Products / Network Protection / Anycast Delivery

One Address, Every Site

Protected IPs are delivered two ways: anycast addresses announced across the global network at once, and unicast addresses pinned to a specific city. Pick per service.

anycast one address, everywhereunicast pinned where you need itAS402349 our announcements

Get Protected Network Protection overview

Choose the Routing That Fits

Anycast

The same prefix announced everywhere; the internet routes each packet to the nearest site. Attacks fragment across the planet and die site by site. Best for global services and worldwide player bases.

Unicast

An address pinned to a specific city for a deterministic path. Best for latency-critical services with a concentrated audience, or when you want filtering as close to your origin as possible.

Forwarding

Clean traffic forwards from the edge to any origin you run. Point your DNS or SRV record at the protected IP; players and users connect exactly as they always did.

On-Net Origin

Run the workload on Sentry Compute and traffic never leaves the edge at all: the VM lives behind its anycast address with zero public hops.

Global by Default

A worldwide player base or user pool wants anycast: one address, every site, and attack fragmentation built into the routing itself. It is what game servers and global services should reach for first.

Regional on Purpose

A community concentrated around one city often wants unicast pinned nearby: a deterministic path and filtering as close to the origin as possible. The network roster lists every unicast city.

Keep Exploring

In-House Filtering

What happens to a packet after anycast lands it at the nearest site.

Game Query Caching

Query answers served straight from the delivery edge, before forwarding even begins.

Our Network

The global network on the record, with public looking glasses.

Sentry Compute

Skip forwarding entirely: run the workload behind its anycast address, on the edge.

Frequently Asked Questions

What is the difference between anycast and unicast protected IPs?

An anycast IP is announced across the Gateway Sentry global network at once, so each user reaches the nearest site and attacks split across the network. A unicast IP is pinned to a single city for a deterministic path. Both are filtered by the same datapath.

How do I point my service at a protected IP?

Provision an IP from the dashboard, then update your DNS A record or game SRV record to the protected address. Traffic reaches Gateway Sentry first, and only clean packets are forwarded to your origin.

Get Protected in Minutes

Provision from the dashboard; usage-based billing from the first packet

Get Protected