OffshoreVps
L3/L4 protection Every plan 10 locations

A DDoS-protected VPS, and an honest look at what that covers

Every plan includes L3/L4 DDoS protection, which filters floods of junk traffic before it reaches your server. Attacks that look like real visitors, at layer 7, are different, so this page also shows what you add on the server itself.

MoneroBitcoinTether (USDT)LitecoinEthereumSolanaTRON
No KYC L3/L4 DDoS Full root Live in minutes 10 locations

Page by the OffshoreVps teamUpdated Prices read from the live catalogue

Sizes and prices

Two protected sizes to start with

One-month prices. A 12-month term takes 50% off.

Location
VPS

Starter

$5.76/mo

or $2.88/mo on a 12-month term (−50%)

  • CPU1 vCPU
  • RAM2 GB DDR4
  • Disk40 GB NVMe
  • NetworkUnlimited · 1 Gbps

A small site, a bot or a VPN.

Configure and order
Location
Most popular
VPS

Everyday

$8.50/mo

or $4.25/mo on a 12-month term (−50%)

  • CPU2 vCPU
  • RAM4 GB DDR4
  • Disk60 GB NVMe
  • NetworkUnlimited · 1 Gbps

A busier site or a few services.

Configure and order
Know the layers

What host protection covers, and what you add

Covered by network protection (L3/L4)

  • Floods of raw packets that fill the network pipe
  • SYN floods and connection-table attacks
  • Volumetric attacks aimed at your IP address

You add on the server (L7)

  • Request floods that look like real visitors
  • Slow-connection attacks that hold workers open
  • Expensive pages hit again and again
  • Login and search abuse
Add layer 7 defence

Rate limit requests in Nginx

A small rule that stops one address from using all your workers. Put the first two lines in the http block.

Limit requests per address
limit_req_zone $binary_remote_addr zone=perip:10m rate=10r/s;
limit_conn_zone $binary_remote_addr zone=connip:10m;

server {
    location / {
        limit_req zone=perip burst=20 nodelay;
        limit_conn connip 20;
    }
}
Go further

Cache, ban and plan ahead

  • Cache what you can. A cached page costs almost nothing to serve, even for 30 to 60 seconds.
  • Ban repeat offenders with fail2ban. See UFW, fail2ban and Nginx.
  • Keep your origin IP private if you put a proxy or CDN in front. See keeping your origin IP secret.
  • Know your slow pages and fix or cache them before an attack finds them.

The full walk-through is in Layer 7 DDoS protection for a VPS. No protection stops every attack, so plan for the day it does not.

FAQ

DDoS-protected VPS questions

01Is DDoS protection included with every VPS?

Yes. Every plan includes L3/L4 DDoS protection, which filters large network-layer attacks.

02Does it stop layer 7 attacks?

Network protection mainly handles floods of packets. Application-layer attacks that look like real visitors need rate limits, caching and bot rules on your server. See Layer 7 DDoS protection.

03What is the difference between L3/L4 and L7?

Layers 3 and 4 are the network and transport layers: raw packets and connections. Layer 7 is the application layer: HTTP requests to your website.

04How much does a DDoS-protected VPS cost?

From $5.76 a month. The 2 vCPU, 4 GB size is $8.50 a month in Romania. A 12-month term takes 50% off.

05Will DDoS protection hide my IP?

No. Your server’s IP stays public. To hide it you need a proxy or CDN in front, and an origin that only accepts traffic from it.

Get a protected VPS

No ID, no card. Pay in crypto and deploy in minutes.