Why Minecraft servers are a target
A public Minecraft server is easy to find. It sits on a server list, its address is in every player's client, and anyone with a grudge can rent a flood for less than a rank costs. A few minutes of downtime during peak hours is enough to send players to another network.
The attacks themselves are rarely clever. They are UDP floods, amplification and TCP floods that fill the uplink or exhaust connections before your proxy or plugins ever see a packet. No plugin can fix that. The traffic has to be dropped upstream.
How the protection works
Players join through an address Templass announces on AS208743. All traffic for that address lands at the Templass edge in Equinix FR5, Frankfurt, where Layer 3 and Layer 4 floods are dropped or limited. What is left, your real players, is forwarded to your server.
The usual handoff for Minecraft is a GRE tunnel to your existing machine. Your host does not change, your world files stay where they are, and you can start without ordering anything in a data center.
Scrubbing is always on. There is no on-demand mode that waits for an attack to be detected, so players do not get kicked while protection spins up.
Setting it up for Java and Bedrock
- Request a quote with your peak clean Mbps and GRE as the connection type.
- Bring up the tunnel with the endpoint and inner addresses Templass provisions.
- Open your ports under Port requests. Java usually needs TCP, Bedrock needs UDP, and a network running both needs both.
- Move DNS and SRV records to the protected address once the tunnel passes a test, and update any server list entries.
If you run a proxy such as BungeeCord or Velocity, protect the proxy's public address. Backend servers should not be reachable from the internet at all.
Keep the origin hidden
Protection only works if attackers cannot reach the server some other way. The most common leaks are an old A record, a forgotten subdomain, a plugin or website that exposes the host IP, and backend servers answering on a public address. Check those before you announce the move.
During an attack, open Attacks in the Panel to confirm the event is being recorded. Do not spin up a new VPS and post its IP as a quick fix. That just gives the attacker a fresh target.
Pricing that fits a server budget
You pay for the clean traffic your players actually use, measured at the 95th percentile. Attack volume is not billed. See DDoS protection pricing for the tiers and the monthly floor, or the broader game server DDoS protection page if you host other games too.