Skip to content

Commit d1acd0c

Browse files
fgalzgithub-actions
andauthored
Expanded and Updated DDoS Protection Documentation (#1584)
* Tweak: DDoS Protection Adjustments made to the title, description, and sidebar and added a description and link to the detailed guides on the DDoS protection solutions from PletX and OVH. * New Guide: PletX DDoS Protection * New Guide: OVH DDoS Protection * Sidebar adjustments * Tweaks * Auto-translate docs --------- Co-authored-by: github-actions <github-actions@github.com>
1 parent 32b0c1d commit d1acd0c

File tree

28 files changed

+1488
-87
lines changed

28 files changed

+1488
-87
lines changed

docs/ddos-protection-ovh.md

Lines changed: 60 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
---
2+
id: ddos-protection-ovh
3+
title: OVH DDoS Protection at ZAP Hosting
4+
description: "Find out how ZAP Hosting protects your servers with proactive, real time DDoS defense tailored to every service you run → Learn more now"
5+
sidebar_label: OVH
6+
---
7+
8+
## Introduction
9+
10+
DDoS (Distributed Denial of Service) attacks are malicious attempts to disrupt the normal traffic of a targeted server, service or network by overwhelming it with excessive inbound traffic. To ensure stable and uninterrupted operation for our customers, ZAP Hosting relies on dedicated DDoS protection systems tailored to each data center location.
11+
12+
One of the protection platforms integrated into our global infrastructure is the OVH Anti-DDoS system. OVH provides a fully automated, network-level mitigation solution designed to absorb even very large scale attacks without impacting service stability. This section explains how the OVH protection works and which of our products benefit from it.
13+
14+
15+
16+
## Where the Protection Is Utilized
17+
18+
OVH DDoS Protection is in active use at our hosting locations in London (UK), Sydney (Australia) and Singapore (Asia). At these locations, the protection covers our gameserver and voiceserver product lines, ensuring stable operation even during heavy attack scenarios.
19+
20+
## How the DDoS Protection Works
21+
22+
OVH operates a global, always-on Anti-DDoS infrastructure. Incoming traffic is permanently monitored in real time and automatically redirected to the OVH scrubbing network when an attack is detected. The scrubbing system removes malicious packets while allowing clean traffic to pass through without interruption. This process ensures that legitimate players and voice users continue to connect normally, even during active attack mitigation.
23+
24+
### Intelligent Network-Level Filtering
25+
OVH employs multi layer filtering technologies that analyze traffic patterns, packet signatures and connection behaviors. Malicious traffic is filtered based on volumetric anomalies, protocol inconsistencies or suspicious packet flows. Legitimate traffic is forwarded to the server with minimal latency impact.
26+
27+
For gaming environments, OVH offers additional game specific filtering layers designed to protect UDP-based protocols and latency critical services. These filters include
28+
- Protection for popular game engines and UDP game traffic
29+
- Behavior-based detection for abnormal packet bursts
30+
- Signature-based filtering that identifies known attack patterns
31+
- Real time adaptation to ensure uninterrupted player connectivity
32+
33+
Real time communication services such as TeamSpeak benefit from OVH’s low latency filtering approach. Mitigation occurs within the backbone itself which helps maintain voice quality, connection stability and low ping.
34+
35+
<details>
36+
<summary>Game servers</summary>
37+
- ARK: Survival Evolved
38+
- Arma II / Arma III
39+
- Counter Strike 2
40+
- Multi Theft Auto San Andreas (MTA:SA)
41+
- Grand Theft Auto San Andreas Multiplayer (SA:MP)
42+
- FiveM (CFX.re GTA V Multiplayer)
43+
- Half-Life / Half-Life Deathmatch Classic / Team Fortress Classic / Counter Strike 1.6 / Day of Defeat
44+
- Half-Life 2 / Team Fortress 2 / Counter Strike: Source / Counter Strike: Global Offensive / Day of Defeat: Source / Left 4 Dead / Left 4 Dead 2 / Garry’s Mod
45+
- Minecraft Bedrock (with RakNet cookie support)
46+
- Minecraft Java (Query protocol protection)
47+
- Minecraft Pocket Edition
48+
- Minecraft Query
49+
- Mumble
50+
- Rust (with RakNet cookie support)
51+
- TeamSpeak 2
52+
- TeamSpeak 3
53+
- TrackMania / TrackMania 2 / ShootMania Storm
54+
- Valheim
55+
</details>
56+
57+
<details>
58+
<summary>Voice servers</summary>
59+
- TeamSpeak
60+
</details>

