TurtleGuardl3 / l4
Server DDoS protection
L3 and L4 protection is included in every VPS of ours. If your server runs at another host, we give it a protected address: clients connect to it and floods stay on our nodes.
What we stop
Volumetric attacks
UDP floods, DNS and NTP reflection, junk packet floods. This traffic is dropped before your server and does not fill its link.
Connection floods
SYN floods and thousands of half-open connections that eat the connection table and memory. The node keeps limits per address and subnet.
Password guessing
SSH and RDP attacks are checked on the node, and the address is banned after a series of failed logins. They never reach your sshd.
What you get
VPS protected out of the box
Servers in Germany, the Netherlands, Poland and Moscow. L3 and L4 protection works from the first minute and is already in the price.
Any TCP and UDP
Server at another host: we give a port on a protected address for SSH, RDP, databases, MQTT, voice and game servers. Connection and stream limits are set in the dashboard.
Your server address stays private
Clients see only a TurtleGuard address. The real IP can be closed to everyone but our subnets.
Charts and log
The dashboard shows how much traffic came in, how much was dropped and which addresses are banned. The monitoring agent shows the server's own load.
How to connect
Pick an option
A new VPS with us, or protection for a server that already runs at another host.
Set it up in a couple of minutes
For a VPS pick the configuration and OS. For your own server enter its address and the ports to protect.
Connect through our address
A VPS gets a protected IP right away. For an external server, clients move to the address and port we give you.
Pricing
VPS from $6 a month with L3 and L4 protection included. TCP/UDP protection for an external server is priced by protocol and the region that takes the traffic, and the total shows in the wizard before payment.
Server protection questions
Is protection included in the VPS price?
Yes. L3 and L4 filtering is included in every server. HTTP request checks and L7 rules are sold separately, in the website protection plans.
Can you protect a server at another host?
Yes. We give a protected address with a port, clients connect to it and we pass the traffic to your server.
Which protocols are supported?
Any TCP or UDP service: SSH, RDP, databases, MQTT, voice servers, games. For Minecraft Java the node understands the game protocol.
Won't my server ban your addresses for password guessing?
It may, if it runs fail2ban: every connection comes from TurtleGuard addresses. Add our subnets to its exceptions. We cut password guessing on the node ourselves.
Where are the servers?
VPS are available in Germany, the Netherlands, Poland and Moscow. TCP/UDP protection can take traffic in several regions, listed in the connection wizard.
Didn't find the answer? Write to us, support answers around the clock: @turtleguard_cloud