DDoS Protection Profiles (eBPF/XDP)

Ray Hosting utilises custom kernel-level eBPF (Extended Berkeley Packet Filter) and XDP (eXpress Data Path) tech to smash denial-of-service attempts. By filtering malicious packets directly at the network interface card (NIC) level, we shield your server container from IOPS saturation and CPU spikes, keeping your ping low and gameplay smooth.

1. The Dual-Defence Architecture

We handle incoming threats in two separate stages:

Edge Defence (Global Scrubbing): Massive volumetric attacks (like NTP/DNS amplification, SYN floods, and UDP floods) are obliterated at our global network borders before they can even get near the host node.
Kernel Defence (eBPF/XDP): Sneaky, application-specific or protocol-layer attacks (like game query exploit floods, bot connections, and custom handshake floods) are filtered in real-time right inside the host kernel using the mitigation profile you've chosen.

2. Mitigation Profiles Comparison

Profile	Traffic Multiplier	Aggressiveness	Recommended Use Case	Latency Impact
Balanced (Standard)	`1.0x`	Moderate	Standard setup. Absolutely perfect for 99% of servers.	None
Event Mode (Loose)	`1.5x`	Low / Relaxed	Big community events, tournaments, or custom plugins with lots of traffic.	None
Strict Filtering	`0.75x`	High	When you're dealing with active bot spam, slow-rate queries, or player spikes.	Tiny bit of packet loss for high-ping mates
Emergency Mode	`0.5x`	Maximum	Massive, coordinated application-layer floods.	Visible ping variance and potential disconnects

3. Selecting & Activating Profiles

How to Configure Profiles

Log in to your client panel and choose your server.
Head over to Settings -> DDoS Mitigation.
Pick your desired profile from the dropdown.
Click Apply Profile. The eBPF kernel rules update instantly (~50ms) across the node.

[!WARNING] Emergency Mode Usage Emergency Mode should only be enabled during active, severe attacks. Keeping it enabled permanently will mess with gameplay latency for remote players due to the highly restricted UDP/TCP rate limiters.

4. Troubleshooting Filter Conflicts

If your mates are getting high ping, packet loss, or getting kicked right after you've updated your profile:

Step 1: Check the Player Region: Players with a high ping (300ms+) might accidentally trigger the Strict profile's rate limits. Revert back to Balanced for a bit.
Step 2: Check Custom Game Port Mappings: If you're running custom plugins that bind secondary ports, make sure they are registered in the network tab so XDP doesn't flag them as unmapped traffic.
Step 3: Enable Event Mode for Tournament Launches: When thousands of players try to connect at the exact same second, switch the profile to Event Mode for the first 30 minutes to easily handle the connection spike.