Glossary

Null route

What most hosts do when an attack exceeds what they will absorb. It protects their network, and it takes your server off the internet for the duration.

What it is

A null route, or blackhole, tells routers to discard everything addressed to a given IP rather than deliver it. Upstream providers use it to stop one customer's attack from congesting shared links. It is fast, cheap and effective at protecting everything except the target.

Why it matters for Minecraft

Because it is usually what "DDoS protection included" means at the low end. When the flood exceeds the threshold, the address is blackholed for a fixed period — commonly measured in hours — and your players cannot connect for the whole window. From the outside this is identical to a successful attack, which from the attacker's point of view it is.

How real mitigation differs

Filtering separates the attack from the players and forwards the players. Blackholing does not separate anything; it discards both. The distinction is worth checking before you rely on a protection claim: ask whether an attack results in filtering or in a null route, and how long the route stays in place.

Common questions

How long does a null route last?+

It varies by provider, commonly from fifteen minutes to several hours, and it often extends automatically if the attack resumes. During that window the address is unreachable for everyone.

Can I avoid being null-routed?+

Only by making sure the flood never reaches the network that would blackhole you. If traffic enters through an absorbing network first and your origin address is not publicly known, there is nothing for your host to blackhole.

Related reading

Scrubbing centerUDP reflection attackAnycast

Your next attack is already scheduled.
Be behind the edge when it lands.

We take care of security so you can branch out. Free plan, no card, one DNS record — if it doesn't hold, you lost five minutes.