Keep your serversonline under DDoS

Affordable DDoS protection you can switch on today.

No minimum term, cancel whenever you like.
DDoS Shield is built for individuals and small businesses.

See pricing
Diagram showing DDoS Shield filtering out attack traffic so that only legitimate traffic reaches the server

Why choose DDoS Shield

Fully cloud-based
remote DDoS protection

Thorough traffic filtering removes attacks before they ever reach your server.
Everything runs in the cloud, so there is no software to install on your own machines.

  • Low latency, high throughput

    Our infrastructure sits in the Tokyo area.
    Up to 40 Gbps of capacity and direct peering with the major Japanese ISPs (NTT, KDDI and others) keep latency low.

  • Full layer 3–7 protection

    Fine-grained filtering covers attacks at layers 3, 4 and 7.
    Attack traffic is removed without disturbing legitimate connections.

  • 7-day money-back guarantee

    Every account comes with a 7-day money-back period.
    Within that window we refund you, no questions asked.

  • Built-in machine learning

    Our learning system handles unknown attacks automatically, with no human intervention.
    Our own database holds over 100 million recorded attack patterns.

  • Anomaly detection

    Every plan learns your normal traffic patterns automatically and flags anomalies, so the novel attacks that the AI era keeps producing are handled smoothly too.

  • Built in Japan, for Japan

    The service is run by a Japanese operator licensed by the Ministry of Internal Affairs and Communications (Kinki Bureau of Telecommunications), so there is no overseas support desk to chase and no exchange-rate risk.

  • White label

    On the B2B plan you can brand the dashboard, RDNS and more with your own company name, and remove the DDoS Shield name and logo everywhere it appears.

  • Support that answers

    Support is included at no extra cost.
    Emergencies and incidents, but also everyday questions — just get in touch.

FEATURE What you get

Application filter

Supported applications are protected all the way up to layer 7.
No complex tuning required — it applies automatically as traffic arrives.

  • Minecraft

  • Nginx

  • WordPress

  • Shopify

  • Rust

  • FiveM

  • SteamCMD

  • TCP+UDP

* For Minecraft only, port 25565 is available without limits on every plan.

* For anything that depends on Steam authentication servers we recommend Premium or B2B.

Applications not listed above are supported too.

Detection accuracy improves every day as the system learns your traffic.
Our in-house packet filter, permanently connected to a high-capacity backbone, keeps connections alive during an attack and delivers protection at the highest quality.

A dashboard you will actually use

Add, edit and remove protected servers and invite extra users — all managed by you.
The filter settings let you tune detection thresholds and maintain your own lists of attack signatures and blocked IP addresses.

DDoS Shield (dedicated node) DEMO

Traffic

Current PPS (packets/sec) 10,454 pps ↓ 5,300 pps | ↑ 5,154 pps Current throughput 84.4 Mbps ↓ 41.7 Mbps | ↑ 42.7 Mbps Average traffic 3.60 GB Per day ↓ 1.87 GB | ↑ 1.73 GB
Traffic today 582.75 GB ↓ 292.90 GB | ↑ 289.84 GB Traffic this month 1.95 TB ↓ 977.04 GB | ↑ 998.53 GB
Daily analytics Received (RX)Sent (TX)

* A demo based on the real dashboard. All figures are samples.

40Gbps+ High-speed network

0~1ms Low latency

Oracle + Akamai network

Upstream transit is provided by Oracle (shared nodes) and Akamai (dedicated nodes).
We stay permanently connected to some of the fastest backbones in Japan, with optimised BGP routing.

* Latency and throughput vary depending on your own environment.

Managed and customisable

From customisation that most providers will not touch, through to detailed traffic statistics — we tailor the service to you.

* Some features are limited to the Premium and B2B plans.

  • Custom filters

    Tune detection and mitigation rules in detail

  • Traffic pattern learning

    Normal traffic is learned automatically and sharpens over time

  • Analytics

    Throughput, PPS and daily observations in real time

  • Passwordless sign-in

    Email, Google and GitHub sign-in — no password to leak

PRICING Plans and pricing

  • Normal

    For trials and small deployments

    ¥ 590 /mo

    Sign up

    What is included

    • Unlimited traffic
    • Up to 2 Gbps
    • Up to 3 protected servers
    • Oracle network

  • Advance

    Dedicated IP, ideal for personal use

    ¥ 1,380 /mo

    Sign up

    What is included

    • Unlimited traffic
    • Up to 5 Gbps
    • Up to 8 protected servers
    • Oracle network
    • Choose your assigned port numbers
    • Dedicated IP address (IPv4)

  • Premium

    Dedicated node, for large deployments

    ¥ 2,980 /mo

    Sign up

    What is included

    • Unlimited traffic
    • Up to 40 Gbps
    • Up to 20 protected servers
    • Akamai network
    • Choose your assigned port numbers
    • Dedicated IP address (IPv4 + IPv6)
    • Tailscale support (no port forwarding needed)
    • Real-time traffic data
    • Up to 5 additional users
    • No automatic 4 a.m. reboot
    • Dedicated node (custom URL)

<Please note>
"Unlimited traffic" on the three plans above is subject to fair use.
If outbound traffic exceeds 5 TB in a calendar month, throughput may be limited to around 100 Mbps.
* If you expect to exceed 5 TB every month, consider the B2B plan, which has no such limit.
Inbound traffic is never counted towards this figure on any plan.

