SPECIAL OFFER: 20% OFF our Virtual Server products with the code "PHOENIX"!
NEXT-GEN AUTONOMOUS CYBER SHIELD

No Compromise Against Attacks:
12+ Tbps eBPF & AI
DDoS Defence

Meet one of Turkey's most powerful hybrid DDoS defence ecosystems. With a direct fibre backbone in the Istanbul Data Center, global BGP Anycast scrubbing centers and our eBPF XDP kernel-bypass architecture in the Linux kernel, we protect your servers with zero added latency (0ms ping increase) and 99.999% uptime.

Zero Ping Increase (<1ms TR)
Always-On Inline Filtering
L3 / L4 / L7 Game Shield
Built-In Protection in All Plans
PHOENIX CYBER DEFENSE TELEMETRY v4.8 LIVE

AS213958 Main Backbone

Istanbul Data Center + 22 Global Anycast PoPs in Sync

Mitigation Capacity
12+ Tbps
Response / Drop Time
< 0.2 ms
Attacks Blocked Today
14,850+
Clean Traffic Success
%99.999
[14:22:01.102] CORE_INIT: eBPF XDP hook active on eth0 line-rate.
[14:22:02.450] BGP_PEER: DE-CIX Istanbul session stable (0% drop).
[14:22:03.118] ANOMALY_SCAN: 0 polymorphic threats detected.
[14:22:04.992] CLEAN_TRAFFIC: 100% delivered to backend nodes.
LIVE TEST AND DEMO

Simulate Our Strength: Phoenix AI Shield™

Test different attack scenarios and watch live how our eBPF XDP and Anycast defence engine brings malicious packets down to zero within seconds.

Live Attack and Mitigation Test Console

● SIMULATION ENGINE READY
TRAFFIC FLOW CHART: ATTACK VS CLEAN SERVER DATA SHIELD ENGAGED: THREAT NEUTRALISED
■ Inbound Malicious Traffic (Blocked) ■ Clean Traffic Delivered to Server
Attack Volume (Blocked)
524.8 Gbps
Packet Rate
74.2 Mpps
Server Ping / Latency
1.2 ms (0ms increase)
Packet Loss
%0.000
[SIM] 500 Gbps UDP flood started on Game Port 30120...
[AI_ENGINE] Polymorphic UDP pattern identified in 0.12ms
[eBPF_XDP] 74.2 Mpps dropped at NIC driver level (0% CPU impact)
[STATUS] All legit players connected. Zero lag.
HYBRID ARCHITECTURE

A 4-Stage Defence-in-Depth Line

Phoenix Sunucum does not rely on a single point. Traffic is filtered in 4 independent layers, from the outer edge of the internet all the way to the core.

STAGE 01

Global Anycast Scrubbing

Our 12+ Tbps global Anycast scrubbing centers (Frankfurt, London, Amsterdam, Sofia and more) absorb volumetric attacks from abroad at the point closest to their source.

12+ Tbps • 22+ PoPs
STAGE 02

Carrier-Level Backbone

On our main backbone in the Istanbul Data Center, domestic attacks are filtered on the spot through direct fibre peering with Türk Telekom, Turkcell, Vodafone and DE-CIX.

Local Peering • 1ms Latency
STAGE 03

eBPF & XDP Kernel-Bypass

Our C-based eBPF bytecode filters run at line rate at hardware driver (NIC) level, at 150+ million packets per second (150M+ PPS), before traffic enters the Linux network stack, keeping CPU load at zero.

Line-Rate • Nanosecond Response
STAGE 04

Phoenix AI Anomaly Engine™

An AI-driven behavioural analysis engine that learns previously unseen 0-day polymorphic attack patterns within seconds and stops them by generating dynamic rules.

Autonomous Learning • 0-Day Protection
FREE GIFT · YOU CONTROL THE FIREWALL

Manage Your Own Firewall: Advanced IDS Panel

With the self-service Phoenix IDS & Firewall Panel included as standard with all our VDS servers, control is entirely yours. Without opening a support ticket, choose your game profiles, enable the International Lock (YD-KAPAT) and manage the traffic reaching your server with millisecond precision.

