DDoS Protection

Cerberus DDoS Shield

Always-on Layer 4 scrubbing for game servers, voice servers, and any TCP or UDP service. Filtered traffic, low added latency, transparent linear pricing.

Sub-15ms added latency

Filtered traffic reaches your backend in single-digit milliseconds. Players don't notice the proxy is there.

Layer 4 SYN & UDP flood mitigation

Stateful filtering, per-source rate limits, and SYN cookies — built on FreeBSD pf with multi-tenant isolation.

Dedicated routed IP

Your own protected IP, not a shared scrubbing center. No noisy neighbors. Your traffic, your rules.

Protocol-agnostic

Any TCP or UDP service on any port. Forward 1 port or 100 — we don't inspect or interfere with your protocol.

Transparent flat pricing

€12.30/mo incl. VAT (€10 net) per protected IP as a VPS add-on. No setup fee, no hidden burst fees, no per-Gbps surcharge, no enterprise contracts.

Bilingual support EN / ES / PL

Talk to the people running the proxy, not a ticket queue. Spanish-speaking on-call for Iberia and LATAM customers.

Pricing

Configure Your Cerberus Shield

One protected IP, always-on scrubbing — add it to any Hotbox VPS.

Cerberus DDoS Protection

One protected IP with always-on Layer 4 scrubbing, added to any Hotbox VPS.

€ 12.30 /mo

incl. VAT (€10.00 net) · billed on your VPS term

  • ✓Dedicated routed IP
  • ✓Layer 4 DDoS mitigation
  • ✓TCP and UDP forwarding
  • ✓Sub-15ms added latency
  • ✓Attack notifications
  • ✓Cancel any time, 30 days notice

You can set your backend origin IP now at checkout or later from your client area.

Add Cerberus to a VPS
How it works

From order to filtered traffic

1

Order & configure

Add Cerberus to a Hotbox VPS at checkout or later from your client area, and pay with card or PayPal. Set your backend origin IP when you're ready.

2

We provision within 24h

We allocate your protected IP, set up the encrypted tunnel to your backend, and email you your credentials and client snippet.

3

Point your DNS

Update the A record for your service to your new protected IP. Or have your client whitelist itself on connect — we'll send you a 30-line snippet.

4

Filtered traffic only

Legitimate traffic reaches your backend. Attack traffic is dropped at the edge. You get a quiet line and a clean game.

FAQ

Frequently asked questions

How does the pricing work?
Cerberus is a VPS add-on: €12.30/mo incl. VAT (€10.00 net) per protected IP, billed on the same term as your VPS, with no setup fee. No bandwidth metering, no per-Gbps overage.
What does Cerberus actually protect against?
Volumetric Layer 4 attacks: SYN floods, UDP floods, ICMP floods, amplification, IP spoofing, fragmented packet abuse. We do not provide Layer 7 (HTTP/WAF) protection — for that, put Cloudflare or similar in front of an HTTP service. Cerberus shines for game servers, voice servers, VPN endpoints, and TCP/UDP APIs.
Where is Cerberus located? Will my players see added latency?
Our scrubbing node sits in a Tier-3 datacentre in Germany (Frankfurt / Limburg) on a 25 Gbit/s uplink. Players reach your backend through the node. Added round-trip latency between Cerberus and your backend is typically 5–15 ms — your players will not feel it.
My backend isn't on Hotbox. Will Cerberus still work?
Yes. Your backend can be anywhere — OVH, Hetzner, AWS, your basement. We open an encrypted GRE tunnel from Cerberus to your backend's public IP. You install one short network configuration snippet on your backend. That's it.
What's your mitigation capacity?
Our edge is filtered upstream by our provider's anti-DDoS infrastructure (combahton FlowShield), which absorbs volumetric attacks of hundreds of Gbps before traffic ever reaches our scrubbing node. Cerberus itself then applies per-customer stateful filtering on what gets through. We do not publish a hard cap because the practical limit is your backend's link, not ours.
How do I cancel? Are there refunds?
Cancel any time with 30 days notice from your account page or by email. Recurring fees are not pro-rated, but you keep service until the end of your paid term. See the SLA for details.
Do you offer SLA refunds?
We commit to 99.5% uptime on filtered traffic, excluding upstream absorption. If we breach it in a given month and you've already paid for that period, we credit a pro-rated portion of the recurring fee toward your next invoice. Full terms in our SLA.
Can I use Cerberus to protect any service I want?
Anything legal and not abusive. Our Acceptable Use Policy prohibits hosting illegal content, using Cerberus as an attack-origin proxy, or any service designed to facilitate fraud or harassment. We reserve the right to terminate accounts that violate it.