---
title: "DDoS Protected Dedicated Servers — Free, Always On"
description: "Every dedicated server includes always-on DDoS protection: UDP and SYN floods, amplification and reflection filtered at the edge. No extra fee, from $55/mo."
url: "https://powerdedi.com/network/ddos-protection"
last_updated: "2026-10-15"
publisher: "PowerDedi (https://powerdedi.com)"
---

# DDoS-protected dedicated servers, always on.

Volumetric attacks are detected and filtered at our network edge before they reach your port. Every server, every location, no extra fee and no per-attack charges.

[Browse protected servers](https://powerdedi.com/dedicated-servers)

**What is covered**

- UDP, SYN, ACK and ICMP floods
- Reflection and amplification (DNS, NTP, SSDP, CLDAP, memcached)
- Fragmentation and malformed-packet attacks
- HTTP floods and other Layer 7 attacks: your application’s job

Included on all servers · $0 · always on

## Detect, divert, filter, return.

Mitigation runs at the edge of our network, upstream of your server, so attack traffic never competes with your real traffic on your port.

1. **Detect** Traffic volumes and packet rates are watched continuously; an anomaly triggers mitigation within seconds.
2. **Divert** Only traffic to the attacked IP address is routed through filtering. Your other IPs are untouched.
3. **Filter** Attack packets are dropped by signature and rate; legitimate packets pass through.
4. **Return** Clean traffic reaches your server. When the attack ends, normal routing resumes on its own.

## What we filter, and what we don’t.

Network-level protection handles the attacks that saturate links. Attacks that look like legitimate requests must be handled by your application.

*DDoS attack coverage*

| Attack type | Examples | Filtered by us |
| --- | --- | --- |
| **Volumetric floods** | UDP floods, ICMP floods, fragmented packets | Yes |
| **Reflection and amplification** | DNS, NTP, SSDP, CLDAP, memcached, SNMP, Chargen | Yes |
| **TCP state attacks** | SYN, ACK and RST floods | Yes |
| **Protocol-mimicking floods** | Packets shaped like valid game or VoIP traffic | Volumetric part only |
| **Application layer (L7)** | HTTP floods, slow requests, login and API abuse | No: use a reverse proxy, rate limits or a WAF |

## Layer 7: what we recommend.

Application attacks use valid requests, so only your application can tell them apart. These measures stop most of them.

- **Rate limiting** In your web server or reverse proxy, for example nginx `limit_req`.
- **A CDN or reverse proxy** In front of public websites, to absorb and filter HTTP floods.
- **fail2ban or sshguard** Against brute-force logins, with SSH keys instead of passwords.
- **Game-aware proxies** For game servers: they understand the protocol and drop bogus packets.
- **A tight firewall** Only expose the ports you use. [Hardening guide](https://powerdedi.com/docs/secure-your-server)
- **Monitoring** Alert on request rates and error spikes, not only on server load.

**When an attack is too big**

If an attack exceeds what can be filtered, or threatens the network and other customers, we may temporarily null-route the targeted IP address. We tell you when it happens, and routing is restored once the attack stops.

Null routes applied to stop attacks are excluded from SLA credits, as our [Service Level Agreement](https://powerdedi.com/legal/sla) explains.

## DDoS protection, explained.

### Is DDoS protection really included on every server?

Yes. Every server in every location is behind the same always-on network-level mitigation, at no extra cost and with no per-attack fee.

### Do I need to configure anything?

No. Detection and filtering happen at our network edge automatically. You only need your own application-level protections for Layer 7 attacks.

### Am I billed for attack traffic?

No. Traffic is never billed, attack or not: your port is unmetered.

### How quickly does mitigation start?

Usually within seconds of detection. Very short bursts can reach your server before filtering engages, which is true of every always-on system.

### Will you null-route my IP?

Only as a last resort, when an attack exceeds what can be filtered or threatens other customers. We tell you when it happens, and routing returns once the attack stops.

### Does it protect game servers?

It filters volumetric floods, which are the most common attacks on game servers. Attacks that imitate valid game packets need game-aware filtering on your side, such as proxy plugins or rate limits.

## Protected from the first minute.

Every server ships behind always-on mitigation, with a 10 Gbps unmetered port and IPMI.

[Browse servers](https://powerdedi.com/dedicated-servers) [Game servers](https://powerdedi.com/solutions/game-servers)

Live in ~15 min · Cancel anytime · BTC, ETH, XMR, USDT or SOL

---

PowerDedi — Dedicated servers with 10 Gbps unmetered, paid in crypto. Page: https://powerdedi.com/network/ddos-protection. Index of the site for AI assistants: https://powerdedi.com/llms.txt