Itnetic TechnologiesLearn
Guides to DDoS protection, CDNs and Minecraft servers.
Plain-English explanations of the attacks that take websites and game servers down, and the infrastructure that keeps them up. No jargon, no sales pitch.
Under attack right now?
Do not read guides right now. Create an account, add your domain and change two DNS records — most sites are filtering attack traffic in about five minutes. Emergency steps →
Websites and APIs
DDoS protection and CDN
What is the best DDoS protection?
Every provider claims to be the best DDoS protection. The claim is unfalsifiable on its own — but the properties that decide whether a service keeps you online are short, concrete and easy to check before you buy.
What is a DDoS attack?
A distributed denial-of-service (DDoS) attack overwhelms a website or API with traffic from many machines at once, until real visitors can no longer get through.
What is a Layer 7 DDoS attack?
Layer 7 (application-layer) DDoS attacks imitate legitimate visitors instead of flooding the network — which is exactly why traditional defenses miss them.
What is a multi-vector DDoS attack?
A multi-vector DDoS attack uses two or more different attack techniques against the same target — usually across different network layers — and switches between them during the incident. The goal is not raw volume. It is to find the one layer where your defense is thin.
What is a DNS amplification attack?
A DNS amplification attack forges your IP address on small DNS queries so that thousands of innocent servers answer with far larger replies — all of them aimed at you.
What is a SYN flood attack?
A SYN flood does not try to fill your pipe. It opens thousands of TCP connections a second and never finishes them, until the queue that tracks half-open connections is full and the next real visitor is simply never let in.
What is a UDP flood attack?
A UDP flood is the bluntest attack on the internet: packets with no handshake, no connection and usually no honest source address, aimed at your IP faster than your uplink can carry them or your kernel can throw them away.
What is a botnet?
A botnet is a collection of internet-connected machines under someone else’s control — routers, cameras, cloud servers, phones running the wrong app — rented by the hour and pointed at a target. It is the delivery mechanism behind almost every DDoS attack you will ever see.
How to stop a DDoS attack on your website.
A practical, ordered checklist for the moment your site goes down — and for making sure the next attack never reaches it.
What is DDoS mitigation?
DDoS mitigation is the process of spotting attack traffic and dropping it before it reaches the resource an attacker is trying to exhaust — bandwidth, connections, or your application itself.
What is a DDoS scrubbing center?
A scrubbing center is a high-capacity filtering facility that your traffic is routed through during an attack: dirty traffic goes in, attack packets are dropped, and only clean traffic is forwarded to your servers.
WAF vs DDoS protection: what is the difference?
Both sit in front of your website, both block traffic, and vendors sell them side by side — which is exactly why teams buy one and assume they are covered for the other. They answer two different questions.
Ransom DDoS: what to do about an extortion email
A ransom DDoS (RDoS) attack starts with an email, not an outage: pay cryptocurrency before a deadline, or your site goes down. Most of these threats are bluffs — but the ones that are not give you hours, not days.
How to protect an API from DDoS attacks.
Browser challenges are useless against machine traffic — and fatal to it. Protecting an API means identifying clients and bounding what each one can cost you.
How to protect WordPress from DDoS attacks.
A WordPress page costs you a database round trip and a PHP worker. It costs the attacker one HTTP request. That asymmetry — not bandwidth — is what takes WordPress sites offline.
How to protect an online store from DDoS attacks.
Your catalog can be cached. Your checkout cannot. That is the whole problem: the pages that make you money are the pages an attacker can force your servers to compute, one expensive request at a time.
How much does a DDoS attack cost?
Lost sales are the line everyone reaches for first, and for most businesses it is not the biggest one. Here is how to work out your own number instead of borrowing someone else’s.
How to hide your origin IP address.
DDoS mitigation only works if your server cannot be reached any other way. An exposed origin IP is the most common reason protection is in place and the site still goes down.
How to test your DDoS protection.
Nobody discovers their mitigation was misconfigured at a convenient hour. Here is how to verify every claim your protection makes — without renting an attack, and without taking your own site down.
Low and slow DDoS attacks.