27+ Ready-Made Game & Protocol Profiles One-Click Activation

Apply L4/L7 eBPF filters optimised for popular games such as CS2, FiveM, Minecraft, MTA, SAMP and Rust to your IP address within seconds.

YD-KAPAT: One-Click International Lock Geo-Lock

During volumetric attacks from abroad, drop all traffic from outside Turkey instantly with one click. Your local players and users carry on uninterrupted with zero packet loss.

verify-ip & Strict Port Isolation RDP & SSH Protection

Protect your Windows RDP (3389) and Linux SSH (22) ports against brute-force scans. Smart IP verification blocks fake bots.

0.2ms eBPF Hardware Layer Zero CPU Load

Every rule you add is written directly to the hardware XDP/eBPF kernel layer. It puts no extra load on your server's CPU.

0.2 ms Rule Activation
27+ Profiles Game & Network Filters
100% Free Included with Every VDS
Client Area Login
Phoenix Phoenix IDS Firewall Manager • v3.4
PROTECTION ACTIVE
1 IP address
Phoenix Guard Logo
93.113.57.2
Selected target IP · 1 Gbit Port
eBPF Active
The profile becomes active on this IP.
2 Game / network profile
11 RESULTS
GAME PROFILES
🎯
CS2
Counter-Strike 2 Valve NetFilter
Game
🟩
Minecraft
BungeeCord / Velocity / TCP Shield
Game
🚗
FiveM
GTA V Roleplay CFX.re Protection
Game
🎮
MTA
Multi Theft Auto UDP Filter
Game
🕹️
SAMP
San Andreas Multiplayer Query Protection
Game
☢️
Rust
Steam Query & RakNet Shield
Game
SECURITY / NETWORK PROFILES
verify-ip
IP verification · Bot prevention
Security
🌐
YD-KAPAT
Blocks access from abroad (Geo-Lock)
Critical
🖥️
RDP-KATI
Strict RDP protection (Port 3389)
Port
💻
SSH-KATI
Strict SSH protection (Port 22)
Port
🔒
lokal-kapat
Isolate local network access
Network
Active Rules (IP: 93.113.57.2)
2 Rules Active
🌐
YD-KAPAT (Geo-Lock)
148.4 GB International Volumetric Traffic Filtered
🎯
CS2 (Valve NetFilter)
0 Latency · Zero Packet Loss
🛡️ Live Attack Test Simulate a 30+ Gbps attack and watch the mitigation live.
GAME SHIELD L7 PROTOCOL SUITE

L7 Protocol Filtering Built for Game Servers

Game servers cannot be protected with standard firewall rules. Each game's UDP socket structure, player handshake, heartbeat and query packets are unique. With 22+ game-specific protocol shields running at hardware eBPF/XDP level, Phoenix Sunucum delivers an uninterrupted gaming experience with no ping increase, loss or desync.

22+ Game Profiles FiveM, CS2, Rust, Metin2 & All
< 0.2 ms eBPF Line-Rate Mitigation
12+ Tbps Anycast & Istanbul Data Center Peering
0 Ping Increase 0% Packet Loss Guarantee
22
FiveM (CitizenFX) DDoS-Protected Server Hosting
L7 DEDICATED 0ms Added Latency

FiveM (CitizenFX)

A dedicated CitizenFX L7 filtering shield for GTA V Roleplay servers.

  • CitizenFX TCP/UDP protocol validation
  • Fake player join & HTTP handshake flood blocking
  • Sync network state dropping & 0 FPS loss
  • Zero desync at up to 64/128/2048 players
CitizenFXtxAdmineBPF XDP0 Desync
Counter-Strike 2 (CS2) DDoS-Protected Server Hosting
SOURCE 2 SHIELD 0ms Added Latency

Counter-Strike 2 (CS2)

A2S caching optimised specifically for the Valve Source Engine 2 architecture.

  • Smart A2S_INFO & A2S_PLAYER caching
  • Valve Source query flood & splitpacket protection
  • Stable 128-tick & sub-tick connection guarantee
  • 0 choke / 0 loss for community servers
Source 2A2S CacheSub-tickValve Net
Rust (Facepunch) DDoS-Protected Server Hosting
RAKNET SHIELD 0ms Added Latency

Rust (Facepunch)

A dedicated encrypted-handshake filtering shield for the Facepunch RakNet protocol.

