# High-Performance VPS Anti-DDoS in Spain

**AMD Ryzen 9950X** vCPU, **NVMe in RAID** storage and hot scaling from the **Cogent Madrid Datacenter** with 10 Gbps ports. **Hostealo Shield (in-house) Anti-DDoS up to +200 Gbps** included.

## Key facts

- Data center: Madrid (Cogent) · AS215691
- Anti-DDoS: Hostealo Shield (+200 Gbps L3/L4)
- Port: 10 Gbps
- ISO 27001 and ENS certified
- 99% SLA
- Senior support 24/7 in Spanish & English
- Our own AS215691 (LIR)

## Available VPS plans

AMD Ryzen 9950X · NVMe · Anti-DDoS included · Hot scaling

Prices exclude VAT, updated 2026-10-30 18:19 UTC.

| Plan | vCPU | RAM | NVMe | Bandwidth | Port | Monthly | Quarterly | Semiannual | Annual |
| --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| C1 | 1 | 2 GB | 25 GB | 5 TB | 10 Gbps | €9.99 | €28.47 | €53.95 | €101.90 |
| C2 | 2 | 4 GB | 50 GB | 10 TB | 10 Gbps | €14.99 | €42.72 | €80.95 | €152.90 |
| C4 | 4 | 8 GB | 100 GB | 15 TB | 10 Gbps | €24.99 | €71.22 | €134.95 | €254.90 |
| C8 | 8 | 16 GB | 125 GB | Unlimited | 10 Gbps | €39.99 | €113.97 | €215.95 | €407.90 |
| C12 | 12 | 24 GB | 150 GB | Unlimited | 10 Gbps | €59.99 | €170.97 | €323.95 | €611.90 |
| C16 | 16 | 32 GB | 175 GB | Unlimited | 10 Gbps | €74.99 | €213.72 | €404.95 | €764.90 |

VAT not included · All plans include root access, dedicated IPv4 and support.

[Order in the panel](https://my.hostealo.com/order)

## Anti-DDoS Hostealo Shield in Madrid, included

A DDoS cloud is not a "best effort" sticker on top of the server. In Madrid every flow passes through Hostealo Shield, our in-house L3/L4 mitigation system, with capacity up to +200 Gbps and fine-grained control over the scrubbing before it ever reaches your server.

- **+200 Gbps** Madrid capacity: Hostealo Shield is our in-house Anti-DDoS mitigation system with advanced control.
- **< 1s** Automatic detection: Heuristics + signatures. Malicious traffic is dropped without manual intervention.
- **L3 / L4** Layers covered: Volumetric and protocol-level: SYN/UDP/ICMP flood, amplification, reflection, fragmentation.
- **24/7** Active monitoring: Our own NOC supervises and tunes rules in real time during a sustained attack.

[Anti-DDoS: full catalog](https://hostealo.com/services/anti-ddos)

## Why your VPS in Madrid

What changes when the server lives here: latency from Spain, the legal frame that applies, and the operator of the building itself.

### Latency and audience

Madrid puts your server 5-15 ms from the average Spanish ISP and 25-40 ms from Paris, Milan or Lisbon. It is the natural DC when your audience is Spain, Portugal or Spanish-speaking LATAM: for that traffic, no central-European or US DC beats it on perceived latency. Typical fits: SEO ES, e-commerce and SaaS aimed at the Iberian market.

### Jurisdiction

The server sits physically on Spanish soil: LOPDGDD and GDPR apply, the Spanish NIS2 transposition, and Spanish courts hold jurisdiction. Data is not exposed to the US CLOUD Act or Patriot Act. A good fit for ES financial sector, healthcare, public sector or any company with EU customers where data residency on European ground is non-negotiable.

### DC operator

Cogent Datacenter inside a converted electrical substation in San Sebastián de los Reyes. Tier III+ ready design, dual UPS power with diesel generators, N+1 cooling. Cogent is a global Tier 1 operator, so the building's upstream matches your transit. Anti-DDoS uses Hostealo Shield in-house with +200 Gbps of L3/L4 mitigation.

