DDoS Protection

Set limits to help protect the server from excessive network traffic.

Where to find it: Sign in as root, open Server > Firewall, then choose DDoS Protection.

Available to: Root only.

Before you start

Security settings can also block legitimate visitors. Start with a narrow rule or monitoring mode where available, then check that normal access still works.

Why use it — and when not to

Use DDoS Protection to reduce a specific, evidenced risk. Avoid broad blocks, global disables, or permanent exceptions when a monitor mode or narrower rule can solve the same problem.

How to use it

1. Review the current traffic and the protection limits available.
2. Choose limits that allow normal traffic for your services.
3. Apply the settings and watch for blocked legitimate connections.

Network protection controls

The Protections page groups ping protection, SYN-flood protection, drop/reject behavior, per-port burst limits, and connection caps. Protocol and port matter; a threshold suitable for one service can break another.

Tune from measured traffic, save/apply deliberately, and verify legitimate concurrent clients. For abusive website URLs, consider the separate HTTP Guard policy rather than treating every HTTP event as a network-level flood.