Most DDoS attacks try to overwhelm you with volume. Low and slow attacks do the opposite — a handful of connections, a trickle of bytes, and a server that stops answering while every graph you watch still looks perfectly normal.
What is rate limiting?
A rate limit is the cheapest control that puts a hard number on something you otherwise only hope about: how much of your capacity any single caller gets to consume.
What is a CDN?
A content delivery network (CDN) stores copies of your website on servers around the world, so every visitor is served from the location nearest to them.
How to build a DDoS response plan.
A DDoS response plan is the short document that turns a panicked hour into a rehearsed one: who notices the attack, who decides, who talks to customers, and what evidence gets kept.
The PHP2Shell vulnerability, and how to block it
PHP2Shell is the nickname for CVE-2026-109618 and CVE-2026-109619 — two critical, unauthenticated remote-code-execution flaws in PHP core, disclosed on 21 October 2026. The only complete fix is patching PHP. Until you can, the exploit can be blocked at the edge by its shape.
What is a TLS handshake flood attack?
A TLS handshake flood asks your server to perform expensive cryptography and then walks away before the work is worth anything. Bandwidth looks ordinary, the request count looks ordinary, and HTTPS stops answering while the CPU sits at 100%.
Minecraft
Game server protection and anticheat
Minecraft server DDoS protection
A Minecraft server is not a website. It holds long-lived connections, spends real CPU on every join attempt, and can be taken off the air by traffic that never looks like a flood on a bandwidth graph.
Minecraft bot attacks and join floods
A bot attack does not try to fill your network link. It makes your server do the most expensive thing it knows how to do — log a player in — thousands of times a second, until nothing is left for the people already playing.
What is a Minecraft anticheat?
Every login check is bounded: a real account, a solved code, a reconnect. A player who paid all of them can still fly. An anticheat is the layer that watches what happens after the door.
Fly, speed and timer hacks
Movement cheats are the easiest to detect and the easiest to detect badly. The rules they break are exact — and so are the ordinary situations that look identical to a check written carelessly.
Killaura and reach hacks
Combat cheats are the ones your community actually reports, and the hardest to judge — because the difference between a killaura and a genuinely good player is not how hard they hit, it is what their camera was doing.
X-ray, nuker and scaffold detection
X-ray is the cheat everyone asks about and the one an anticheat can say the least about, because it breaks no rule the server can observe. Nuker and scaffold are the opposite: they leave evidence a check can act on directly.
Minecraft CAPTCHA and player verification
A web CAPTCHA can rely on a browser, a rendering engine and a third-party service. A Minecraft challenge has none of those — and the client it is trying to test may not be rendering anything at all.
How to protect your Minecraft server IP
Every protective layer in front of a Minecraft server assumes attackers have to go through it. The moment your machine’s real address is known, that assumption is gone and the protection is decoration.
Ping floods and server queues
Two problems that look unrelated and share a solution: a server should not have to answer every ping itself, and a full server should not have to turn people away.
Comparisons
How we compare
The Cloudflare alternative where every plan gets every feature
Itnetic is a Cloudflare alternative for Layer-7 DDoS protection, WAF and CDN — run from the EU, with no feature held back for a higher tier. The free plan and the €1,000 plan ship the same protection. Only the bandwidth differs.
The WEDOS Protection alternative that puts Layer 7 on the free plan
Itnetic is a WEDOS Protection alternative for Layer-7 DDoS mitigation, WAF and CDN, operated from the Czech Republic. Both are EU providers — the difference is where the tier line falls. On Itnetic, application-layer mitigation, the full WAF, per-request logs, the API and the waiting room are on every plan, including the free one.
The EU-operated DDoS-Guard alternative, with a free plan
Itnetic is a DDoS-Guard alternative for Layer-7 DDoS protection, WAF and CDN — operated from the Czech Republic, inside the EU, with published GDPR documentation and a free plan that includes every feature. Setup is two DNS records and no nameserver change.
The CDN77 alternative that brings the WAF and Layer-7 defense with the CDN
Itnetic is a CDN77 alternative for teams who need application-layer DDoS protection and a WAF in the same edge as their caching — not a delivery network with volumetric filtering bolted on. Every feature is on every plan, including the free one, and signup is self-serve.