### Sectors that fit best

Natural fits: e-commerce aimed at the Iberian market (LSSI-CE compliance, Spanish VAT), fintech regulated by CNMV or the Bank of Spain, public-sector bodies under the National Security Scheme (ENS), healthcare under AEMPS, creative agencies serving ES clients, and Iberian B2B SaaS that needs the server close to Spanish-speaking end users.

## Network and connectivity in Madrid

AS215691 reaches the Internet through Cogent, the only upstream in Madrid, with Hostealo Shield in front of every IP.

- Upstreams: Cogent (Direct BGP session from AS215691)
- No IX in Madrid: all traffic enters and leaves through Cogent.
- Protection: Hostealo Shield, +200 Gbps L3/L4 mitigation capacity
- Looking Glass: https://my.hostealo.com/looking-glass#mad (Test IP: 45.198.54.161)

## Is your system within ENS scope?

We hold a conformity certification with the ENS, Spain's National Security Framework, at Medium category (RD 311/2022), issued by EQA. If you serve the Spanish public administration, the infrastructure you contract is part of the scope you have to account for.

Here is the certificate to attach to your file, hardware in the Cogent Madrid datacenter and data under Spanish jurisdiction, with no CLOUD Act exposure.

| Certificate details |   |
| --- | --- |
| Framework | RD 311/2022 |
| Category | Medium |
| Certification body | EQA |
| Holder | AP Interactive Solutions SL |
| Infrastructure | Cogent Madrid, Spanish jurisdiction |

The certification accredits Hostealo as an infrastructure provider. It does not replace bringing your own system into ENS conformity: it covers the layer we operate.

[View certificate (PDF)](https://hostealo.com/ens-certificado-conformidad-medio.pdf)

## your project

Every VPS node runs on AMD Ryzen 9950X with NVMe in RAID. These are the profiles that best take advantage of the hardware without needing to jump to a dedicated server.

### Game servers: Rust, FiveM, Minecraft without latency battles.

A 32 GB RAM VPS comfortably hosts a large Rust server, an active FiveM instance or a Minecraft community. L3/L4 Anti-DDoS included against typical gaming floods.

### WordPress / e-commerce: WordPress, Magento and PrestaShop that load fast.

NVMe in RAID and a stable PHP stack. WordPress, Magento, PrestaShop or any CMS runs comfortably through mid-tier traffic peaks. If your shop grows, scale RAM and CPU hot without migrating or reinstalling.

### Bots & automation: Bots, workers and cron jobs always online.

VPS with full KVM and root to run Discord/Telegram bots, n8n workflows, 24/7 cron jobs, monitoring agents or any process that needs real uptime. Static IP, snapshots when you break something, low European latency. No depending on Replit, Heroku or free tiers that sleep.

### Your own VPN: Your own WireGuard without sharing an IP with thousands.

Spin up WireGuard or OpenVPN in under 10 minutes. Dedicated IPv4 without inherited reputation, honest bandwidth and country choice (Spain, Germany, Netherlands, New York). No logs or profiling from a commercial VPN provider.

### Self-hosted: Nextcloud, Bitwarden, n8n, with no SaaS lock-in.

Self-hosted apps like Nextcloud, Vaultwarden, n8n, Plausible, Uptime Kuma or Mealie run comfortably on a modest VPS. Zero vendor lock-in, your data in Spanish jurisdiction and backups under your control, manual or automatic as you prefer.

### Dev & staging: Staging environments that don't crash when a dev pushes.

Isolated VPS for staging, CI runners, build agents or test sandboxes. Root access, snapshots to revert when something blows up, hot scaling for intense sprints and downsize when the release lands.

