Solutions / Game Servers / Minecraft

Minecraft DDoS Protection

Java and Bedrock servers behind line-rate edge filtering. Bot-join floods and volumetric attacks die before the login queue, and players connect exactly as before.

25565 Java default port19132 Bedrock default portSRV friendly setup

Protect my server All game servers

How Minecraft Servers Are Protected

Java & Bedrock

TCP filtering for Java and UDP filtering for Bedrock, tuned per protocol so aggressive defense never drops a legitimate player on either edition.

SRV-Friendly Setup

Point your _minecraft._tcp SRV record at the protected address and keep your friendly hostname; no client-side changes for your players, no launcher instructions to hand out.

Bot Joins

Join floods and slot-filling bots are filtered upstream of your login queue, so real players are never locked out by fake ones on a launch night.

Networks & Proxies

Running BungeeCord or Velocity behind one address works the same way: protect the proxy IP and every backend server inherits the shield.

Setup in Practice

Provision a protected IP, then point your A record at it, or your _minecraft._tcp SRV record if you run a custom port. Players keep the hostname they already know, and Java and Bedrock both pass through filtering tuned for their protocols. Running BungeeCord or Velocity? Protect the proxy address and the whole network inherits it.

Host It on the Edge

Or skip the forwarding hop entirely: run the server on Sentry Compute and it lives behind its anycast address inside the perimeter, with the same filtering in front and nothing public between the edge and the game.

Keep Exploring

All Game Servers

Every supported game, the three-step setup, and the built-in extras.

Trusted Networks

Your panels and monitoring, always recognized as yours.

Sentry Compute

Host the server on the protected edge instead of forwarding to it.

Getting Started

Account to protected traffic in about fifteen minutes.

Frequently Asked Questions

How do I add DDoS protection to a Minecraft server?

Provision a protected IP in the dashboard, then point your A record, or an SRV record if you use a custom port, at the protected address. Traffic reaches the Gateway Sentry edge first and only clean packets are forwarded to your server.

Does protection work for both Java and Bedrock?

Yes. Java uses TCP on port 25565 by default and Bedrock uses UDP on 19132; both protocols are filtered at line rate with profiles tuned for each.

Keep the Server Up

Provision a protected IP and point your record at it; setup takes minutes

Protect my server