SA-MP · customer since 2019
3.000 peak concurrent players
Brasil Roleplay
One of the biggest references in Brazilian roleplay. A customer since 2019, in an industry where DDoS is constant.
DDoS protection · VPS, dedicated and games
DDoS protection that blocks everything and lets only legitimate traffic through.
Most protections look for attacks they already know. Ours does the opposite: it only lets through traffic it recognizes as your game's or your application's. It is always on, included with the service, and every attack shows up in your panel.
Reaching the filter 8.4 Gbps peak
14:00 attack at 14:30, 17 min 15:00
Reaching your server 412 Mbps, no spike
14:00 the attack never arrives 15:00
Always on Included with the service Filters per game and application Attacks in your panel
02 · Why DDoS matters
Every online server will be attacked. It's only a matter of when.
Servers exposed to the internet receive attack attempts all the time: automated probes hunting for vulnerabilities, or targeted attacks against an e-commerce on Black Friday, against a growing SaaS, against an API that moves money. But it's the gaming sector where the problem is most visible: for those running a serious server, DDoS isn't "if it happens", it's "when it happens".
Game servers are daily targets
Attacks come at critical moments: decisive rounds, playoffs, league finals, streamer broadcasts. Without protection that actually works, the result is downtime exactly when it matters.
Web applications suffer sophisticated L7 attacks
SaaS, e-commerce, APIs and public portals suffer application-layer attacks that go unnoticed by generic, volume-based protections.
Small and mid-sized businesses are growing targets
Today, any server with a public IP is a potential target, and attack tools are more accessible than ever. The myth that DDoS is only a big-company problem has fallen apart.
03 · The usual model
How most protections work.
Traditional DDoS protection works with a blocklist: it knows the patterns of attacks that have already happened and blocks traffic that looks like them. Anything that doesn't look like a known attack is treated as legitimate and gets through.
Where it fails
New attacks get through
Because the filter has to know an attack before blocking it, a new kind of attack reaches the server before anyone identifies it.
Needs constant updates
Every new technique means updating the catalog. Until the update arrives, the server is exposed.
Blocks real people
Because the filter works by resemblance, it sometimes treats real players and users as an attack. The server is protected, but nobody can get in.
Turns on only after the attack
Some protections start filtering once they detect an attack, which takes seconds to minutes. That is enough time to take the server down.
04 · The Hostini model
Ours works the other way around.
Instead of looking for known attacks, we block everything by default. The filters were built by reverse engineering each protocol we protect: we studied the real traffic of each game and application and mapped what a legitimate user's connection looks like. Whatever follows that pattern gets through. Everything else stays out.
Why it changes everything
New attacks don't get through
Since only legitimate traffic is let in, a kind of attack nobody has catalogued yet stays out too. There is no need to identify an attack to block it.
Almost zero false positives
A real player's or user's connection follows a stable, known pattern. Users get through, everything else stays out.
Always on
The protection doesn't wait for an attack to start: it filters all traffic all the time. There is no exposure window.
Zero added latency
Filtering doesn't increase response time and doesn't send your traffic through another route. Your users won't notice it.
Continuous updates
When a new attack vector appears or a protocol needs support, the filters are updated. The protection is monitored and improved all the time.
05 · Specialization
Filters built for your type of application.
Filter design varies depending on the type of traffic that needs to be protected. Each application has its own patterns, and generic protection doesn't work for all of them.
Games
Game servers
Filters built by reverse engineering the FiveM, MTA, SA-MP and Tibia protocols. Each protocol has its own packet pattern, and the filter separates a real player's traffic from attack traffic, from small servers to communities with thousands of players.
FiveM, MTA, SA-MP and Tibia
Web and API
Web applications and APIs
Protection against L7 attacks that take web applications down: slow loris, HTTP floods, attacks on API endpoints and form abuse. The filter knows how a legitimate session behaves and blocks whatever strays from it.
HTTP, WebSocket, GraphQL and REST
Game and site together
Game server and portal in one place
In cases like a Tibia OTServ, the attack can hit the game server (ports 7171 and 7172) and the web portal (voting, downloads and status) at the same time. The same protection covers both, with no separate Cloudflare plan for the site.
Game and site protected on the same server
06 · Evidence You don't have to take our word for it.
You don't have to take our word for it.
You see it.
Every protected IP has a page in the panel with its traffic, the filtered attacks and the protection settings, at any time. It's not a report that arrives by email once a week.
IP traffic Legitimate traffic and filtered attacks on the same chart, from 1 hour to 7 days.
Attack history Every attack with its type, bandwidth, packets per second, when it started and how long it lasted.
Filters and firewall Pick the filter for each port, allow trusted IPs and create firewall rules right in the panel.
Attack alert When an attack starts, you get an email and a notice in the panel.
07 · Cases
Operations that trust our protection.
Servers that can't go down. Protection that doesn't fail when it matters.
SA-MP · launch
6.000 at the beta launch
Reduto
Reached 6,000 concurrent players with Hostini. Infrastructure tested at real scale, at a moment of maximum exposure to attacks.
MTA · customer since 2024
1.000 peak concurrent players
Nova Capital
The largest MTA server in Brazil. Migrated to Hostini in 2024 looking for stability, including against DDoS attacks.
08 · How to get this protection
Protection comes included in all of our plans.
Unlike the market, where DDoS protection is sold as an expensive add-on, here it's included in every plan: VPS, dedicated and game servers. No extra cost, no separate activation, no fine print.
VPS
VPS servers
Dedicated resources in São Paulo and Virginia, with always-on DDoS protection.
From R$ 42.90/month See VPS plans
Dedicated
Dedicated servers
A physical machine that is only yours in São Paulo, with DDoS protection and 24-hour support.
From R$ 850.00/month See dedicated servers
Games
Game servers
Dedicated filters for FiveM, MTA, SA-MP and Tibia, from small servers to communities with thousands of players.
From R$ 26.99/month See game plans
09 · Frequently asked questions
DDoS protection questions.
Distributed denial-of-service attack. It's when thousands (or millions) of compromised machines send traffic to a server at the same time, aiming to take it down. Unlike other types of attacks, DDoS doesn't break in: it overloads.
It is the model in which everything is blocked by default and only traffic that follows a legitimate user's pattern gets through. It is the opposite of the blocklist used by traditional protection, where everything is treated as legitimate until it looks like a known attack. The allowlist is safer because a new attack stays out without having to be catalogued first.
No. It's included in all Hostini plans: VPS, dedicated and game servers. No additional charge, no separate activation.
No. Filtering happens without adding noticeable hops to the route. Your users or players won't feel any ping difference compared to running without the protection.
Attack traffic is dropped at the network edge, before it reaches your server. Every attack is recorded in the panel with its type, peak and duration, and you get an email alert when it starts.
For each game (FiveM, MTA, SA-MP and Tibia) we reverse engineered the protocol: we studied how the game communicates and mapped what a legitimate player's traffic looks like. The filters were built from that knowledge.
Right now the protection only comes with our server plans. If you need protection for a server at another provider, talk to the team and we will look at your case.
It's active from the first second. There's no 'learning' or activation period. The server is delivered with protection already filtering 100% of the traffic.
Protection you don't have to take on faith. You see it.
Included in every Hostini plan, at no extra cost. Up to 30 days to test.
A real person from the team replies, during business hours.