## Why pick us over Hostinger, OVH, Hetzner or Google Cloud

We're not the cheapest or the biggest. We're the provider with L3/L4 Anti-DDoS included at no cost, our own datacenter in Spain, our own network, and senior engineering support 24/7 in Spanish and English.

| Feature | Hostealo | OVH | Hetzner | Google Cloud | Hostinger |
| --- | --- | --- | --- | --- | --- |
| L3/L4 Anti-DDoS included (Hostealo applies XDP-friendly filters from the panel, auto-discovery and per-IP rules in one click. Hostinger offers basic managed DDoS in their plans. OVH has an anti-DDoS panel but it's hard to use. Hetzner only basic volumetric protection. Google Cloud Armor Standard covers L3/L4 on Load Balancer; bare-metal is out of scope.) | Yes | Partial | Partial | Partial | Partial |
| 24/7 human support in Spanish/English (Hostinger and OVH offer Spanish support but their first tier is generalist with no NOC access. Hetzner is English-only. Google Cloud requires a paid plan (Enhanced/Premium) for Spanish support.) | Yes | Partial | No | Partial | Partial |
| Physical datacenter in Spain (Neither Hostinger nor OVH (doesn't sell dedicated in ES) nor Hetzner (DE/FI) have a DC in Spain. Google Cloud has the europe-southwest1 (Madrid) region but only managed cloud, no dedicated bare-metal.) | Yes | No | No | Partial | No |
| Bandwidth with no per-traffic charge (Hostealo: unmetered symmetric at 10 Gbps per port. Hostinger, OVH and Hetzner: unmetered with throttling/fair use after a certain volume. Google Cloud: charges per GB out (Network Egress), traffic cost can multiply the bill.) | Yes | Partial | Partial | No | Partial |
| Dedicated provisioning <24h (Hostealo: 2–24h depending on stock. Hostinger doesn't sell bare-metal dedicated. OVH: sometimes hours, sometimes days depending on model. Hetzner: minutes–hours. Google Bare Metal Solution requires a contract and onboarding, no instant delivery.) | Yes | Partial | Yes | No | No |
| Crypto payments | Yes | No | No | No | No |
| Custom ISO + IPMI/KVM (Hostinger manages the VPS OS, no IPMI or custom ISO. OVH requires a ticket for some ISOs. Google Cloud only accepts images from their catalog, no direct ISO or IPMI/KVM access.) | Yes | Partial | Yes | No | No |
| GDPR compliance + data in the EU (Google Cloud operates under the US CLOUD Act even in their European regions; data may be requested by US authorities.) | Yes | Yes | Yes | Partial | Yes |

Data based on public information from Hostinger (hostinger.es), OVH (ovhcloud.com), Hetzner (hetzner.com) and Google Cloud (cloud.google.com) as of May 2026. Trademarks of their respective owners. Verifiable on their official sites.

## Frequently asked questions

What a sysadmin actually asks before migrating a VPS: hypervisor, dedicated vCPU, NVMe IOPS, hot scaling, custom ISO and how fast it's online. Yours missing? Drop us a line.

### Are your VPS KVM, OpenVZ or LXC?

KVM with full virtualization. You get your own kernel, loadable modules and access to hardware extensions (AMD-V). That means you can run Docker, Kubernetes (k3s, kubeadm), a custom firewall or even nest another hypervisor (KVM-in-KVM) if you need to. No shared OpenVZ-style containers.

### Is vCPU dedicated or shared with other customers?

Shared with other VPSs on the same node (that's how virtualization works). The upside: every host runs AMD Ryzen 9950X (16C/32T, high per-core clock), we provision with conservative ratios and monitor contention, so performance is stable in normal conditions. If you need physical cores with no neighbours and no virtualization in between, the right pick is a dedicated server.

### How many IOPS do the NVMe disks deliver?

Enterprise NVMe Gen4 (Samsung/Micron PM/PE) in RAID. Typical measured performance: around 350k-700k IOPS on 4k random read and 80k-150k IOPS on 4k random write depending on plan. Sequential throughput above 3 GB/s. If your workload is DB-intensive we recommend the plan with the highest IOPS and ECC RAM.