docs/ddos-protection-pletx.md

Lines changed: 94 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,94 @@
1+
---
2+
id: ddos-protection-pletx
3+
title: PletX DDoS Protection at ZAP Hosting
4+
description: "Find out how ZAP Hosting protects your servers with proactive, real time DDoS defense tailored to every service you run → Learn more now"
5+
sidebar_label: PletX
6+
---
7+
8+
## Introduction
9+
10+
DDoS (Distributed Denial of Service) attacks are malicious attempts to disrupt the normal traffic of a targeted server, service or network by overwhelming it with excessive inbound traffic. To ensure stable and uninterrupted operation for our customers, ZAP Hosting relies on dedicated DDoS protection systems tailored to each data center location.
11+
12+
One of the key technologies used within our infrastructure is PletX, a highly adaptive protection platform that filters and mitigates attacks in real time. This document explains how PletX operates, which services benefit from it and why it provides a significant advantage for performance critical hosting environments.
13+
14+
15+
16+
## Where the Protection Is Utilized
17+
18+
PletX is already fully deployed at our FFM/Eygelshoven location, where it protects all hosted products including gameservers, VPS, dedicated servers, TeamSpeak servers, TS3 and Discord bots as well as webspace services. This ensures comprehensive and consistent protection across the entire product range at this site.
19+
20+
We are currently preparing the rollout for our US locations in Ashburn, Dallas and Los Angeles, where PletX will also be available very soon.
21+
22+
## How the DDoS Protection Works
23+
24+
PletX protection at our locations is always active and fully synchronized with our network. All incoming traffic is routed through the PletX filtering system before it reaches our infrastructure. This ensures that malicious traffic is eliminated as early as possible and never reaches your server.
25+
26+
### Automatic Protocol Detection
27+
28+
PletX continuously analyzes incoming traffic and identifies protocol specific signatures as soon as real traffic appears on a port. When players connect to a FiveM server on its game port, for example 30120,
29+
30+
It detects the characteristic packet structure and automatically applies the appropriate FiveM rule. The same applies to other services; if a Minecraft server receives traffic on port 25565, the system recognizes the Minecraft handshake and creates a matching rule accordingly.
31+
32+
When a user connects to a VPS or dedicated server via SSH on port 22, PletX recognizes the SSH handshake and activates an SSH rule. For Windows based systems, RDP traffic on port 3389 is detected and an RDP specific rule is created.
33+
34+
If WireGuard or OpenVPN is used on a custom port, PletX identifies the first valid exchange and applies the correct VPN rule.
35+
36+
In all cases, once PletX has identified the protocol, only legitimate traffic for that protocol is permitted while unrelated traffic is filtered before it reaches the server.
37+
38+
### Supported Protection Profiles
39+
40+
PletX supports a wide range of common service and game protocols. This includes popular games such as FiveM, Minecraft, titles using the Steam Source Engine, Metin 2 based services, RakNet driven games, SAMP, Growtopia and extensions like PlasmoVoice. Voice applications such as TeamSpeak are also recognized automatically.
41+
42+
In addition to gaming related traffic, PletX identifies remote access protocols like SSH and RDP as well as secure networking protocols including WireGuard and OpenVPN.
43+
44+
<details>
45+
<summary>Game servers</summary>
46+
- FiveM
47+
- Minecraft
48+
- Various Games supporting Steam Source Engine
49+
- Metin 2 Auth & Channel
50+
- Novalife
51+
- RakNet based games
52+
- SAMP
53+
- Growtopia
54+
- PlasmoVoice
55+
- and more..
56+
</details>
57+
58+
<details>
59+
<summary>Voice servers</summary>
60+
61+
- TeamSpeak
62+
- PlasmoVoice
63+
</details>
64+
65+
<details>
66+
<summary>Remote Access</summary>
67+
- SSH
68+
- RDP
69+
</details>
70+
71+
<details>
72+
<summary>VPN and Secure Networking</summary>
73+
74+
- WireGuard
75+
- OpenVPN
76+
</details>
77+
78+
Any protocol not recognized by PletX is treated as unknown, which may occasionally result in false positives or unexpected behavior.
79+
80+
## Web Traffic and Unsupported Services
81+
82+
PletX does not currently filter HTTP or HTTPS traffic. Web applications or unsupported protocols may therefore experience occasional false positives. If you are affected by this, please proceed as follows:
83+
84+
1. Open a support ticket at ZAP-Hosting
85+
2. We analyze the traffic
86+
3. PletX can deploy custom adjustments and fixes upon request
87+
88+
This approach is particularly intended for uncommon or specialized services. For web based projects we recommend continuing to use Cloudflare. Ideally this includes Cloudflare Proxy or CDN for websites and Cloudflare Tunnel for FiveM/RedM TxAdmin or other web dashboards.
89+
90+
## Temporary Protection Disable
91+
92+
A temporary protection disable feature will be available soon. This upcoming option allows customers to fully turn off DDoS protection for specific servers when needed. It is particularly useful for environments without meaningful DDoS risk, high-volume systems such as telemetry or monitoring platforms and applications that generate unusual traffic patterns which may trigger false positives.
93+
94+
The feature gives advanced users full control over their network behavior while game and application hosting customers continue to benefit from automatic and reliable protection.

