Protection layers

🌐

Transit filtering first

Large-volume events should be handled upstream before they reach the game node itself.

XDP ingress controls

Lower-level packet handling helps cut down obvious bad traffic before it wastes more expensive resources.

🧠

Protocol-aware rules

Good traffic and bad traffic are not always separated by simple rate limits. Game-aware rules are part of the story.

Traffic path

See the filtering chain before traffic reaches the customer.

This visual keeps the sequence concrete: traffic enters from the internet, high-volume abuse gets cut upstream, 0lag.host filtering software applies deeper rules, and only the cleaned flow reaches the game service.

Internet

Mixed ingress

Players and hostile packets enter together before any filtering decision exists.

Game traffic Attack traffic

Upstream prefiltering

Transit scrub first

The upstream layer absorbs large noisy floods first, with 17 Tbps+ of filtering capacity before traffic reaches the local stack.

Bulk drops 17 Tbps+ Transit scrub

0lag.host filtering software

Inspect the survivors

XDP and protocol-aware logic handle leaks, bypasses, and more sophisticated attacks that make it past upstream filtering, with local filtering tuned for up to 20 Gbps and 29.6 Mpps.

XDP 20 Gbps 29.6 Mpps Protocol rules Rate policy

Customer

Clean delivery

The buyer sees the outcome that matters: reachable game traffic, usable tooling, and less collateral damage.

Game stays reachable
LayerPrimary roleWhat the buyer should care about
Upstream filteringAbsorb obvious high-volume abuse before it reaches the node, with 17 Tbps+ of upstream filtering capacity.Better continuity during broader events and far less wasted local capacity.
XDP controlsDrop or shape leak traffic, bypasses, and other attacks that survive transit, up to 20 Gbps and 29.6 Mpps locally.More protection against the noisier and more sophisticated traffic that should not consume full stack resources.
Protocol-aware rulesDifferentiate legitimate game traffic from abuse patterns more accurately.Cleaner survivability for game traffic and fewer blunt-force false positives.
Operational responseKeep visibility public and the support story grounded.Status updates and realistic language instead of empty “100% protected” promises.