US East introductory rate: KVM VPS and CDN origin VPS in our Ashburn region are 50% off, applied automatically at checkout. Explore US East →Monthly and longer billing periods. New orders until 31 October 2026.

DDOS PROTECTION

DDoS protection on every server. 100 Gbps included.

Every KVM VPS and dedicated server sits behind 100 Gbps of always-on Layer 3/4 DDoS protection at no extra cost. If you draw larger attacks, add 500 Gbps to 10 Tbps per server at checkout. The 10 Tbps tier adds Layer 7 filtering.

Included
100 Gbps
Largest tier
10 Tbps
Over-cap attacks covered
5 / month
Every tier
Always-on

Every voxa.host VPS and dedicated server includes 100 Gbps of always-on DDoS protection at Layer 3 and Layer 4. Attacks above 100 Gbps are still mitigated free up to five times a month; after that, the targeted IP is null-routed until the attack ends. For larger or more frequent attacks, each server can be upgraded to 500 Gbps, 1 Tbps, 2 Tbps, 5 Tbps, or 10 Tbps with Layer 7 filtering, from €156.45 a month, chosen at checkout.

Tiers and prices

One included tier. Five you can add.

Prices per server per month, in EUR, excl. VAT. A tier covers every IP address on the server.

voxa.host DDoS protection tiers and monthly prices
CapacityLayersPer month
100 GbpsL3 / L4Included
500 GbpsL3 / L4€156.45
1 TbpsL3 / L4€523.95
2 TbpsL3 / L4€1,048.95
5 TbpsL3 / L4€2,623.95
10 TbpsL3 / L4 / L7€4,723.95
Above 100 Gbps

What happens when an attack is bigger.

The included tier has a monthly allowance for attacks that exceed it, so one large flood does not take a server offline.

  1. 01

    Up to 100 Gbps

    Filtered upstream, always on, on every server. Nothing to enable, nothing to pay, no ticket to open.

  2. 02

    Over 100 Gbps, attacks 1 to 5

    The first five attacks a month that exceed your tier are still mitigated, at no charge.

  3. 03

    Over 100 Gbps, attack 6 onwards

    The targeted IP is null-routed until the attack ends or you upgrade the server to a larger tier.

Layers

What each layer stops.

L3 / L4

Network and transport floods

UDP and amplification floods, SYN floods and other protocol attacks that try to fill the port or exhaust connection state. Every tier, including the included 100 Gbps, filters these.

L7

Application floods

HTTP request floods that look like real visitors and target your web server rather than the link. Only the 10 Tbps tier filters Layer 7. On every other tier, rate limits and caching in your own stack are what handle them.

DDOS FAQ

DDoS protection questions

Order

Protected from the first packet. Scale it when you need to.

Pick a server and it ships with 100 Gbps of protection. Choose a larger tier as an add-on at checkout, or upgrade later from the client area.

At a glance
Included
100 Gbps · L3/L4
Mode
Always-on
Over-cap allowance
5 attacks / month
Largest tier
10 Tbps · L3/L4/L7
Billing
Per server, monthly
How to add
Checkout add-on