docs/ddos-protection.md

Lines changed: 3 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
id: ddos-protection
33
title: ZAP-Hosting DDoS Protection
44
description: "Discover how ZAP-Hosting ensures uninterrupted service with tailored, real-time DDoS protection solutions for global data centers → Learn more now"
5-
sidebar_label: DDoS Protection
5+
sidebar_label: Allgemein
66
---
77

88
## Introduction
@@ -48,9 +48,6 @@ While all providers offer strong baseline protection, there are differences in s
4848
<div style={{ textAlign: 'center', fontSize: '0.7em', color: '#666' }}>
4949
✓ = Feature is fully supported &nbsp;|&nbsp; X = Feature not available &nbsp;|&nbsp; * = Feature not available or only partially available depending on configuration
5050
</div>
51+
## Learn More About Our DDoS Protection Solutions
5152

52-
53-
54-
55-
56-
53+
For detailed information about the specific protection systems used at each location, you can refer to our dedicated guides. The [PletX DDoS Protection](ddos-protection-pletx.md) documentation explains the filtering logic used in our German and upcoming US regions, while the [OVH DDoS Protection](ddos-protection-pletx.md) documentation covers the protection used in our UK, Asia and Australia locations.
Lines changed: 58 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,58 @@
1+
---
2+
id: ddos-protection-ovh
3+
title: حماية DDoS من OVH في ZAP Hosting
4+
description: "اكتشف كيف تحمي ZAP Hosting سيرفرك مع دفاع DDoS استباقي وواقعي مصمم خصيصًا لكل خدمة تستخدمها → تعرّف أكثر الآن"
5+
sidebar_label: OVH
6+
---
7+
8+
## المقدمة
9+
10+
هجمات DDoS (الحرمان الموزع من الخدمة) هي محاولات خبيثة لتعطيل حركة المرور العادية لسيرفر، خدمة أو شبكة مستهدفة عن طريق إغراقها بحركة مرور واردة مفرطة. لضمان تشغيل مستقر وغير منقطع لعملائنا، تعتمد ZAP Hosting على أنظمة حماية DDoS مخصصة لكل موقع مركز بيانات.
11+
12+
واحدة من منصات الحماية المدمجة في بنيتنا التحتية العالمية هي نظام OVH Anti-DDoS. تقدم OVH حل تخفيف تلقائي كامل على مستوى الشبكة مصمم لامتصاص الهجمات حتى الكبيرة جدًا دون التأثير على استقرار الخدمة. يشرح هذا القسم كيف تعمل حماية OVH وأي من منتجاتنا تستفيد منها.
13+
14+
## أين تُستخدم الحماية
15+
16+
تُستخدم حماية DDoS من OVH بنشاط في مواقع الاستضافة لدينا في لندن (المملكة المتحدة)، سيدني (أستراليا) وسنغافورة (آسيا). في هذه المواقع، تغطي الحماية خطوط منتجات سيرفر الألعاب والسيرفرات الصوتية، مما يضمن تشغيلًا مستقرًا حتى أثناء سيناريوهات الهجوم الثقيلة.
