Logo RoxyCloudAccount
Hosting

What is a DDoS attack?

DDoS is traffic from many IPs at once, aimed at taking a site or game server down. How it works, the common types, and what edge protection does.

Samuel AkiresCEO RoxyCloud
3 min read539 words
What is a DDoS attack?

A DDoS attack tries to stop the target from answering. The name is Distributed Denial of Service: many sources send requests, packets or connections at once. The site, panel or game server slows down or drops. Real players cannot join.

How the attack works

Think of the server as a shop counter. DoS is one person shouting in line. DDoS is a crowd blocking the door. The counter is still there. The line explodes. On the network that means a full link, a full connection table or an app that cannot answer.

Attackers often use botnets: hacked PCs, cameras and servers. Each one sends a slice. That is why blocking one IP rarely helps.

Types you will hear about

  • Volumetric: fills the pipe with junk (UDP flood, amplification). The link is full before the server thinks.
  • Protocol: exhausts connection state (SYN flood). The box holds half-open sessions and stops taking good ones.
  • Application: looks like normal traffic (HTTP flood, flood on the game port). It is thinner and can slip past a dumb filter.

Signs it may be DDoS

  • The server vanishes for everyone at once, not just one friend.
  • The panel or SSH will not open, or opens with a huge delay.
  • Traffic graphs spike with no launch, no update and no player rush.
  • The world comes back for a few minutes and dies again in waves.

One player's lag, a broken mod or a full disk is not DDoS. Mix those up and you waste time in the wrong place.

What edge protection does

Real Anti-DDoS looks at traffic before it hits your machine. Attack-like traffic is dropped or limited. Player or customer traffic goes through. At RoxyCloud this runs on the datacenter edge: announced detection under 5 seconds and response under 1 ms, with 60 Tbps+ capacity.

This does not replace a strong password, Fail2ban on SSH or backups. Each layer covers one problem. DDoS is a network problem. Brute force is a login problem. A full disk is operations.

Where this sits at RoxyCloud

Game plans, VPS and dedicated servers share the same operation in Presidente Prudente. Protection is in the plan, with no extra Anti-DDoS line.

High ping for you only, while everyone else is still in, is almost never DDoS. That is your ISP path.

Frequently asked questions

Straight answers before you order

Distributed Denial of Service. Many machines send traffic to the same target so real users cannot get through.

DoS comes from one source. DDoS comes from many sources at once. Blocking a single IP almost never stops DDoS.

No. Fail2ban watches login logs and bans IPs on the OS. A volumetric flood fills the link before it reaches the OS. That is handled on the network edge.

Yes. Games, VPS and dedicated servers go through edge mitigation in Presidente Prudente (AS219031), announced capacity 60 Tbps+, with no extra line item on the plan.

You may also like