  • RakNet encrypted handshake check & token filter
  • Null payload & fragmentation UDP attack absorption
  • RCON port brute-force & query attack blocking
  • Tolerance for heavy traffic swings at wipe time
RakNetFacepunchRCON Guard0 Loss
Minecraft (Java & Bedrock) DDoS-Protected Server Hosting
TCP/UDP PROXY 0ms Added Latency

Minecraft (Java & Bedrock)

Bot and query mitigation for BungeeCord, Velocity and PaperMC setups.

  • Handshake, Login Start & Null Ping attack protection
  • Smart BungeeCord & Velocity proxy layer
  • Instant bot join flood & chat spam filtering
  • Bedrock GeyserMC UDP protocol support
VelocityBungeeCordTCP ShieldBot Guard
Palworld Dedicated DDoS-Protected Server Hosting
UNREAL ENGINE 5 0ms Added Latency

Palworld Dedicated

Dedicated mitigation for Pocketpair's Unreal Engine 5-based dedicated servers.

  • UE5-specific UDP socket flood mitigation
  • Memory leak & crash exploit packet filtering
  • Stable ping on 32-player co-op/dedicated servers
  • Secure connection that prevents save data corruption
UE5DedicatedUDP FloodCrash Guard
Multi Theft Auto (MTA:SA) DDoS-Protected Server Hosting
ASE NETCODE 0ms Added Latency

Multi Theft Auto (MTA:SA)

ASE packet inspection for MTA, one of Turkey's most popular role-play platforms.

  • ASE Query packet inspection and fake query blocking
  • UDP connection flood & sync packet dropping
  • Zero packet loss during international volumetric attacks
  • Uninterrupted synchronisation at 1000+ player capacity
ASE QueryUDP FilterNetcode0 Desync
SA-MP (San Andreas Multiplayer) DDoS-Protected Server Hosting
RAKNET LEGACY 0ms Added Latency

SA-MP (San Andreas Multiplayer)

A RakNet query and spoofed-packet shield for San Andreas Multiplayer servers.

  • SAMP Query 'c', 'r', 'p' flood attack blocking
  • Cookie handshake & IP spoofing filtering
  • Full compatibility with OpenMP and classic SAMP servers
  • Crash packet blocking
RakNetOpenMPQuery ShieldAnti-Crash
ARK: Survival Evolved DDoS-Protected Server Hosting
SHOOTER GAME 0ms Added Latency

ARK: Survival Evolved

Steam query and BattlEye protection for ARK survival and ASA setups.

  • ShooterGame UDP query & Steam master filter
  • Zero added latency during tribe wars & raids
  • Priority for BattlEye anti-cheat packet traffic
  • Stable data delivery on large map mods
ShooterGameBattlEyeSteam FilterAnti-Lag
Arma 3 & Arma Reforger DDoS-Protected Server Hosting
TACTICAL NET 0ms Added Latency

Arma 3 & Arma Reforger

A dedicated L4/L7 shield for Bohemia Interactive military simulation servers.

  • Bohemia EnFusion & Real Virtuality netcode protection
  • Steam master server query caching
  • BattlEye heartbeat security & spoofing prevention
  • UDP bandwidth priority for TFAR / ACRE2 VOIP
EnFusionReal VirtualityBattlEyeVOIP QoS
Squad Dedicated DDoS-Protected Server Hosting
OFFWORLD UE4 0ms Added Latency

Squad Dedicated

A zero-ping filter for Offworld Industries' 100-player tactical servers.

  • 0 tickrate drop in large 100-player battles
  • Unreal Engine 4 UDP replication stream protection
  • EAC (Easy Anti-Cheat) heartbeat validation
  • UDP QoS for built-in radio and local voice channels
UE4 NetEAC Guard100 PlayersQoS Voice
DayZ Standalone DDoS-Protected Server Hosting
ENFUSION ENGINE 0ms Added Latency

DayZ Standalone

An anti-desync shield for Enfusion-engine zombie apocalypse servers.

