Absorb the storm.Stay online.
Maelstrom Network keeps game servers, apps and infrastructure reachable through even the largest attacks — with always-on, multi-terabit protection at the edge.
No contracts · cancel any time · protected in minutes
Powered by Cloudflare Spectrum
What you get
Protection built to stay ahead of the flood
Every plan runs on the same mitigation edge. Larger plans add capacity, ports and hands-on support.
Multi-terabit capacity
A global anycast edge absorbs volumetric floods across many points of presence, so attack traffic is scrubbed far from your origin.
Layer 3/4 & Layer 7
TCP, UDP and application-layer filtering stop SYN floods, UDP amplification and HTTP request floods alike, automatically.
Always-on, sub-second
Protection is inline the moment you point your traffic — no waiting for an attack to be detected before mitigation kicks in.
Anycast routing
Your service is announced from every edge at once. Latency drops for legitimate users while attackers are dispersed.
Custom firewall rules
Shape exactly what reaches your backend with per-service rules, rate limits and geo controls from your dashboard.
Transparent dashboard
Live traffic, mitigation events and your active services in one place — with alerts when something hits the edge.
Games we protect
Built for the servers that get attacked
Popular in the Philippines and across South East Asia, or a small community anywhere — if your game speaks TCP or UDP, it sits behind the same anycast edge. These are the ones we see most.
MMO & private servers
Rival owners hit each other on launch day. This is the scene we see most.
Sandbox & survival
Persistent worlds that cannot afford to drop.
Roleplay & GTA multiplayer
Big communities, bigger targets.
FPS & community servers
Competitive rooms that go down mid-match without protection.
Voice & infrastructure
The servers your players talk on.
Running something not listed? If it speaks TCP or UDP, we protect it — ask us on Telegram.
Inside the panel
A control plane, not a black box
Every connection, byte and edge location your service touched — read straight from the mitigation edge, per service.
Illustrative — your panel shows your own live figures.
Per-service analytics
Connections, open sessions, traffic and origin errors over 30 minutes to 30 days — with CSV export.
Change your backend
Move your service to a new IP and port yourself. Players keep the same address — only the forwarding changes.
Smart routing, your call
Turn Argo Smart Routing on or off whenever you like, and see the effect in the same panel.
The network
Anycast everywhere your players are
Powered by Cloudflare Spectrum
Your traffic rides Cloudflare's anycast edge — 330+ cities across 125+ countries, 256+ Tbps of capacity. The map below is not that whole network: it is the 52 locations that actually carried traffic for services here in the last seven days, read from the edge and refreshed daily.
52 live · of 330+ worldwide
+ 43 more locations carrying traffic
How it works
Protected in three steps
Choose a plan
Pick the capacity, ports and backends that fit what you're protecting. Upgrade any time as you grow.
Give us your backend
Tell us the IP, port and transport at checkout. We create the edge application and hand you a public address.
Point your players
Publish the address we give you. Attacks are scrubbed at the edge automatically — watch clean traffic in your panel.
Pricing
Plans that scale with the threat
Straightforward monthly pricing. Cancel any time.
Starter
A protected endpoint for one small server. Everything the bigger plan has, with a smaller allowance.
- 1 TCP/UDP application
- 1 backend origin
- 500 GB / month traffic
- 256+ Tbps Cloudflare network
- 330+ anycast PoPs worldwide
- L4 DDoS mitigation (Spectrum)
- 100% uptime SLA
Game Proxy
For solo private servers, indie game backends, and anything that has to stay reachable — anycast everywhere, not one region.
- 1 TCP/UDP application
- 1 backend origin
- 5 TB / month traffic
- 256+ Tbps Cloudflare network
- 330+ anycast PoPs worldwide
- L4 DDoS mitigation (Spectrum)
- 100% uptime SLA
- Extra ports $5 / month each
Standard
When 5 TB a month stops being enough — same instant setup, triple the allowance.
- 1 TCP/UDP application
- 1 backend origin
- 15 TB / month traffic
- 256+ Tbps Cloudflare network
- 330+ anycast PoPs worldwide
- L4 DDoS mitigation (Spectrum)
- 100% uptime SLA
- Extra ports $5 / month each
Advanced
For busy communities and growing networks: 40 TB a month on the same anycast edge.
- 1 TCP/UDP application
- 1 backend origin
- 40 TB / month traffic
- 256+ Tbps Cloudflare network
- 330+ anycast PoPs worldwide
- L4 DDoS mitigation (Spectrum)
- 100% uptime SLA
- Extra ports $5 / month each
Enterprise
Full-scale, always-on protection — 100 TB a month, the biggest allowance on the card form.
- 1 TCP/UDP application
- 1 backend origin
- 100 TB / month traffic
- 256+ Tbps Cloudflare network
- 330+ anycast PoPs worldwide
- L4 DDoS mitigation (Spectrum)
- 100% uptime SLA
- Extra ports $5 / month each
Dedicated IP
Your own dedicated Anycast IP for unlimited apps and backends — unmetered, white-glove setup.
- Your own dedicated Anycast IP
- Unlimited TCP/UDP applications
- Unlimited backend origins
- Unmetered protected traffic
- 256+ Tbps Cloudflare network
- 330+ anycast PoPs worldwide
- L4 DDoS mitigation (Spectrum)
- 100% uptime SLA
- White-glove setup via Telegram
Need more than Enterprise? Message us on Telegram about custom capacity.
Servers
Rent the box, keep the protection
VPS and dedicated servers in Singapore and Tokyo, on uplinks that carry the same L3/4 mitigation as everything else here. Provisioned by our team after payment.
KVM VPS Out of stock
NVMe storage, 1 Gbps outbound, 10 Gbps inbound. From a small game server to a busy backend.
- Singapore from $18.00/mo
- Japan (Tokyo) from $18.00/mo
- L3/4 DDoS protection on the uplink, included
Dedicated
Single-tenant Xeon hardware with full root and IPMI, unmetered 1 Gbps.
- Singapore from $400.00/mo
- Japan (Tokyo) from $400.00/mo
- L3/4 DDoS protection on the uplink, included
FAQ
Questions, answered
What kind of attacks does this stop?
Volumetric Layer 3/4 floods (UDP amplification, SYN floods, reflection) and Layer 7 application floods such as HTTP request floods. Mitigation is always-on, so it applies before an attack is even detected.
What games and servers can I protect?
Any TCP or UDP game server or application — Minecraft, FiveM, Rust, Ragnarok Online, RAN Online, MU Online, CS2, SA-MP, ARK, Valheim and more. You point the service at our anycast edge and we filter the traffic before it reaches your origin.
Will my players' real IPs still reach my server?
Yes, if you enable PROXY protocol at checkout and configure your server to read it. Without it your server sees the edge address instead. v1 and v2 work with TCP; v2 and Simple work with UDP.
How fast does mitigation start?
It's inline from the moment your traffic is routed through us — typically sub-second, because there's no detect-then-enable delay.
Can I move my server later?
Yes. Change the backend IP and port yourself from the panel at any time; your players keep the same public address. There's a five-minute cooldown between changes.
Can I upgrade or cancel later?
Yes. Move between plans at any time as your needs change, and cancel whenever you like from your dashboard.
Do you offer custom capacity?
Yes. Message us on Telegram and we'll size it with you.
Ready before the next attack is
Get protected in minutes. No hardware, no long contracts.
Choose a plan