Game Server Protection

    DayZ server DDoS protection

    Keep your DayZ community server and the host you already rent. Players connect to a Sterile IP, attacks are filtered on our network, and only clean traffic reaches your server over a GRE tunnel.

    View pricing

    What hits DayZ servers

    What gets thrown at a public DayZ server, and what happens to it behind Sterile.

    UDP floods on the game port
    A flood that desyncs everyone ends a firefight as surely as a bullet. It is filtered on our network, and your server's real address stays hidden so nobody can aim around us.
    Server-browser query floods
    DayZ answers Steam queries on its own port, which spoofed requests can bury. That port gets a rule with a profile built for it.
    Connection floods
    Floods of connection attempts that never become players are filtered before they reach the server, so real survivors can still join.
    BattlEye RCon left open
    RCon is for your admins and tools, not your players. Without a rule it is not reachable on the protected IP.

    Premade protection for every DayZ port

    Every port a DayZ server uses has a premade profile, tuned for that traffic. In the dashboard you pick the port and its profile from a list; there are no filter rules to write. Traffic to a port you have not added does not reach your server.

    • GameOr the -port you start the server withPlayers joining and playing2302 UDP
    • Steam querysteamQueryPort in serverDZ.cfgThe server browser and launcher27016 UDP

    Leave the BattlEye RCon port you set in BEServer_x64.cfg without a rule, so it is not reachable on the protected IP.

    Set up in a few minutes

    Download the installer from the dashboard and run it as root on the Linux server that hosts DayZ. It brings up the GRE tunnel; then add a rule for 2302 and give players the Sterile IP. Add your SSH port to a profile first, or the install can cut your session.

    root@your-server

    Guides

    Questions about protecting DayZ

    No. You keep your host and your server. Traffic reaches Sterile first and is delivered to your server over a GRE tunnel, so the only thing that changes for players is the address they connect to.

    If they join by domain name, point its A record at the Sterile IP and nothing changes for them. If they join by IP address or a saved favourite, give them the new one.

    Yes. Add a rule for the Steam query port (steamQueryPort in serverDZ.cfg) and the server browser and launcher reach it on the Sterile IP.

    No. BattlEye's anti-cheat runs inside the game connection, which passes through as normal. Only its RCon port stays without a rule, since players never use it.

    The installer runs on Linux, as root, and needs a kernel that can load the GRE module. If your server runs Windows, talk to us before you buy and we will look at your setup with you. Contact support

    A little, because traffic takes one extra hop through our edge. How much depends on where your players, our edge and your server are. Read the latency guide

    You choose the reserved speed, clean traffic and protected IPs you need, and pay monthly for that. View pricing

    Keep your DayZ server online

    Protect the server you already run, and be filtered before the next attack arrives.

    Other games