  • Enfusion network replication & inventory sync protection
  • Zombie AI & player position packet optimisation
  • Steam Query flood & A2S_RULES filtering
  • Full compatibility with community maps and mod packs
EnfusionBattlEyeInventory Sync0 Desync
Assetto Corsa DDoS-Protected Server Hosting
KUNOS TELEMETRY 0ms Added Latency

Assetto Corsa

Millisecond-level vehicle telemetry protection for racing and drift servers.

  • Kunos Simulazioni vehicle physics & position telemetry security
  • Content Manager (CM) handshake & ping filter
  • Contact synchronisation on traffic and drift servers
  • HTTP server-info & car list query caching
KunosContent ManagerTelemetryDrift Net
Valheim Dedicated DDoS-Protected Server Hosting
IRON GATE UDP 0ms Added Latency

Valheim Dedicated

A world-save and connection shield for Viking-world co-op servers.

  • Iron Gate UDP socket mitigation
  • Steam P2P / Crossplay socket security
  • Prevents packet drops during world saves
  • Full compatibility with BepInEx & Valheim mods
CrossplayIron GateSave GuardP2P Shield
V Rising Dedicated DDoS-Protected Server Hosting
STUNLOCK ENGINE 0ms Added Latency

V Rising Dedicated

A dedicated mitigation shield for Stunlock Studios' vampire survival servers.

  • Stunlock-specific UDP game-loop packet analysis
  • Uninterrupted combat synchronisation in PvP castle sieges
  • Steam API query attack isolation
  • 0 added latency across day/night cycles
StunlockPvP CastleUDP LoopSteam Shield
Metin2 PVP Server DDoS-Protected Server Hosting
GAME GUARD L4/L7 0ms Added Latency

Metin2 PVP Server

Dedicated anti-SYN & port protection for Metin2 1-99, 1-105 and 55-120 PVP servers.

  • Dedicated TCP filtering for Auth, DB & Channel ports
  • Instant dropping of SYN Flood, ACK Flood & RST attacks
  • Blocks game core crash exploit packets
  • 0 lag & 0 disconnects in guild wars
Auth GuardSYN ShieldPort FilterGuild Wars
Knight Online Private DDoS-Protected Server Hosting
K-GUARD SHIELD 0ms Added Latency

Knight Online Private

An L4/L7 mitigation shield for Knight Online MyKO, HomeKO and Farm servers.

  • Login Server & Game Server port isolation
  • Compatible with Soacs, Acme, K-Guard and custom anti-cheats
  • Zero added latency in Colony Zone (CZ) and JR/BDW wars
  • Brute-force prevention with a botnet connection limiter
K-GuardCZ WarsLogin GuardAnti-Syn
Garry's Mod (GMod) DDoS-Protected Server Hosting
SOURCE WORKSHOP 0ms Added Latency

Garry's Mod (GMod)

A Source Engine query & network shield for DarkRP, TTT and Sandbox modes.

  • Source Engine A2S query flood mitigation
  • Steady speeds for FastDL and Steam Workshop downloads
  • Net message exploit & lua freeze packet filtering
  • Lag protection with 100+ props and complex addons
DarkRPSourceFastDLLua Guard
Unturned Dedicated DDoS-Protected Server Hosting
SMARTLY DRESSED 0ms Added Latency

Unturned Dedicated

A network filter optimised for Nelson Sexton's Unturned servers.

  • Unturned Steam Master query shield
  • Full compatibility with RocketMod & OpenMod plugins
  • Zombie horde & vehicle replication desync prevention
  • Protects local players during international volumetric attacks
RocketModSteam NetVehicle Sync0 Desync
SCP: Secret Laboratory DDoS-Protected Server Hosting
NORTHWOOD UDP 0ms Added Latency

SCP: Secret Laboratory

A central server query shield for Northwood Studios' SCP:SL servers.

  • SCP Central Server API validation and synchronisation
  • 0 desync in D-Class / MTF player interactions
  • Secure proximity voice chat VOIP data stream
  • Blocks DDoS attacks arriving at round restart
NorthwoodCentral APIVOIP GuardAnti-Spam
DDNet / Teeworlds DDoS-Protected Server Hosting
TEEWORLDS NET 0ms Added Latency

DDNet / Teeworlds

An ultra-low-latency UDP shield for DDraceNetwork 64-player servers.

