A HelloServ IP for you
We assign you an IPv4 from our network (or a block). That is the address your players, customers or DNS use. Your real IP stays hidden.
Get our anti-DDoS protection, wherever your server is
Your server is with another provider, in a colocation rack or at home? A tunnel is all it takes to put it behind our protection: 24 Tbps+ capacity, detection in under 5 seconds, unlimited mitigation. Your real IP is never exposed.
24 Tbps+
Filtering capacity
< 5 s
Attack detection
Unlimited
Attacks mitigated
GRE · WireGuard
Tunnel protocols
How it works
Your server stays where it is. We give you a protected IP address, and everything aimed at it goes through our filtering before reaching you.
A tunnel to your server
A GRE or WireGuard tunnel links our network to your machine, whatever the provider. Configuration provided, a few lines are enough on Linux or a router.
Traffic arrives filtered
Attacks are absorbed on our network in under 5 seconds, with no limit on size or number. Only legitimate traffic goes through the tunnel.
Protected IP tunnel
1 Gbps port on every tier, one price per guaranteed bandwidth tier, one IPv4 included, anti-DDoS protection included. No commitment, no setup fee.
Your configuration
Coming soon
Total excl. VAT / month
incl. VAT / month (20% VAT)
No commitment, no setup fee. Overage: €1.00 excl. VAT per Mbps above the guaranteed bandwidth (95th percentile), on the monthly invoice. Alert at 80%.
- 1 Gbps port on every tunnel: your guaranteed bandwidth is reserved, the rest of the port absorbs your peaks. Overage at the 95th percentile is billed €1.00 excl. VAT per Mbps, on the monthly invoice.
- Additional IPv4 at €1.70 excl. VAT per month, or by block: /29 (6 IPs) €10, /28 (14 IPs) €24, /27 (30 IPs) €51 excl. VAT per month.
- GRE or WireGuard tunnel of your choice, monitoring and alerts during attacks.
- Unlimited filtered traffic: an attack never counts towards your usage.
Prices excl. VAT. Orders open soon: leave us your details and we will let you know.
Developers, agencies and companies who trust us daily.
Reviews in French
M
Maxime
Trustpilot review
"Service irréprochable, rien à redire. L'équipe fait preuve d'efficacité, de réactivité et d'une véritable attention portée au client."
M
Michaël
Trustpilot review
"Hébergeur compétent, capable de s'adapter aux besoins spécifiques. Équipe rapide et efficace. Très satisfait, je recommande."
M
Marine L.
Trustpilot review
"Prestations de qualité à des tarifs raisonnables, avec des performances conformes aux promesses. Support compétent et rapide."
Do you own your IP addresses?
If you hold an IPv4 prefix (and an ASN), we announce it from our network and deliver it to you through the tunnel. Two levels, depending on what you expect during an attack. Enabled after manual verification of your documents (LOA, IRR object, ROA), /24 prefix minimum.
BGP session
Your prefixes announced
+19.99€
excl. VAT/month + guaranteed bandwidth
- Announcement of your IPv4 prefixes with your own ASN, or from AS215124 if you do not have one.
- Guaranteed bandwidth from 100 Mbps, at the same rates as the tunnel.
- During an attack, the targeted address is automatically blackholed for the duration of the attack: your network stays reachable, the attacked IP does not.
- Upgrade to full protection at any time, activated immediately.
BGP session + anti-DDoS protection
All inclusive
349€
excl. VAT/month, all inclusive
- Named protection of your prefixes, announced with your own ASN or from AS215124: unlimited mitigation, no address ever blackholed.
- 24 Tbps+ capacity, detection in under 5 seconds, volumetric and behavioural filtering up to the application layer.
- BGP session and 100 Mbps guaranteed bandwidth included, higher tiers at tunnel rates.
- Verifiable at any time: the protection status of your addresses can be checked publicly.
- Email and webhook alerts for every attack detected and mitigated.
A LOA (letter of authorisation) and an RPKI/ROA record authorising AS215124 are required before announcement. BGP sessions are set up on quote.
Who it is for
The IP tunnel protects what you cannot, or do not want to, move to us.
Game server hosted elsewhere
Your FiveM, Minecraft or Rust server runs with a provider without serious protection. Keep it, only change the IP your players use.
Server at home or in a rack
A homelab, a colocation rack, a fibre line: your public IP is never exposed, and your line no longer drops at the first attack.
Hosting provider or reseller
You sell servers on your own infrastructure: one tunnel per machine, or your own prefixes over BGP, and your customers get our protection.
Business with its own IPs
You hold a prefix and an ASN. We announce and protect it without you changing addresses or provider.
Frequently asked questions
How much latency does the tunnel add?
The round trip between our network (Auvergne-Rhône-Alpes, interconnected in Paris) and your server. For a server in France, expect 2 to 8 ms more in general. The filtering itself is inline and adds no measurable latency.
What do I need to install on my side?
A GRE or WireGuard tunnel, native on Linux (a few lines of network configuration, which we provide) and on most routers (MikroTik, pfSense, OPNsense, Cisco). No proprietary software.
What does guaranteed bandwidth mean?
It is the legitimate traffic bandwidth reserved for your tunnel, measured at the 95th percentile. The tunnel is delivered on a 1 Gbps port: you can exceed your tier, the excess is billed €1.00 excl. VAT per Mbps on the monthly invoice, and an alert warns you at 80%. If you prefer a fixed invoice, you can cap the tunnel at your guaranteed bandwidth. Attacks never count, they are absorbed before the tunnel.
What is the difference between the tunnel and the BGP session?
With the tunnel, you use an IP from our network, protected by default. With the BGP session, you keep your own addresses: we announce them for you. In that case full protection is an option, otherwise the attacked address is blackholed for the duration of the attack.
Can I protect a server that is not hosted at HelloServ?
Yes, that is exactly the point: OVH, Hetzner, Scaleway, a colocation rack, a fibre line at home. The only requirement is being able to set up a GRE or WireGuard tunnel from your machine or router.
Going further
The pages that answer the questions you are about to ask.
Attack filteringHow our 24 Tbps+ absorb an attack, and what is filtered before the tunnel.Dedicated serversWhen a VPS is no longer enough, a whole physical machine of your own.Where your servers actually runOur site in Auvergne-Rhône-Alpes, our AS215124 at RIPE and the hardware actually in production.
Want to be notified at launch?
Tell us where your server runs and what you want to protect. We will get back to you with the configuration and the opening date for orders.