Standard DDoS Protection Ports and game servers

Ports and Game Servers

Below is a table of supported game servers and services along with their port ranges and the protection type applied.

Ports	Game/Application	Protection/Filter
53	DNS	UDP Challenge: DNS Truncate responds with a "truncated" message and forces the client to reconnect via TCP.
2300-2400	DayZ, Arma 3	Game-Query-Cache (GQC), UDP Challenge
5761-5794	Atlas	Game-Query-Cache (GQC)
7000-8999	Generic Games	Game-Query-Cache (GQC)
9000-9999	Teamspeak 3	Game-Query-Cache (GQC)
12800-13100	Hurtworld	Game-Query-Cache (GQC)
19132	Minecraft Pocket Edition	Game-Query-Cache (GQC)
22000-22020	Rage-MP, MTA	Game-Query-Cache (GQC)
27000-28000	Source Engine Games (CS:GO, Rust, ARK, Valheim, etc.)	Game-Query-Cache (GQC), UDP Challenge
30000-32000	FiveM GTA-MP	Game-Query-Cache (GQC), HTTP/HTTPS filtering (FiveM-specific caching and attack protection)

Protection Types

• Game-Query-Cache (GQC): Reduces server load during complex UDP attacks by caching queries.
• UDP Challenge: Filters spoofed or reflected UDP packets through validation.
• TCP Synproxy: Protects against SYN-floods by validating TCP connections.
• Layer7 Protection: A reverse proxy that protects HTTP/HTTPS traffic from web-based attacks. Commonly used for FiveM and similar services.

Recommendations

• Use the specified port ranges for game servers to achieve optimal protection.
• Avoid implementing custom rate limits, as they may interfere with the Game-Query-Cache.
• Need to protect an application not listed here? Contact our support for assistance.

Contact

Have questions or need help with the setup? Contact our support team for assistance.