Need something bigger? See the B2B plan

Frequently asked questions

The questions we are asked most often.
  • Which port numbers can I use?
    It depends on your plan. • Normal A random port number is assigned to you. The one exception is Minecraft Java Edition, where port 25565 is available. • Advance You may choose any port within the following ranges: - 24454-25000 (TCP+UDP) - 40000-40100 (TCP+UDP) - 25565-25560 (TCP) - 443, 80 (TCP) - 30120, 40120, 30110 (TCP+UDP) - ICMP (ping only) - 19132-19140 (UDP only) - 8211 (UDP only) - 26900 (TCP+UDP) - 26901-26902 (UDP only) - 7777 (TCP+UDP) - 7778 (UDP only) - 27015 (TCP+UDP) - 28016 (TCP) Ports outside these ranges cannot be assigned on the Advance plan. • Premium Any port number. • B2B Any port number. Separately from the "assigned port" described above, there is also a "destination port". That feature rewrites the port of incoming traffic before forwarding it to your server, and it can be set to any port number on every plan.
  • How do I pay each month?
    We accept credit, debit and prepaid cards from VISA, Mastercard, JCB, American Express, Diners and Discover. * Vandle Card and V-Preca are not supported. If you are unable to use a card, contact us and we can arrange a bank transfer instead. Your card number is never sent to our systems; it is handled only by our payment provider. On top of that we require 3-D Secure authentication and run a fraud detection system, among other security measures.
  • Which plan should I choose?
    We suggest the following, depending on how you plan to use the service. 1. Normal The cheapest option — a good fit if you only run Minecraft Java Edition, or if the basics are all you need. 2. Advance For anyone who needs a dedicated IP address, or a specific port such as 19132 (Minecraft Bedrock), 443 (HTTPS) or 80 (HTTP). 3. Premium For dedicated bandwidth and the lowest latency; for protecting a server through a Tailscale tunnel instead of forwarding ports; for disabling the automatic 4 a.m. reboot and restarting from the dashboard whenever you like; for using the Akamai network; for tuning the filters to your own environment; and for anyone who may move up to the B2B plan later. 4. B2B For more than 5 TB of outbound traffic a month; for watching traffic and statistics live in the dashboard; for companies, hosting providers and other large deployments; and for anyone who wants the Akamai network.
  • Can I cancel at any time?
    Yes. You can cancel whenever you like. There is no need to contact us — you can do it entirely on your own. Cancellation is a single button in the dashboard, available 24/7. Log in to the dashboard → Billing → press the red "Cancel" button, and it takes effect immediately. (On a dedicated node, press "Other features" to reveal the "Billing" button.) In case an incident prevents you from logging in, you can also cancel from this link: https://billing.stripe.com/p/login/5kAbLggxFggy3oQ144 Cancelling never triggers a charge — there are no cancellation or early-termination fees. To change your payment method, use the blue "Change payment method" button under "Billing"; again, no need to contact us.
  • Where are your nodes, and whose network do they use?
    Our nodes sit in data centres in the greater Tokyo area, on low-latency, high-capacity network links. <Locations> - Normal and Advance plans AS31898, Oracle network MC Digital Realty NRT10 data centre Location: Inzai, Chiba, Japan - Premium and B2B plans AS63949, Akamai network Equinix TY8 IBX data centre Location: Shinagawa, Tokyo, Japan Both data centres are in the Tokyo metropolitan area and are known for their stability and reliability. BGP route optimisation keeps connections fast and latency low. On the B2B plan we can also quote for locations outside Japan. Please contact us for details.
  • Can I use the service if I cannot forward ports?
    • Normal / Advance → No. • Premium / B2B → Yes. You will need to install the Tailscale software and create an account (both are free). Step-by-step instructions are in the help centre, which becomes available once you sign up.
  • How do I measure latency (ping)?
    Run the ping commands below from your own computer or server to measure the latency to a DDoS Shield node. 1. Shared node (Oracle) ping common.shield.broccoli.network 2. Dedicated node (Akamai) ping 23.192.45.248 Shared nodes are more affected by congestion, so if latency matters most to you we recommend the Premium or B2B plan with its dedicated node.
  • Is there a free trial?
    We do not offer a free trial, but there is a 7-day money-back guarantee. If the service does not meet your expectations, we will refund you — no reason required. For the full conditions, see the "Commercial transactions notice" linked at the bottom of this site.
  • Which applications are known to work?
    These applications are confirmed to work with DDoS Shield. Minecraft (Java Edition / Bedrock Edition) FiveM / GTA V Online Palworld 7 Days to Die Rust ARK: Survival Evolved Terraria Steam servers (listen / dedicated) txAdmin Pterodactyl (panel) WordPress HTTP/HTTPS (excluding QUIC) MySQL, MariaDB Please go ahead and sign up. If it turns out not to work in your environment, the 7-day money-back guarantee applies unconditionally.

See more questions

Case studies

A few of the organisations and companies protected by DDoS Shield.

Leave DDoS protection to us.
You focus on your core business.

Ask a question For businesses

Contact us

If anything is unclear, please get in touch.
Common questions are answered on our "Help" page.

* We never send marketing email.
If we do not hear back from you, we stop following up.

  • Chat with us

    Use the button at the bottom right of this site.
    We reply within one to two business days.

  • Email us

    Write to support@broccoli.network.
    We reply within one to two business days.

  • Video call or phone (businesses only)

    Please email us first.
    Our sales team will arrange a call to suit your needs.