Flooding a server with fake traffic until it can’t respond
A Distributed Denial of Service (DDoS) attack works by sending a huge volume of junk network traffic at a server’s address, overwhelming its connection until real players can’t get through. In game communities this is usually petty — a disgruntled player, a rival server, someone upset about a ban — rather than anything sophisticated, but it’s common enough that meaningful protection is worth having rather than assuming it won’t happen to you.
Inline mitigation vs scrubbing centres
This is the distinction that actually matters, and it’s rarely explained clearly in provider marketing:
| Type | How it works | Response time | Impact on normal play |
|---|---|---|---|
| Inline hardware mitigation | Dedicated hardware filters attack traffic automatically, in real time, as it arrives | Under 1 second | None — clean traffic isn’t affected |
| Scrubbing centre | Traffic gets rerouted to a separate facility for filtering once an attack is detected | Often several minutes to activate | Can add noticeable latency once active |
Both count as “DDoS protection” in marketing copy. The practical experience during an actual attack is very different between them — worth asking a provider directly which type they use.
Before you assume “DDoS protection” means enough
As covered above, this is the single biggest factor in how disruptive an actual attack will feel.
Some providers charge extra for meaningful protection. Confirm what’s actually included in your plan’s base price before assuming you’re covered.
Providers with genuinely robust protection are usually happy to state a specific capacity figure (measured in Tbps). Vague answers here are a signal worth noting.
Some providers only offer their strongest protection in select data centres. If location matters to you for latency, confirm protection quality doesn’t drop at that same location.
A few other things worth checking
DDoS protection gets the most attention, but a couple of quieter things matter too: whether the provider takes automatic scheduled backups of your world (so a bad update or accidental wipe isn’t catastrophic), and whether they support restricting server admin access with a proper password rather than leaving default credentials in place. Neither is glamorous, but both are the kind of thing you’ll be glad you checked the one time something actually goes wrong.