Anti-DDoS mitigation with auto-discovery

No, we cover L3/L4 only. L7 attacks (HTTP flood, Slowloris, bots, scraping) are mitigated server-side: with a WAF, a CDN like Cloudflare in front, or rules in your own nginx/HAProxy. We focus on what happens before the packet reaches your server (network and transport). If you need full L7 coverage, combine it with a WAF/CDN layer on top.

Madrid: our own Hostealo Shield with +200 Gbps capacity. Eygelshoven (NL): PletX with +1 Tbps. Mainhausen (DE): W&D Shield + PletX with +1 Tbps. New York: Basic Anti-DDoS (no specific figure published). Capacities are per DC, not theoretical sums: each datacenter has its own scrubbing infrastructure.

Automatic detection in under 1 second. The system analyses traffic continuously, detects the attack pattern and applies the right per-application filter without human intervention. Mitigation is always-on, you don't have to activate anything when the attack arrives — it's already in place from the first packet.

Per-application profiles are applied automatically via auto-discovery: the system detects the traffic type (gaming, web, voice, VPN, etc.) and applies the corresponding filter without you touching anything. A first human review of your profile is always recommended and we coordinate it by ticket. If you contract IP Transit with GRE or BGP, the tunnel config and announcements from your side are on you.

Yes. We have XDP profiles specific to gaming. We cover the typical game-server protocols (custom UDP, Source engine, Steam protocol, Minecraft, RakNet, etc.) with filters that validate the protocol handshake and drop illegitimate traffic before reaching the server's port. That's why a game server on Hostealo stays up and lag-free under sustained floods.

They can happen (typical noise in any serious scrubbing system). If the system blocks legitimate traffic, tell us by ticket: our part of the scrubbing records the PCAP of the affected traffic and we analyse it with you to understand the pattern and adjust the rule. It's not a black box, we can see and change whatever's needed.

Yes, several options. Client panel with real-time attack visualisation, detected vectors and applied rules. REST API for direct management (add rules, query attacks, export logs). Built-in AI assistant in the panel that analyses attacks and suggests automatic profile adjustments. And an MCP server you can connect to ChatGPT, Claude or another LLM to manage Anti-DDoS from your own AI conversation.

L3/L4 Anti-DDoS is included at no cost on Hostealo VPS, dedicated servers and colocation. No franchise, no hidden add-ons, no paid tier. The only thing billed separately is IP Transit with Anti-DDoS: for external networks (not hosted at Hostealo) or services under constant attack that need reserved scrubbing capacity above what's included.

Service focused on customers with their own external network (their /24 IPv4 and ASN) who want to protect their traffic behind our scrubbing. Connection to our stack is via GRE, direct tunnel or BGP depending on the case. Price depends on traffic volume, reserved scrubbing capacity and connection model, so it's quoted case by case. Contact us for a concrete proposal.

Yes, through IP Transit with Anti-DDoS. Your /24 is announced behind our AS, traffic enters through our scrubbing and exits clean toward your origin, which can live in any datacenter (another provider, your own on-prem, multi-cloud, etc.). The connection from us to your origin is via GRE or BGP tunnel as you prefer.

The Madrid advanced panel (only available on Hostealo Shield, our in-house system) adds: per-IP rule definition, blocking by ASN or country, creation of custom XDP filters for specific cases and maintenance of IP lists (whitelist, blacklist). In the other DCs scrubbing is automatic without these advanced options, because mitigation is operated by the DC provider (PletX or W&D).