DDoS protection for any host
FiveM DDoS protection that verifies real players.
Keep your server where it is. Players connect through PlaySafe, every IP has to complete the real FiveM handshake, and attack traffic is dropped in the kernel before it reaches your machine.
In-house
XDP filter written in C
Built by our own engineers
Handshake
Real-player verification
Spoofed IPs never get through
Any host
Keep your current server
No migration needed
France
Filtering location
More locations coming
How it works
Three stages, fully automatic, active from the first packet.
Verify
Every IP that connects has to complete the genuine FiveM handshake before any game packet is let through. Our engineers wrote that check in XDP and C, so spoofed UDP sources fail it.
Filter
The filter runs at the network driver. Traffic that fails verification is dropped in the kernel, without reaching your FiveM process or using its CPU. Large floods are absorbed upstream first.
Forward
Clean traffic is forwarded to your server, wherever it is hosted. Your server IP stays hidden and you still see the real IP of every player.
Keep your host
Protect the server you already have, in four steps
No migration and no new machine. You keep your provider, your files and your txAdmin.
- 1
Deploy the protection
Pick a plan and a connect slug in the panel. Deployment is automatic.
- 2
Copy the server.cfg block
The panel generates a block with your connect address and backend IP. Paste it into server.cfg.
- 3
Restart your server
The server starts listing through PlaySafe with the new address.
- 4
Share the new address
Players join with connect https://your-slug-svr.playsafe.dev/ (keep https:// and the final /). Replace the old IP everywhere you published it.
Everything included in every plan
Built for FiveM and RedM traffic, not a generic firewall with a game name on it.
Real-player verification
Each connecting IP must complete the FiveM handshake before it can send game traffic.
Kernel-level XDP filtering
Attack packets are dropped at the network driver, before the Linux network stack.
Upstream volumetric mitigation
Large floods are absorbed upstream before they reach the filter.
Hidden server IP
Players and attackers only see your PlaySafe address, never your backend.
Real player IPs
Your server still sees the real IP of each player, so bans and logs keep working.
Layer 7 protection
HTTP floods against the FiveM endpoints are filtered too.
Resource CDN
Resource downloads are served for you, so joining players do not hit your server.
Attack alerts and reports
Email, Discord and panel alerts when an attack starts and ends, with a PDF report.
txAdmin and RDP closed
TCP 40120 and 3389 are blocked from the internet by default. Staff IPs are allowed on request.
What it blocks, and what it does not
Blocked
- Spoofed UDP floods against the game port
- Traffic that does not complete the FiveM handshake
- HTTP floods against the FiveM endpoints
- Direct hits on txAdmin and Remote Desktop
Not covered
- Attacks sent straight to your old server IP: once players use the new address, close the game port to everyone except PlaySafe and consider a new IP
- Cheaters and griefers who join as real players: that is a job for your anticheat and staff
FiveM protection plans
Monthly plans. Player counts are a recommendation, never a limit. Every plan includes the same protection; they differ in clean traffic and support.
Start a 3-day free trialStarter
35 EUR /month
- 5 TB clean traffic
- Recommended for up to 64 players
- Ticket support
Standard
65 EUR /month
- 10 TB clean traffic
- Recommended for up to 128 players
- Ticket support
Pro
110 EUR /month
- 20 TB clean traffic
- Recommended for up to 256 players
- Priority Discord support
Business
190 EUR /month
- 40 TB clean traffic
- Recommended for up to 512 players
- Priority Discord support and installation help
Enterprise
300 EUR /month
- Unlimited clean traffic
- Recommended for 1,000+ players
- Priority Discord support and installation help
Included in every plan
Hover to see it in the panel
- Real-player verification (FiveM handshake)
- Kernel-level XDP filtering
- Upstream volumetric mitigation
- Your server IP stays hidden
- Real player IPs on your server
- Resource CDN for faster joins
- Layer 7 / HTTP flood protection
- Alerts by email, Discord and panel, with PDF reports
- Automatic deployment
- txAdmin and RDP closed by default
Every plan has a 3-day free trial. Request it from the panel and our team activates it after a quick review.
Need several servers or something tailored? Talk to our team
FiveM DDoS protection FAQ
Do I need to move my FiveM server to PlaySafe?
No. The protection works with a server hosted anywhere. Players connect to your PlaySafe address, we filter the traffic and forward clean traffic to your server.
How does it tell real players from attack traffic?
Every connecting IP must complete the real FiveM handshake before any game packet reaches your server. The check runs in XDP, at the network driver, so spoofed and junk traffic is dropped before it touches your machine.
How do I set it up?
Deploy the protection and pick a connect slug, copy the server.cfg block from the panel, restart your server, then give players the new address: connect https://your-slug-svr.playsafe.dev/
Does it work with RedM?
Yes. FiveM and RedM protections get their own game filter and the same setup.
Will my server still see the real IPs of players?
Yes. Your server IP stays hidden from players, and your server keeps seeing the real IP of each player for bans and logs.
What happens to txAdmin and RDP?
They are blocked from the internet by default: TCP 40120 (txAdmin) and TCP 3389 (Remote Desktop). Open a ticket with the IPs of your staff and we allow them.
Where is the traffic filtered?
At our location in France. Your server can be anywhere; only filtered traffic is forwarded to it.
Will I know when my server is attacked?
Yes. You get an email, Discord or panel alert when an attack starts and ends, and each attack has a PDF report.
Is there a free trial?
Yes, every plan has a 3-day free trial. Request it from the panel; our team reviews it and activates it. It switches off after 3 days, and if you buy a plan you keep the same address.
What if players still join with my old IP?
Then they go around the protection. Replace the old IP everywhere you shared it, allow the game port only from PlaySafe on your server firewall, and consider asking your host for a new IP once everyone has moved.
Your FiveM server, protected
Deploy in minutes, keep your host, and let real players in while attack traffic stays out.
Create your account
In-house DDoS protection for FiveM and game servers, an XDP edge firewall, and VPS and game server hosting with protection on every plan.
©2026 Playsafe