We analyze traffic to your server and website in real time and filter attack traffic at Layers 3, 4 and 7. With Turkey-located DDoS protection plans, your site and game server stay online even under attack.
All our Türkiye-located DDoS protection plans run on dual-redundant carrier infrastructure with a StormWall filtering uplink for 24/7 uninterrupted protection.
Prices exclude VAT. For customers in Türkiye, 20% VAT is added automatically at checkout. No setup fee.
A DDoS (Distributed Denial of Service) attack is a type of cyberattack that targets a server, website or online service with heavy, fake traffic sent from thousands of compromised devices around the world, aiming to make the system unresponsive. During the attack your real users cannot reach the site, your server becomes overloaded and your service is disrupted.
DDoS protection analyzes all traffic to your service in real time, separating malicious packets from legitimate visitor traffic; it filters attack traffic before it reaches your server and only lets clean traffic through. This way your website, game server or application keeps running without interruption even while under attack.
Protection plans come with features that speed up your site and simplify management, alongside attack filtering.
All traffic to your service is first routed to the high-capacity protection (scrubbing) layer.
Incoming packets are analyzed in real time; attack and fake traffic is detected and filtered out.
Only legitimate visitor traffic is forwarded to your server; your service stays up even if the attack continues.
Layer 3 and Layer 4 attacks target the network and transport layers: methods such as SYN, UDP and ICMP floods fill up bandwidth or the connection table. These attacks are filtered at packet level.
Layer 7 attacks target the application itself. Methods such as HTTP flood and Slowloris look like real visitor requests, so they cannot be told apart by traffic volume alone; request behavior is inspected and bots are filtered. Websites need both layers protected together.
DDoS Threats
Stop the service by saturating network bandwidth (UDP/ICMP flood, amplification). They occur at Gbps–Tbps scale.
Exhaust server and firewall resources (SYN flood, Ping of Death). They have an impact at the packets-per-second scale.
Wear down the web server with requests that look legitimate (HTTP flood, Slowloris). This is the hardest attack type to detect.
Abuse open services such as DNS and NTP to multiply attack traffic many times over and direct it at the target.
Every service where online continuity is critical benefits from DDoS protection.
Downtime means direct revenue loss; attacks increase during campaign periods.
Servers like FiveM, Minecraft and Rust are frequently targeted; low latency is essential.
Uninterrupted access is required for brand reputation and operational continuity.
Media, news and streaming platforms face heavy traffic and attack risk.
For services where trust and availability are critical, protection is indispensable.
VDS, dedicated server and hosting services stay safe with a dedicated protection IP.
DDoS protection works together with the server and network services on Bogahost infrastructure.
Frequently asked questions about DDoS protection, the firewall service, Layer 7 filtering, setup time and choosing a plan.
A firewall service is a security layer that blocks malicious traffic targeting your server or hosting account. Bogahost's firewall service operates both at the network level (DDoS protection) and the application level (WAF, Imunify360). It automatically detects and blocks SQL injection, XSS, brute force, port scanning and botnet traffic. This protects your server uptime and reduces the risk of data leaks.
DDoS protection detects abnormally high request volumes hitting the server and filters out malicious requests while letting real user traffic through. At Bogahost, volumetric attacks (UDP/SYN flood) are mitigated at the data center edge, and application-layer attacks (HTTP/HTTPS) are mitigated by the WAF. Legitimate visitors keep accessing the site during an attack. The protection runs automatically 24/7 and requires no configuration.
Imunify360 is a comprehensive, machine-learning-driven security suite designed for Linux servers. It provides a WAF, antivirus (malware scanning), brute force protection, proactive defense and patch management from a single panel. Imunify360 is enabled by default on Bogahost shared hosting and reseller packages. Known vulnerabilities in popular apps such as WordPress, Joomla and OpenCart are blocked automatically.
A WAF (Web Application Firewall) is a security layer that analyzes HTTP/HTTPS requests to your website and blocks malicious ones. It protects against SQL injection, cross-site scripting (XSS), file inclusion and the broader OWASP Top 10. On CMS-based sites (especially WordPress), it prevents exploitation of plugin vulnerabilities. At Bogahost the WAF runs integrated with Imunify360 and rule sets are updated daily.
At Bogahost, basic DDoS protection and the Imunify360 WAF are free on all shared hosting and reseller packages. Advanced managed firewall service for dedicated server and VDS customers is available at a monthly add-on fee. For high-threshold needs (above 10 Gbps), enterprise protection packages are quoted on request. A detailed price table is available on the service page.
Signs of a DDoS attack include sudden slowness, 502/504 errors, unexplained CPU/RAM spikes on the server and abnormal traffic spikes. Resource usage graphs in the client panel show such traffic anomalies. If unsure, open a ticket and our team confirms via log analysis whether an attack is underway. Active attacks are filtered automatically by the Bogahost firewall infrastructure.
The Bogahost firewall service is available on shared hosting, reseller, VDS, dedicated server and even dedicated hardware firewall device tiers. Shared plans already include Imunify360 plus network-level DDoS protection. VDS and dedicated customers can add CSF (ConfigServer Firewall) or a managed enterprise protection option. Cloud servers receive the same protection layer.
On shared hosting accounts, firewall protections activate automatically with the order and there is no setup time. For VDS or dedicated server managed firewall services, our team typically completes Imunify360, CSF or enterprise WAF installation within 1-4 hours. Hardware-based dedicated firewall device requests may take 24-72 hours depending on supply. Your server remains online throughout the setup.
The two solutions operate at different layers and are best used together. Cloudflare filters traffic at the CDN/edge layer, while Imunify360 handles malware scanning, brute force protection and patch management on the server side. Cloudflare alone is not enough because it cannot block attacks that hit the server IP directly. Since Imunify360 is included on Bogahost infrastructure, you can add Cloudflare as an extra layer for free.
Modern firewall solutions (Imunify360 and the LiteSpeed-integrated WAF) keep the impact on page speed to milliseconds. Filtering malicious traffic before it reaches the server actually improves performance because CPU/RAM resources are not wasted. On Bogahost infrastructure the firewall layer is integrated with NVMe and LiteSpeed, so TTFB values are preserved. Poorly configured heavy custom rules can of course have impact; the default Imunify360 ruleset is recommended.
