Protected IP transit
Filtered ingress and clean delivery for operators, hosters, exposed services and performance-sensitive environments.
Anti-DDoS protected IP transit
Anti-DDoS protection and protected IP transit for exposed infrastructure
Filtered ingress, clean traffic delivery and handoff through cross-connect, GRE, IPIP, VXLAN or router VM, with BGP depending on the deployment model.
Production-ready delivery models
Anti-DDoS protected IP transit
Protected IP Transit
Starting from €1/Mbps
- 100 Mbps minimum commit at 95th percentile
- BGP included
- Tunnel, cross-connect or router VM
- Advanced Anti-DDoS filtering included
24h free trial on every offer
15+ Tbps
Cross-connect, GRE, IPIP, VXLAN, router VM and BGP announcements depending on the integration model.
15+ Tbps protection
BGP included
GRE / IPIP / VXLAN
Cross-connect
Router VM
24h free trial
L3 / L4 / L5 / L7
What Peeryx delivers
An anti-DDoS offer presented like a real network service
The website should make the real scope obvious: protected IP transit, clean traffic delivery toward infrastructure already in production, specialized protection for selected use cases and integration options that make sense for network teams.
Operators and hosters
Existing dedicated servers
Exposed TCP/UDP services
Latency-sensitive environments
Existing infrastructure protection
Protect a server or an already deployed topology via tunnel, protected IPs or another suitable handoff without forcing a full migration on day one.
Routing and integration
Use BGP when it adds real operational value, or choose a simpler delivery model when speed and straightforward integration matter most.
Targeted use cases
Reverse proxy game protection and dedicated policies when the application layer requires it, without diluting the main positioning of the site.
Where traffic enters, how it is filtered, how it is delivered back and what that means for day-to-day operations.
Delivery models
Choose the right integration model
Depending on your topology, clean traffic can be delivered through protected IPs, GRE, IPIP, VXLAN, cross-connect or a router VM. The right choice depends mainly on the infrastructure already in place and the level of network control you need.
Protected IPs
A practical way to start quickly with clean public exposure and lower early complexity.
GRE tunnel
A standard model for protecting an existing dedicated server without rebuilding the full architecture.
BGP
Best suited when your own prefixes and routing policies need to remain in place.
Production-first approach
The objective remains to add protection without disrupting the customer’s daily operations.
An offer built for networks, hosting and exposed services
Peeryx focuses on delivery models that are actually usable in production: protected IP transit, protection for existing infrastructure through tunnels or cross-connect, and realistic integration for already deployed environments.
BGP announcement included at no extra cost
No prefix announcement limit
Under-ASN support included
AS-SET supported out of the box
Protected IP Transit
Starting from €1/Mbps
- 100 Mbps minimum commit at 95th percentile
- BGP included
- Tunnel, cross-connect or router VM
- Advanced Anti-DDoS filtering included
- Post-filter firewall included
- 5 included firewall rules
- 24h free trial
Transit pricing
Clear pricing for operators, hosting providers, exposed TCP/UDP services and latency-sensitive infrastructure.
100 Mbps → 500 Mbps
€1/Mbps
Commit pricing
500 Mbps → 1 Gbps
€0.60/Mbps
Commit pricing
1 Gbps → 5 Gbps
€0.44/Mbps
Commit pricing
5 Gbps → 10 Gbps
€0.29/Mbps
Commit pricing
Minimum commit: 100 Mbps at 95th percentile
Excess outside commit: €1.50/month per exceeded Mbps
Included by default
BGP announcement included and free
No prefix announcement limit
Under-ASN support included
AS-SET parameter supported
Anti-DDoS firewall included
Behavioral AI-based protection included
5 post-filter firewall rules included
Additional rules available at low extra cost
+190€/mois
Optional Game filtering
Game Anti-DDoS filtering is available as a €190/month add-on for transit customers. It adds more specialized rules for gaming traffic while minimizing the risk of impacting legitimate sessions.
Activation timelines
Tunnel delivery
Up to 24 hours
Cross-connect delivery
Up to 72 hours
Urgent option
+€250 setupActivation in under 2 hours
Specialized Reverse Proxy Game solutions
Gaming offers are available when you need service-specific shielding, but the main focus of Peeryx remains protected transit for networks and critical services.
Blog
Technical resources for serious Anti-DDoS buyers
We publish clear articles on protected IP transit, mitigation strategy, asymmetric routing, clean traffic delivery and the criteria that actually matter before you buy.
Protected IP Transit Against DDoS: Mitigation Designed to Preserve Legitimate Traffic
A practical guide to link saturation, 95th percentile billing risk, blackholing, asymmetric routing, adaptive filtering and the importance of both Gbps and Mpps.
Read the article
Peeryx architecture
Protected transit
Adaptive mitigation and clean delivery
How to protect a Hetzner or OVH dedicated server against DDoS with GRE and optional BGP
A practical guide for protecting a production dedicated server hosted at OVH, Hetzner or another provider without migrating the whole stack, using GRE with or without BGP.
Read the article
Flexible deployment
GRE / BGP delivery
Protection without full migration
GRE, BGP or protected IPs: which model should you choose to protect a service against DDoS?
Simple GRE tunnel, GRE + BGP or protected IP delivery: here is how to choose the right model depending on your architecture, routing control requirements and deployment speed.
Read the article
Flexible deployment
GRE / BGP delivery
Protection without full migration
Transit FAQ
Is BGP included with transit delivery?
Yes. BGP is included by default on the transit offer, whether delivery is made through tunnel, cross-connect or router VM.
Is there a limit on announced prefixes?
No. Prefix announcements are not artificially limited, and under-ASN operation with AS-SET support is available.
Can I use my own router logic?
Yes. Peeryx can provide a router VM if you prefer to manage tunnels yourself and return traffic through iBGP or eBGP.
What is included in the default filtering stack?
The offer includes Anti-DDoS mitigation, a post-filter firewall and behavioral AI-based analysis, plus five included firewall rules.
Need an anti-DDoS architecture that fits your topology?
Share your environment, routing model and delivery constraints. We come back with a realistic deployment scenario and a quote.