Serververse Labs · Shield

Shield.
Cloudflare Magic Transit · 3-layer DDoS

Defense in depth for DDoS protected VPS, game servers and cloud. Traffic passes OVH VAC, then Cloudflare Magic Transit, then Serververse in-house filtering — three boundaries before your origin.

How it works Inquire now

Cloudflare Magic Transit is the globally distributed core of Serververse Shield. OVH and Serververse filtering complete the 3-layer path in front of your server.

17 TbpsOVH VAC + Edge Firewall, the first layer

3 layersOVH · Cloudflare · Serververse filtering

550 TbpsCloudflare's network, the second layer

L3 / L4Network-level protection for VPS & games

Why three layers

Each layer catches what the one before it can miss. The flowchart below shows the order.

Dropped as early as possible

Floods are discarded at OVH's edge before they use up capacity further along the path, so the layers behind it only see what is left.

Filtered across Cloudflare's network

Magic Transit routes your protected prefixes over BGP through Cloudflare's global network, so attacks are absorbed close to where they start, not on one link.

Nothing is trusted by default

Passing an upstream scrubber doesn't make traffic safe. Serververse filters every request once more, with rules set for your game, VPS, site or API.

How Shield works

Progressive filtering: attack traffic must clear every layer before it reaches origin. Full architecture lives in the Shield docs.

Start
Internet traffic
Players, visitors and attack traffic arrive together.
Layer 1
OVH VAC + Edge Firewall
Early DDoS mitigation and firewall rules at OVH's network edge, up to 17 Tbps.
Floods dropped at the network edge
Layer 2
Cloudflare Magic Transit
DDoS mitigation, TCP protection and network firewall across Cloudflare's 550 Tbps network.
DDoS, bad TCP and blocked traffic dropped
Layer 3
Serververse filtering
ACLs, port and protocol rules, rate limits and custom policies for your workload.
Anything outside your rules dropped
Finish
Your server
Filtered traffic reaches your VPS, game server or app.

Every request passes all three Shield layers in this order, and each layer drops what it recognises as attack traffic.

Read the Shield docs

Protection by region

Same Shield principle everywhere — progressive filtering with Cloudflare Magic Transit where the path supports it.

India

Full 3-layer Shield with Cloudflare Magic Transit on Noida & Mumbai paths.

Cloudflare Magic Transit (highlighted path)
OVH VAC + Edge Firewall
Serververse in-house filtering
Built for DDoS protected VPS & game backends

Inquire

Starting at Custom quote

Singapore

OVH-forward mitigation on the Singapore path, with Shield hygiene end-to-end.

OVH VAC as the primary scrubber
L3 / L4 volumetric filtering
Serververse path policies
Spectrum on request for SMPs

Inquire

Starting at Custom quote

Germany

3-layer stack for EU game and platform traffic.

OVH + Cloudflare Magic Transit path
Serververse in-house filtering
L3 / L4 network-level protection
Spectrum when an SMP needs it

Inquire

Starting at Custom quote

Everywhere else

Defense-in-depth methods matched to that route.

Closest OVH / Cloudflare scrubbing edge
Serververse final filtering
Same inquire path as core regions

Inquire

Starting at Custom quote

Built for DDoS protected VPS, games and platforms

Serververse Shield is OVH + Cloudflare Magic Transit + Serververse filtering — three layers, one origin. Network-level L3/L4 protection for VPS, Minecraft, APIs and dedicated iron. Walkthrough: docs.serververs.com/shield.

Enterprise

Shield

DDoS protected VPS & cloud
Game servers & SMPs
Web apps & APIs
Dedicated / colo prefixes

Read Shield docs

Serververse Shield with Cloudflare Magic Transit

Need Shield for yourself?

Inquire for DDoS protected VPS, game networks or custom prefixes on Cloudflare Magic Transit. Tell us the region, workload and whether you need Spectrum for an SMP — we match the 3-layer stack and turn it on.

Inquire now