Game Server Protection

    Unturned server DDoS protection

    Keep your Unturned server, your plugins and the host you already rent. Players connect to a Sterile IP, attacks are filtered on our network, and only clean traffic reaches your server over a GRE tunnel.

    View pricing

    What hits Unturned servers

    What gets thrown at a public Unturned server, and what happens to it behind Sterile.

    UDP floods on the game ports
    Floods big enough to fill your host's uplink are filtered on our network. Your server's real address stays hidden, so nobody can aim around us.
    Server-browser query floods
    Spoofed Steam queries can bury a server that answers the browser. The query port gets a rule with a profile built for it.
    Connection floods
    Waves of connection attempts that never become players are filtered before they reach the server, so real players can still join.
    Bot players
    Bots that join through Steam look like players to any network filter, so keep a plugin or whitelist for those. Sterile takes the floods away so it is not buried under them.

    Premade protection for every Unturned port

    Every port a Unturned server uses has a premade profile, tuned for that traffic. In the dashboard you pick the port and its profile from a list; there are no filter rules to write. Traffic to a port you have not added does not reach your server.

    • Game and Steam queryPort in Commands.dat and the port after it; add a rule for eachPlayers joining, playing and the server browser27015–27016 UDP

    Set up in a few minutes

    Download the installer from the dashboard and run it as root on the Linux server that hosts Unturned. It brings up the GRE tunnel; then add a rule for 27015 and 27016 and give players the Sterile IP. Add your SSH port to a profile first, or the install can cut your session.

    root@your-server

    Guides

    Questions about protecting Unturned

    No. You keep your host and your server. Traffic reaches Sterile first and is delivered to your server over a GRE tunnel, so the only thing that changes for players is the address they connect to.

    If they join by domain name, point its A record at the Sterile IP and nothing changes for them. If they join by IP address or a saved favourite, give them the new one.

    The Port set in Commands.dat, 27015 by default, and the one after it. Add a rule for both with the same premade profile.

    Yes. Plugins run on the server itself, and nothing about them changes. Only the address players connect to does.

    A little, because traffic takes one extra hop through our edge. How much depends on where your players, our edge and your server are. Read the latency guide

    You choose the reserved speed, clean traffic and protected IPs you need, and pay monthly for that. View pricing

    Keep your Unturned server online

    Protect the server you already run, and be filtered before the next attack arrives.

    Other games