  • Lightweight Teeworlds 0.6 / 0.7 UDP netcode filtering
  • No added latency for hook & jump mechanics
  • Blocks fake client floods and fake tee joins
  • Global master server list ping optimisation
DDraceNetwork0ms LagHook NetUltra Fast
TeamSpeak 3 (TS3 Voice) DDoS-Protected Server Hosting
VOICE SHIELD 0ms Added Latency

TeamSpeak 3 (TS3 Voice)

A DDoS shield for uninterrupted voice communication for gaming clans and communities.

  • Highest QoS priority for TS3 Voice UDP (9987) packets
  • ServerQuery (10011) brute-force and bot flood blocking
  • Tsdns & file transfer (30033) port protection
  • An eBPF filter that prevents robotic voice and dropouts
Voice QoSQuery Guard0 Robotic VoiceAnti-Drop
Hytale Ready DDoS-Protected Server Hosting
NEXT-GEN VOXEL 0ms Added Latency

Hytale Ready

An L7 security shield ready for next-generation voxel RPG adventure servers.

  • C++/Java network stack support ready for the Hytale architecture
  • High bandwidth for large-world procedural data streams
  • Secure sockets for custom modding and scripting engines
  • Anycast mitigation ready for high-volume launch traffic
Next-GenHytale ReadyVoxel NetHigh Bandwidth

🛡️ Have a Custom Game Project or a Different Protocol?

For your custom C++, Java, Rust or Unreal/Unity-based game projects that are not on the list, we prepare a custom eBPF L7 rule set through reverse engineering within 15 minutes and protect your servers with zero added latency.

WHY PHOENIX SUNUCUM?

Technical Comparison: See the Difference

The DDoS solutions of ordinary hosting or general cloud providers are not designed for gaming and high-performance servers. Compare and decide.

Feature / Criterion Phoenix Sunucum AI Shield Standard TR Hosting / VDS General Cloudflare (Free/Pro)
Latency Within Turkey (Ping) ✓ 1 - 5 ms (Zero Increase) ✗ 20 - 60 ms ✗ 35 - 90 ms
UDP & L7 Game Protocol Protection ✓ Full Coverage (FiveM, Rust, CS2, etc.) ✗ None / Insufficient ✗ Enterprise Only ($$$$)
Filtering Architecture ✓ eBPF XDP Kernel-Bypass (150M+ PPS / 150+ Million Packets) ✗ Classic Iptables / CPU Saturation Proxy-Level, Web-Focused
Blackholing During an Attack ✓ NEVER (Always-On Inline Scrubbing) ✗ IP Frequently Null-Routed Varies with Traffic
Extra Cost per Attack / by Size ✓ 0 TL (Completely Free) ✗ Overage Bills Plan Upgrade Required
Real-Time IDS and Log Panel ✓ Free Control Panel Included ✗ None Limited / Paid
One-Click International Traffic Lock (Geo-Lock) ✓ Instant On/Off from the Panel ✗ None Subject to WAF Rule Limits
DOMESTIC CARRIER INTEGRATION

A Powerful
Local DDoS Scrubbing Backbone in Turkey

The great majority of attacks are carried out with botnets formed on local internet service providers. Thanks to our local peering links in our Istanbul data center, attack traffic is separated out with eBPF on the carrier backbone before it can get near your server.

eBPF XDP Hardware Filtering

Packets are scanned directly on 100G network cards before entering the Linux kernel; your server resources are not affected.

< 0.2 ms Response Time

The time between the start of an attack and its blocking is far faster than the human eye can perceive.

Domestic DDoS Protection Infrastructure
International Global Anycast DDoS Protection
GLOBAL SCRUBBING CENTERS

12+ Tbps Capacity
BGP Anycast Global Shield

With Phoenix Guard, 22+ Anycast scrubbing centers across Europe, America and Asia come into play. Volumetric attacks originating abroad (SYN, UDP, NTP/DNS reflection) are eliminated on the European backbone before they even reach our borders.

Phoenix Guard Integration

Real-time traffic scrubbing with BGP Flowspec support at globally recognised mitigation centers.