17+
18+
## كيف تعمل حماية DDoS
19+
20+
تشغل OVH بنية تحتية عالمية مضادة لهجمات DDoS تعمل دائمًا. يتم مراقبة حركة المرور الواردة بشكل دائم وواقعي ويتم إعادة توجيهها تلقائيًا إلى شبكة التنقية الخاصة بـ OVH عند اكتشاف هجوم. يقوم نظام التنقية بإزالة الحزم الخبيثة مع السماح بمرور حركة المرور النظيفة دون انقطاع. تضمن هذه العملية استمرار اتصال اللاعبين والمستخدمين الصوتيين الشرعيين بشكل طبيعي حتى أثناء التخفيف من الهجوم النشط.
21+
22+
### تصفية ذكية على مستوى الشبكة
23+
تستخدم OVH تقنيات تصفية متعددة الطبقات تحلل أنماط الحركة، توقيعات الحزم وسلوكيات الاتصال. يتم تصفية الحركة الخبيثة بناءً على الشذوذ الحجمي، تناقضات البروتوكول أو تدفقات الحزم المشبوهة. يتم توجيه الحركة الشرعية إلى السيرفر مع تأثير زمني ضئيل.
24+
25+
لبيئات الألعاب، تقدم OVH طبقات تصفية إضافية مخصصة للألعاب مصممة لحماية بروتوكولات UDP والخدمات الحساسة للزمن. تشمل هذه الفلاتر:
26+
- حماية لمحركات الألعاب الشهيرة وحركة ألعاب UDP
27+
- كشف سلوكيات غير طبيعية لانفجارات الحزم
28+
- تصفية تعتمد على التوقيعات التي تحدد أنماط الهجوم المعروفة
29+
- تكيّف في الوقت الحقيقي لضمان اتصال اللاعبين بدون انقطاع
30+
31+
تستفيد خدمات الاتصال الصوتي في الوقت الحقيقي مثل TeamSpeak من نهج التصفية منخفضة زمن الاستجابة الخاص بـ OVH. يحدث التخفيف داخل العمود الفقري نفسه مما يساعد في الحفاظ على جودة الصوت، استقرار الاتصال وPing منخفض.
32+
33+
<details>
34+
<summary>سيرفرات الألعاب</summary>
35+
- ARK: Survival Evolved
36+
- Arma II / Arma III
37+
- Counter Strike 2
38+
- Multi Theft Auto San Andreas (MTA:SA)
39+
- Grand Theft Auto San Andreas Multiplayer (SA:MP)
40+
- FiveM (CFX.re GTA V Multiplayer)
41+
- Half-Life / Half-Life Deathmatch Classic / Team Fortress Classic / Counter Strike 1.6 / Day of Defeat
42+
- Half-Life 2 / Team Fortress 2 / Counter Strike: Source / Counter Strike: Global Offensive / Day of Defeat: Source / Left 4 Dead / Left 4 Dead 2 / Garry’s Mod
43+
- Minecraft Bedrock (مع دعم كوكي RakNet)
44+
- Minecraft Java (حماية بروتوكول Query)
45+
- Minecraft Pocket Edition
46+
- Minecraft Query
47+
- Mumble
48+
- Rust (مع دعم كوكي RakNet)
49+
- TeamSpeak 2
50+
- TeamSpeak 3
51+
- TrackMania / TrackMania 2 / ShootMania Storm
52+
- Valheim
53+
</details>
54+
55+
<details>
56+
<summary>السيرفرات الصوتية</summary>
57+
- TeamSpeak
58+
</details>

0 commit comments

Comments
 (0)