### Can I run Docker, Kubernetes or nest another hypervisor?

Yes, no restrictions. Since it's pure KVM, you have AMD-V active in the guest. Docker and Kubernetes run without any extra tweaking. Nested KVM (KVM inside the VPS) is enabled by default. Some customers run Proxmox or a mini k8s cluster inside a single VPS.

### Can I scale CPU/RAM hot without a reboot?

CPU and RAM scale hot from the panel without downtime. The disk needs a brief reboot (<30 seconds) to extend the partition. You can go from 2 to 16 vCPU or from 4 GB to 64 GB RAM without migrating or reinstalling the OS. Billing prorated to the second when you change.

### Do I have root access and out-of-band console (VNC)?

Root access from minute one and VNC console always available from the panel. It's what saves you when you lock yourself out of SSH by mistake, need rescue mode or want to watch the boot to debug a kernel panic.

### Which OSes can I install? Do you accept custom ISOs?

Official templates for Debian, Ubuntu, AlmaLinux, Rocky Linux, CentOS Stream, Fedora, FreeBSD and Windows Server (2019/2022) ready in 60-180 seconds from the panel. If you need something outside the catalog (a specific ISO, an unlisted OS), open a ticket and we mount the ISO manually so you can boot from it via VNC.

### How many IPs are included and does it support IPv6?

1 dedicated IPv4 included at no cost. Additional IPs available with a monthly per-IP fee, requested by ticket when you need them. Native IPv6 isn't available yet: we run pure IPv4, the IPv6 deployment is on the roadmap.

### Is there throttling after X TB of traffic?

Depends on the plan. Plans with limited bandwidth apply throttling when you exceed the monthly quota. Plans labelled unlimited operate under Fair Usage: in normal conditions we don't shape or penalise, but it's not strictly Unmetered. If you saturate the port at 100% sustained for days we'll coordinate with you.

### Do you take automatic backups?

They are not enabled by default. From the panel you can create manual backups whenever you want and keep up to 3 snapshots, and restore them from the same tab. We also recommend keeping a copy of your data off the server.

### What happens if the physical host of my VPS fails?

Automatic detection and reassignment to another node as fast as possible (target under 30 min on a full hardware failure scenario). Your disk data persists because storage is networked, not local to the host. If the incident exceeds 12 consecutive hours, the SLA applies: 2 extra service days per 12h block, requested by ticket within 7 days.

### Do you accept crypto and can I cancel anytime?

Card via Redsys, PayPal, Bitcoin, Ethereum, USDT, USDC and bank transfer. Card, PayPal and crypto activate the VPS automatically. No commitment or cancellation penalty: cancel from the panel at any time. Upgrades between plans are hot; downgrades require a few seconds offline. Billing prorated to the second.

### Does Madrid lower latency for Spanish users vs Frankfurt?

Yes. From a typical Spanish ISP Madrid usually sits at 5-15 ms; Frankfurt at 25-45 ms depending on ISP peering. For SaaS or e-commerce aimed at Spanish-speaking users, those 20-30 ms show up in TTI, INP and checkout completion rate. For distributed EU audiences, Frankfurt is still valid.

### Is the Hostealo Shield Anti-DDoS your own or subcontracted?

Our own stack, deployed inside our Cogent Madrid rack. XDP in the data plane, our own admin panel, sub-second detection. That's why it is only available in Madrid (in NL/DE we use PletX and W&D, specialised partners; in NY the operator's basic anti-DDoS). In Madrid you talk directly to the team that maintains the mitigation.

## Contact

- [Order in the panel](https://my.hostealo.com/order)
- [WhatsApp +34 900 433 332](https://wa.me/34900433332)
- [Contact page](https://hostealo.com/contact)
- [Open a ticket](https://my.hostealo.com/support/new)

---

Canonical HTML version: https://hostealo.com/high-performance-vps-spain