Smart Anycast Routing

The attack load does not pile up on a single link; it is spread evenly across the whole global scrubbing network, cancelling out its impact.

Our Service

Bring This Protection to Your Network: GRE Tunnel DDoS Protection Service

We also offer our Phoenix Guard DDoS protection, integrated across domestic and international layers, to hosting companies, game server providers and corporate networks over a GRE tunnel. Your network's traffic is cleaned in two layers and reaches you through the tunnel.

  • Two-layer DDoS protection: domestic + international
  • Capacity from 50 Mbps to 1 Gbps, 1 Mbps = 1 €
  • IDS panel, game profiles and Discord attack notifications
2.37 GppsInternational attack blocked
~70M ppsDomestic attack, zero downtime
2 LayersPhoenix Guard: domestic + international
50 €Pricing from 50 Mbps
LOW LATENCY GUARANTEE

Global Ping and Connection Performance

We never compromise on ping while providing DDoS protection. Direct peering to the whole world from our Tier-III Istanbul Data Center facility.

Global Ping Values Map

1 - 5 ms

Within Turkey (Istanbul & Ankara)

20 - 38 ms

Europe (Frankfurt / Sofia)

30 - 45 ms

Western Europe (Amsterdam / London)

80 - 110 ms

North America (New York / Ashburn)

FREQUENTLY ASKED QUESTIONS

What People Ask About DDoS Defence

Detailed answers about our technical infrastructure, the eBPF XDP filtering mechanism and our protection standards.

The Phoenix Sunucum hybrid DDoS defence architecture works with global BGP Anycast scrubbing gateways of 12+ Tbps capacity, carrier-level direct fibre filtering on the Istanbul Data Center backbone in Turkey, and an eBPF XDP (eXpress Data Path) kernel-bypass engine in the Linux kernel. Packets reaching the network card (NIC) are scanned within nanoseconds, before they enter the operating system stack; our AI-driven anomaly engine tells legitimate user packets apart and filters and discards attack traffic instantly.
Classic software firewalls (iptables, nftables, etc.) filter each incoming packet only after it has passed through the operating system's slow network stack (TCP/IP stack). In attacks of millions of packets this saturates the CPU and brings the server down. eBPF XDP, by contrast, catches packets directly at network hardware driver (NIC driver) level. CPU usage therefore stays close to zero and 150+ million packets per second are dropped at line rate.
No. Thanks to our Always-On symmetric protection architecture and our Istanbul Data Center backbone, your domestic traffic is delivered in the 1-5ms range with zero added latency. Because traffic is not forced through international tunnels, your players feel no ping fluctuation, packet loss or disconnects even during an attack.
Thanks to our 12+ Tbps global Anycast capacity, even high-volume volumetric attacks are absorbed. At Phoenix Sunucum the size of an attack is never passed on to your bill as an extra cost. DDoS protection is included as standard in all our VDS and server plans and is provided free of charge.
No. Traditional hosting companies take your IP address offline during an attack to protect the server network (blackhole / null route). At Phoenix Sunucum inline, stateful scrubbing is always active, so your IP address is never taken down; your website and server keep serving without interruption.
Yes. You can set your notification preferences in your client control panel and receive instant e-mail or SMS notifications when an abnormal traffic increase towards your IP address is detected and when the attack has been successfully neutralised.
24/7 ACTIVE CYBER DEFENCE

Put an End to DDoS Attacks:
Secure Your Server

Your uninterrupted, high-performance DDoS-protected server with 12+ Tbps eBPF-backed protection is ready within seconds. Our security experts are by your side with 24/7 technical support and free migration consultancy.

  • Built-in DDoS Protection in All Plans
  • eBPF XDP Kernel-Bypass Architecture
  • L7 Game Shield (FiveM, Rust, CS2)
  • 99.999% Uninterrupted Uptime Guarantee
  • Zero Ping Increase (<1ms Istanbul)
  • 24/7 Uninterrupted Expert Support
Our Cyber Security Partners

Our Trusted Infrastructure and Technology Partners

We work with industry leaders for world-class cyber defence.

Server Wizard NEW Find the Best Plan