Free DDoS Protection for Minecraft Servers: How It Actually Works

Why your Minecraft server needs DDoS protection

You set up a server. Spent hours configuring plugins, building a spawn, inviting friends. People show up every evening, the community grows. Everything is going great. Then someone decides your server needs to go down. Maybe a competitor, maybe a banned player, maybe some bored kid with access to a booter service.

A DDoS attack on a Minecraft server is straightforward: thousands of fake connections flood the port, overwhelming CPU or bandwidth. The server starts lagging, players get kicked, new ones cannot connect. If the attack is strong enough, your hosting provider might null-route your IP entirely. Sound familiar?

The problem is most hosting providers do not offer specialized protection against game protocol attacks. A generic datacenter DDoS filter can handle volumetric floods, but it will miss application-level attacks that look like normal player connections. That is exactly why you need protection that understands the Minecraft protocol.

Why we made a free plan

When we launched MineGuard, the market looked like this: minimum cost for Minecraft DDoS protection was $20-25 per month. For a large project with donations rolling in, that is pocket change. But for a small server with 20-50 players that generates zero revenue and exists purely for fun, that is a real expense. Especially when you add hosting costs on top.

We decided that basic protection should be available to everyone. Not a crippled 7-day demo. Not a "free trial" capped at 100 Mbps. A real filter that works continuously and costs nothing.

The logic is simple: if you start with our free plan, test the service, and see that it works, you will stick with us when your project grows and upgrade to a paid plan. We are not losing money on free users. We are investing in future paying customers.

What the free plan includes

The MineGuard free plan gives you:

• 1 network - one protected address for your server
• 3 domains - bind up to three subdomains for player connections
• 1 TB of traffic per month - enough for a server with 30-50 regular players
• Full DDoS filtering - the same engine that powers paid plans
• Control panel - stats, graphs, network management
• Proxy Protocol v2 - your server sees real player IPs

Note that filtering runs on the same engine as paid users. We do not put free customers on separate "weak" nodes. Your traffic goes through the same filters with the same analysis logic. The difference is only in limits, not in protection quality.

Who the free plan is for

Small servers for friends

A server for 5-30 people that you run for your group. Attacks on these servers are rare, but when they happen, it is especially frustrating. The free plan will cover you with room to spare.

New projects just getting started

You just launched, players are few, budget for protection is zero. The free plan lets you start with protection from day one instead of waiting for the first attack to think about security.

Testing before buying

Want to try MineGuard before paying? The free plan works without any time limit. Connect your server, play for a week or two, check out the analytics panel. If everything looks good, stay on free or upgrade.

Servers for content creation

Running a YouTube channel or streaming on Twitch? Hosting a server for recording content? The free plan covers basic protection needs without any extra cost.

How the filter handles attacks

Our filter operates on multiple levels. Let us break down the main attack types it protects against.

TCP SYN Flood

The most common attack type. Thousands of spoofed TCP connections clog the connection queue. The filter uses SYN cookies and handshake validation to drop fake connections before they reach your server.

Bot flood (Join flood)

Bots mass-join the server, pretending to be real players. CPU load spikes, real players cannot get in. Our filter analyzes connection patterns and blocks bots at the protocol level. Paid plans also offer CAPTCHA verification for suspicious connections.

Volumetric attacks (UDP Flood)

Gigabytes of junk traffic aimed at saturating bandwidth. Filtered at the XDP/eBPF level before packets even reach the network stack. Even on the free plan.

Application-level attacks

Attacks exploiting Minecraft protocol specifics: oversized packets, malformed handshakes, Slowloris-style attacks. The filter validates every packet against the protocol and drops anomalies.

How we compare to competitors

Let us be honest about what the market offers.

Most Minecraft DDoS protection services start with paid plans only. A typical "starter" price from international providers is $20-30 per month. For that money you get 1 protected IP and basic filtering. Free options are virtually nonexistent, and when they do exist, they are limited trials lasting a few days.

Our free plan works permanently. No time limit, no credit card required, no hidden conditions. Register, connect your server, done.

Our paid plans are also significantly cheaper than the market. The Basic plan at 390 RUB/month (roughly $4) gives you 5 domains and 3 TB of traffic. For comparison, a similar package from competitors would cost 5-7 times more.

When to upgrade to a paid plan

The free plan covers the needs of a small project. But there are moments when you should consider upgrading:

• Traffic exceeds 1 TB per month. If you have 100+ active players, you might run out. The Basic plan gives 3 TB for 390 RUB/month.
• You need more domains. Three domains work for a single server. But if you run a network with multiple servers and different addresses, you will need more.
• You want VPN blocking. Players using VPNs to evade bans? Starting from the Starter plan (860 RUB/month), VPN and proxy blocking is available.
• You need CAPTCHA verification. For servers that get hit by bot attacks regularly, CAPTCHA is available from the Optimal plan (2,790 RUB/month).
• Multiple servers. The free plan covers 1 network. If you have several projects, you need a plan with multiple network support.

Upgrading is instant. No need to reconnect or reconfigure anything. Just change the plan in your dashboard and the limits expand.

How to set up free protection: step by step

The whole process takes about 5 minutes.

Step 1: Register

Go to mineguard.net and create an account. You only need an email and password. No ID verification, no phone number, no credit card.

Step 2: Create a network

In your dashboard, click "Create network". Enter the IP address and port of your Minecraft server. The system will give you a protected address that players will use to connect.

Step 3: Set up a domain

Bind a domain or subdomain to your network. For example, play.myserver.com. Add an SRV record in your DNS, and players can connect using a clean address instead of an IP.

Step 4: Enable Proxy Protocol (optional)

If you want your server to see real player IPs, enable Proxy Protocol v2 in the network settings and on your server (Paper/Velocity). We have a detailed guide in our blog.

Step 5: Done

That is it. Your server is protected. In the control panel you will see traffic statistics, filtered packet counts, and network status in real time.

Frequently asked questions

Will the free plan ever become paid?

No. The free plan is part of our business model, not a temporary promotion. It will always exist.

Will protection add lag to my server?

No. Our filters add minimal latency, typically under 1-2 ms. Players will not notice any difference.

What happens if I exceed the traffic limit?

Protection will not shut off instantly. We will send a notification and suggest upgrading to a paid plan. If your traffic regularly exceeds the limit, it is worth considering an upgrade.

Can I protect a Bedrock server?

Yes. MineGuard supports both Java Edition and Bedrock Edition. Filtering works for both protocols.

Do I need to change my hosting provider?

No. MineGuard works as a reverse proxy. Your server stays on your current hosting. Only the connection address changes for players.

Bottom line

DDoS protection for a Minecraft server should not be a luxury. We created the free plan so every server admin can protect their project regardless of budget. 1 network, 3 domains, 1 TB of traffic, full filtering. No time limits, no hidden fees.

Start with the free plan. If your project grows, we will grow with it. We have plans from 390 to 8,600 RUB/month that cover projects of any scale. But the first step is always free.