Game Server Protection

    FiveM server DDoS protection

    Keep your FiveM or RedM roleplay server and the host you already rent. Players connect to a Sterile IP, attacks are filtered on our network, and only clean traffic reaches your server over a GRE tunnel.

    View pricing

    What hits FiveM servers

    What gets thrown at a public FiveM server, and what happens to it behind Sterile.

    Floods aimed at your IP
    UDP and amplification floods big enough to fill your host's uplink are filtered on our network. Your server's real address stays hidden, so nobody can aim around us.
    Floods on the HTTP endpoints
    Port 30120 also serves HTTP: the server info, the player list and resource downloads. Request floods against it are filtered with a profile built for that traffic.
    Connection floods
    Waves of connection attempts that never become players are filtered before they reach the server, so the queue keeps moving for real ones.
    txAdmin left open
    The txAdmin panel is for your staff, not your players. Without a rule it is not reachable on the protected IP.

    Premade protection for every FiveM port

    Every port a FiveM server uses has a premade profile, tuned for that traffic. In the dashboard you pick the port and its profile from a list; there are no filter rules to write. Traffic to a port you have not added does not reach your server.

    • Game trafficPlayers in the city30120 UDP
    • Connect and downloadsThe connect handshake, server info and resource downloads30120 TCP

    Leave txAdmin (TCP 40120) without a rule, so it is not reachable on the protected IP. Reach it over SSH or a VPN instead.

    Set up in a few minutes

    Download the installer from the dashboard and run it as root on the Linux server that hosts FiveM. It brings up the GRE tunnel; then add a rule for 30120 on both TCP and UDP and give players the Sterile IP. Add your SSH port to a profile first, or the install can cut your session.

    root@your-server

    Questions about protecting FiveM

    No. You keep your host and your server. Traffic reaches Sterile first and is delivered to your server over a GRE tunnel, so the only thing that changes for players is the address they connect to.

    If they join by domain name, point its A record at the Sterile IP and nothing changes for them. If they join by IP address or a saved favourite, give them the new one.

    FiveM uses the same port number for two things: UDP for the game itself, and TCP for the connect handshake, server info and resource downloads. Each has its own premade profile, and players need both.

    Yes. RedM runs on the same server software and the same 30120 ports, and the same premade profiles cover it.

    No, downloads are ordinary traffic on TCP 30120. If players joining all at once outgrow the premade profile's limits, you can raise them yourself.

    A little, because traffic takes one extra hop through our edge. How much depends on where your players, our edge and your server are. Read the latency guide

    You choose the reserved speed, clean traffic and protected IPs you need, and pay monthly for that. View pricing

    Keep your FiveM server online

    Protect the server you already run, and be filtered before the next attack arrives.