Traffic enters our network
Your traffic enters our network at the nearest Point of Presence. ACLs and Flowspec rules perform the first, most basic, layer of filtering
Standard DDoS protection waits for an attack to be detected - then reroutes. That window costs you players. Zero.ms filters every packet continuously, at wire speed, before your servers see it. When an attack starts, nothing changes for your players.
Your traffic enters our network at the nearest Point of Presence. ACLs and Flowspec rules perform the first, most basic, layer of filtering
Packets get to our filtering devices, where they are analyzed at wire speed. Thanks to our deep understanding of application protocols, we easily filter out attacks
Legitimate traffic gets forwarded through our network and reaches your servers, rendering attacks harmless. You don't even have to worry about DDoS attacks.
You simply set up a BGP session (either via a direct connection, Layer 2 transport or a GRE tunnel) with the closest zero.ms Point of Presence and announce your network prefixes to us. We then analyze your traffic and apply the necessary filters to protect you.
Not in the same facility? No problem. We support GRE tunnels.
Apply filters for popular applications and get rid of complex attacks.
No sensors. No detection delay. Just clean traffic.
Botnet / Attack
Real Players
ZERO.MS Network
Your network
Always-on filtering inspects every packet continuously before it reaches your server. On-demand protection waits for an attack to be detected, then reroutes traffic. This detection window - typically 2–5 seconds - is when players disconnect from game servers. Always-on eliminates this window entirely.
Discuss your network scaling needs and DDoS protection strategy with our experienced engineers.