How the protection works
Every IP prefix BookMyHost announces is routed through Cloudflare Magic Transit. Traffic to your server first reaches Cloudflare's edge, where volumetric floods are detected and dropped; only clean traffic continues to the Noida datacentre. The protection is on for every server on every plan from the moment it boots. There is no add-on to buy, no attack mode to switch on, and no per-IP fee. The DDoS protection page describes the network in detail.
Because the flood never reaches our routers, there is nothing to null-route. Many providers protect their own uplinks by blackholing the attacked IP for hours, which takes the game server offline exactly as the attacker wanted.
What it means for game traffic
- UDP game ports work as normal: filtering targets attack signatures and volumes, not your ports, so Minecraft, FiveM, CS2, Rust, ARK, voice servers and custom protocols run without port restrictions.
- Attack bytes do not reach your port and there is no metered bandwidth line on the rate card, so a booter changes nothing on your invoice.
- Players across India connect over domestic paths: typical round trips from Noida are ~25 ms to Mumbai, ~30 ms to Hyderabad and ~35 ms to Bengaluru.
- Linux or Windows: gaming plans include the Windows Server 2022 licence for titles that need it; most game-server software runs on Ubuntu.
- Root access: install Pterodactyl, AMP or LinuxGSM, or run the server binary yourself.
What network-layer protection does not cover
Magic Transit stops network- and transport-layer floods: UDP and SYN floods, amplification attacks and protocol abuse. It does not inspect application logic, so a few things stay your job:
- HTTP floods against a website or a server-list page need a reverse proxy or WAF in front; Cloudflare's proxy on your domain is the usual answer.
- In-game abuse such as bot joins or login spam is handled by the game server's own plugins and rate limits.
- Your firewall is still yours: close every port the game does not use.
Questions to ask any DDoS protected VPS provider
- Is attack traffic scrubbed, or is the IP null-routed until the attack stops?
- Is protection included on every plan, or an add-on per IP or per tier?
- Do attack bytes count toward a bandwidth allowance?
- Are UDP ports filtered or restricted by default?
- Where is the scrubbing done, and where is the server?
Setting up a protected game server
- Create an account and complete eKYC
Verify once with Aadhaar/DigiLocker or an ID document, as CERT-In requires.
- Pick a plan and an image
Choose a gaming plan or any size on the builder, Linux or Windows, hourly or a term.
- Install the game server
Deploy it with a panel such as Pterodactyl or by hand, and open only the ports it needs.
- Take the snapshot
Use the included snapshot before wipes, mod changes and plugin updates.
- Put the website behind a proxy
If the community has a website or a store, front it with a reverse proxy for application-layer cover.