (10 Gbps entry to 400 Gbps top dedicated).
MVP placeholders coherent with our publicly-reported statistics — replaced once telemetry-grade data is wired.
Four commitments that hold across every plan, every jurisdiction, and every payment method. They're what makes offshore offshore.
The DMCA is a US statute. None of our 8 operating jurisdictions are inside US territorial scope. Boilerplate, automated, or speculative takedown notices go to /dev/null. Substantive complaints under local law route through counsel, with a 5-business-day customer-response window.
No name, no phone, no government ID, no proof of address — at any point, regardless of order size. Sign up with a pseudonym and a password. Email is optional. No KYC for crypto-paid customers, no KYC for card-paid customers (we use Card2Crypto for the card rail to bypass merchant KYC).
We don't keep server-side logs of customer activity — no access logs, no IP logs, no command-history logs. Tax / billing records follow Seychelles law (7 years, billing-only — never linked to traffic). No third-party trackers, no analytics linked to your account, no data brokerage on any tier. See our transparency report for how many subpoenas this has translated into 'nothing to produce'.
Self-hosted BTCPay Server — no Coinbase Commerce or third-party processor in the loop. 12 cryptos accepted: Bitcoin, Lightning, Monero, Ethereum, USDT, USDC, Litecoin, Dash, Zcash, Solana, TON. 7-day money-back guarantee, refunds settle in the original payment currency within hours.
Anonymous signup. Bitcoin & Monero accepted. Provisioned across 8 jurisdictions.
No credit card required · 7-day money-back guarantee