DDoS Protection Policy
Last updated: July 18, 2026 — Operated by CIMAX Technologies LLC
Mitigation Capacity (Tbps)
Mitigation Provider
Network stability is vital for high-performance VPS and game hosting. The ZenytCloud autonomous system network (AS200282), optimized by transit carriers such as Tube-Hosting, is protected by Enterprise-grade edge scrubbing filters engineered to mitigate high-volume volumetric threats automatically.
1. Perimeter Scrubbing & Filtering
Carrier scrubbing: Traffic directed to our hardware is scrubbed at the carrier level using edge-routing mitigations (including Pletx telemetry).
Standard Protocols Filtered (Layer 3 & 4): Volumetric threats are detected and filtered automatically, including:
2. Client Responsibilities (Layer 7 & Firewall)
Unmanaged Scope: Standard edge filtering operates on network layers. Application-specific optimization, unused port closures, software security policies, VM firewalls (e.g., iptables, UFW), and Layer 7 mitigations (such as HTTP query floods or game protocol exploits) remain the sole responsibility of the Client.
Instance Tuning: The Client must ensure their application layers (e.g., database configs, web server daemons, mod load parameters) are tuned to withstand minor query surges that fall beneath our global perimeter scrubbing thresholds, preventing CPU or memory exhaustion.
3. Nullroute & Blackhole Procedures
If an incoming attack volume or payload complexity threatens the hardware cluster, BGP Brouter configurations, or neighboring clients, ZenytCloud will implement emergency network containment measures:
4. IP Addresses & Persistent Outages
IP Changes: If your assigned IP address becomes target to continuous outages or is compromised, you can request one free IP address reassignment. Subsequent reassignments are evaluated by systems staff and may trigger processing fees.
Agreement Termination: If a client server is subject to persistent, extreme DDoS vectors that consistently bypass scrubbing thresholds and degrade host nodes or transits, ZenytCloud reserves the right to suspend or terminate services permanently to protect other users.
5. Network Guarantee Disclaimer
While ZenytCloud deploys multi-Tbps edge routers to filter network anomalies, the Client acknowledges that 100% mitigation of all potential DDoS methods is technically impossible. Zero-day exploits, massive volumes that overflow global fiber transits, or customized Layer 7 storms might cause transient latency or downtime. Such events are excluded from standard SLA refund considerations.