DDoS Protection Profiles (eBPF/XDP)

Ray Hosting utilizes custom kernel-level eBPF (Extended Berkeley Packet Filter) and XDP (eXpress Data Path) technology to mitigate massive denial-of-service attempts. By filtering malicious packets directly at the network interface card (NIC) level, we shield your server container from IOPS saturation and CPU spikes.

1. The Dual-Defense Architecture

Mitigation is processed in two distinct stages:

Edge Defense (Global Scrubbing): Volumetric attacks (such as NTP/DNS amplification, SYN floods, and UDP floods) are filtered at our global network borders before they reach the host node.
Kernel Defense (eBPF/XDP): Application-specific or protocol-layer attacks (such as game query exploit floods, bot connections, and custom handshake floods) are filtered in real-time on the host kernel using the mitigation profile you select.

2. Mitigation Profiles Comparison

Profile	Traffic Multiplier	Aggressiveness	Recommended Use Case	Latency Impact
Balanced (Standard)	`1.0x`	Moderate	Standard operational mode. Best for 99% of servers.	None
Event Mode (Loose)	`1.5x`	Low / Relaxed	Large community events, tournaments, or custom plugins.	None
Strict Filtering	`0.75x`	High	Under active bot spam, slow-rate queries, or player spikes.	Micro packet loss for high-ping users
Emergency Mode	`0.5x`	Maximum	Massive coordinated application-layer floods.	Visible ping variance and potential disconnects

3. Selecting & Activating Profiles

How to Configure Profiles

Log in to your client panel and select your server.
Navigate to Settings -> DDoS Mitigation.
Select your desired profile from the dropdown selection.
Click Apply Profile. The eBPF kernel rules update instantly (~50ms) across the node.

[!WARNING] Emergency Mode Usage Emergency Mode should only be enabled during active, severe attacks. Keeping it enabled permanently will degrade gameplay latency for remote players due to the highly restricted UDP/TCP rate limiters.

4. Troubleshooting Filter Conflicts

If legitimate players are experiencing high ping, packet loss, or connection drops immediately after you update your profile:

Step 1: Check the Player Region: High-ping players (300ms+) may trigger the Strict profile's rate limit. Temporarily revert to Balanced.
Step 2: Check Custom Game Port Mappings: If you run custom plugins that bind secondary ports, ensure they are registered in the network tab so XDP does not classify them as unmapped traffic.
Step 3: Enable Event Mode for Tournament Launches: When thousands of players attempt to connect simultaneously at the exact same second, change the profile to Event Mode for the first 30 minutes to accommodate the connection spike.