A HelloServ IP for you
We assign you an IPv4 from our network (or a block). That is the address your players, customers or DNS use. Your real IP stays hidden.
Get our anti-DDoS protection, wherever your server is
Your server is with another provider, in a colocation rack or at home? A tunnel is all it takes to put it behind our protection: 24 Tbps+ capacity, detection in under 5 seconds, unlimited mitigation. Your real IP is never exposed.
24 Tbps+
Filtering capacity
< 5 s
Attack detection
Unlimited
Attacks mitigated
GRE · VXLAN
Tunnel protocols
AS215124 network, mitigation operated with our partner Netrix
How it works
Your server stays where it is. We give you a protected IP address, and everything aimed at it goes through our filtering before reaching you.
A tunnel to your server
A GRE or VXLAN tunnel links our network to your machine, whatever the provider. Configuration provided, a few lines are enough on Linux or a router.
Traffic arrives filtered
Attacks are absorbed on our network in under 5 seconds, with no limit on size or number. Only legitimate traffic goes through the tunnel.
Protected IP tunnel
One price per guaranteed bandwidth tier, one IPv4 included, anti-DDoS protection on every tier. No commitment, no setup fee.
Your configuration
Coming soon
Total excl. VAT / month
incl. VAT / month (20% VAT)
No commitment, no setup fee. Overage: €1 excl. VAT per Mbps above the guaranteed bandwidth.
- Bandwidth guaranteed at your tier, overage billed on actual use: €1 excl. VAT per additional Mbps actually used.
- Additional IPv4 at €1.70 excl. VAT per month, or by block: /29 (6 IPs) €10, /28 (14 IPs) €24, /27 (30 IPs) €51 excl. VAT per month.
- IPv6 included, GRE or VXLAN tunnel of your choice, monitoring and alerts during attacks.
- Unlimited filtered traffic: an attack never counts towards your usage.
Prices excl. VAT. Orders open soon: leave us your details and we will let you know.
Do you own your IP addresses?
If you hold an IPv4 or IPv6 prefix (and an ASN), we announce it from our network and deliver it to you through the tunnel. Two levels, depending on what you expect during an attack.
BGP session
Your prefixes announced
+19.99€
excl. VAT/month + guaranteed bandwidth
- Announcement of your IPv4 and IPv6 prefixes from AS215124, with or without your own ASN in the path.
- Guaranteed bandwidth from 100 Mbps, at the same rates as the tunnel.
- During an attack, the targeted address is automatically blackholed for the duration of the attack: your network stays reachable, the attacked IP does not.
- Upgrade to full protection at any time, activated immediately.
BGP session + anti-DDoS protection
All inclusive
299€
excl. VAT/month, all inclusive
- Your ASN protected by name: unlimited mitigation on every prefix you announce, no address ever blackholed.
- 24 Tbps+ capacity, detection in under 5 seconds, volumetric and behavioural filtering up to the application layer.
- BGP session and 100 Mbps guaranteed bandwidth included, higher tiers at tunnel rates.
- Verifiable at any time: the protection status of your addresses can be checked publicly.
- Email and webhook alerts for every attack detected and mitigated.
A LOA (letter of authorisation) and an RPKI/ROA record authorising AS215124 are required before announcement. BGP sessions are set up on quote.
Who it is for
The IP tunnel protects what you cannot, or do not want to, move to us.
Game server hosted elsewhere
Your FiveM, Minecraft or Rust server runs with a provider without serious protection. Keep it, only change the IP your players use.
Server at home or in a rack
A homelab, a colocation rack, a fibre line: your public IP is never exposed, and your line no longer drops at the first attack.
Hosting provider or reseller
You sell servers on your own infrastructure: one tunnel per machine, or your own prefixes over BGP, and your customers get our protection.
Business with its own IPs
You hold a prefix and an ASN. We announce and protect it without you changing addresses or provider.
Frequently asked questions
How much latency does the tunnel add?
The round trip between our network (Lyon area, interconnected in Paris) and your server. For a server in France, expect 2 to 8 ms more in general. The filtering itself is inline and adds no measurable latency.
What do I need to install on my side?
A GRE or VXLAN tunnel, native on Linux (a few lines of network configuration, which we provide) and on most routers (MikroTik, pfSense, OPNsense, Cisco). No proprietary software.
What does guaranteed bandwidth mean?
It is the legitimate traffic bandwidth reserved for your tunnel. You can exceed it occasionally: the excess is billed on actual use, €1 excl. VAT per Mbps. Attacks never count, they are absorbed before the tunnel.
What is the difference between the tunnel and the BGP session?
With the tunnel, you use an IP from our network, protected by default. With the BGP session, you keep your own addresses: we announce them for you. In that case full protection is an option, otherwise the attacked address is blackholed for the duration of the attack.
Can I protect a server that is not hosted at HelloServ?
Yes, that is exactly the point: OVH, Hetzner, Scaleway, a colocation rack, a fibre line at home. The only requirement is being able to set up a GRE or VXLAN tunnel from your machine or router.
Going further
The pages that answer the questions you are about to ask.
Attack filteringHow our 24 Tbps+ absorb an attack, and what is filtered before the tunnel.Dedicated serversWhen a VPS is no longer enough, a whole physical machine of your own.Where your servers actually runOur site in the Lyon area, our AS215124 at RIPE and the hardware actually in production.
Want to be notified at launch?
Tell us where your server runs and what you want to protect. We will get back to you with the configuration and the opening date for orders.