01
EDGE IN
Traffic enters the PoP
Traffic reaches the zero.ms edge in NXDATA-1, Bucharest, through AS215362.
POWERED BY zero.ms · INCLUDED
The attack stops before it reaches your server.
Always-on DDoS filtering and access to the monitoring panel are now included at no extra cost with eligible RHQ VPS, Dedicated and Colocation services.
Protection is active at network level. Nothing to install on your server.
Always-on
Filtering
No detection window
<1 ms
Hardware overhead
Not total network latency
1 Tbps+
Bucharest PoP
Shared filtering capacity
AS215362
zero.ms network
NXDATA-1, Bucharest
PACKET-BY-PACKET
How clean traffic reaches your server
Every packet passes through the zero.ms infrastructure before it reaches your RHQ service. Malicious traffic is removed inside the network; legitimate traffic continues on the low-latency route.
02
L3 / L4
Network rules apply
ACL and FlowSpec rules remove known invalid or abusive traffic patterns early.
03
L7 PROFILES
The protocol is understood
Application-aware profiles distinguish legitimate sessions from protocol-specific attacks.
04
CLEAN OUT
Only clean traffic continues
Accepted packets are delivered to your VPS, dedicated server or colocated equipment.
malicious traffic legitimate traffic
zero.ms technical flow MONITORING PANEL · €0 EXTRA
See the attack. Do not guess.
The panel turns network telemetry into something you can read: live traffic, blocked volume and the reason traffic was filtered.
Live view of inspected, blocked and clean traffic
Attack volume and event history
The reason a packet stream was filtered
Visibility without installing an agent on the server
PLUG & PLAY PROTECTION
Protection works automatically, so your application never feels the attack.
The protection automatically detects the ports your service uses and applies the appropriate filtering profiles. Profiles can also be adjusted manually from the panel.
Automatic port detectionManually adjustable profiles
my.rhqhosting.com/ ddos-protection
PROTECTION ACTIVE
Actual RHQ anti-DDoS panel · sensitive data redacted
AS215362 · ZERO.MSNOT JUST VOLUME
Filtering that understands the protocol
zero.ms does more than count packets. Purpose-built profiles understand the traffic shape of games, voice services, VPNs and remote administration.
FiveM
Minecraft
Source / A2S
TeamSpeak 3
WireGuard
SSH
HTTP / TLS
DNS
FiveM
Minecraft
Source / A2S
TeamSpeak 3
WireGuard
SSH
HTTP / TLS
DNS
More profiles are available, with custom profiles scoped when required.
ALWAYS-ON BY DESIGN
The filter is already there when the attack begins
Reactive protection
- Waits for an anomaly
- Reroutes after detection
- Can introduce a detection window
RHQ + zero.ms
- Every packet is inspected
- The protected route is already active
- Filtering starts with the first packet
INCLUDED WITH YOUR SERVICE
Professional visibility. No separate panel fee.
Protection and monitoring panel access are included at no extra cost with eligible RHQ infrastructure services.
€0 extra
PANEL INCLUDED
Ryzen & Intel · NVMe
VPS
Protected virtual infrastructure for applications, communities and public services.
Explore VPSPANEL INCLUDED
Bare metal · Full control
Dedicated Servers
Full bare-metal performance with always-on filtering before traffic reaches your server.
Explore DedicatedPANEL INCLUDED
NXDATA-1 · Bucharest
Colocation
Bring your hardware to NXDATA-1 and gain protected connectivity plus panel visibility.
Explore ColocationAvailable for eligible services and IP resources provisioned by RHQ Network.
A DIFFERENT REQUIREMENT?
Need protection for an external network or your own prefix?
Standalone DDoS protection remains a separate service for external infrastructure, custom clean-traffic capacity and network-level deployments.
STRAIGHT ANSWERS
Questions about the included panel
Technical figures refer to the zero.ms Bucharest PoP: 1 Tbps+ published maximum throughput and under 1 ms filtering-hardware overhead. They are not per-service guarantees.
Ready to Deploy?
Join hundreds of communities and businesses running on RHQ Network infrastructure. Get started in minutes with instant deployment.