Blog

The PAKKT.io blog

Hands-on guides, incident reports, benchmarks and XDP / nftables tutorials for ops who run in production.

Illustration immersive du sujet : conntrack TCP states
Featured · Server security

Understanding conntrack and TCP states for a stateful Linux firewall

Deep dive into conntrack TCP state tracking on Linux: how the kernel maps TCP flags to connection states and how to leverage them in nftables rules.

July 24, 2026 · 10 min read
Illustration immersive du sujet : eBPF server security
Server security

eBPF in 2026: why server security is moving into the kernel

eBPF shifts security enforcement into the Linux kernel itself. Discover why sysadmins and ops teams are replacing legacy firewalls with eBPF…

July 21, 2026 · 10 min
Illustration immersive du sujet : ARK Survival Ascended DDoS
Game hosting

Protecting an ARK Survival Ascended server from DDoS and network exploits

UDP floods, spoofed packets, game-layer exploits: how to harden an ARK Survival Ascended server with XDP, eBPF and nftables firewall rules.

July 18, 2026 · 8 min
Illustration immersive du sujet : FiveM RP protections
Game hosting

FiveM RP: why traditional protections are no longer enough in 2026?

Classic firewalls and basic anti-DDoS are blind to modern FiveM RP attack vectors. Find out why XDP/eBPF-based filtering is now the baseline…

July 15, 2026 · 14 min
Illustration immersive du sujet : WAF or kernel firewall
Game hosting

Application WAF or kernel firewall: which layer for a game server?

WAF vs kernel firewall: which layer best protects a game server? Compare filtering depth, latency impact and DDoS resistance at L4 vs L7.

July 12, 2026 · 9 min
Illustration immersive du sujet : detect DDoS VPS
DDoS Protection

How to detect a DDoS attack on your VPS in under 30 seconds?

Learn to detect a DDoS attack on your VPS in under 30 seconds using Linux CLI tools, traffic counters, and kernel-level indicators.

July 9, 2026 · 10 min
Illustration immersive du sujet : nftables rate limiting
nftables

Per-IP rate limiting with nftables: properly configuring rate limits

Step-by-step guide to implementing per-IP rate limiting with nftables: meters, dynamic sets, and practical rules to enforce traffic caps on …

July 6, 2026 · 10 min
Illustration immersive du sujet : rate-limit IP XDP eBPF
XDP / eBPF

Rate-limiting an IP at the kernel level with XDP and eBPF: complete tutorial

Step-by-step tutorial to enforce per-IP rate limiting at kernel level with XDP and eBPF — drop excess packets before they hit the Linux netw…

July 3, 2026 · 8 min
Illustration immersive du sujet : DayZ server protection
Game hosting

Dedicated DayZ: how to stop attacks and protect your community?

Dedicated DayZ servers are prime DDoS targets. Discover how to block attacks at kernel level with XDP and nftables to keep your community ru…

June 30, 2026 · 12 min
Illustration immersive du sujet : Pelican panel game nodes
Game hosting

Pelican panel: securing nodes hosting FiveM, Minecraft, and Rust?

Learn how to harden Pelican panel nodes hosting FiveM, Minecraft, and Rust using nftables, XDP filtering, and Linux network isolation techni…

June 27, 2026 · 9 min
Illustration immersive du sujet : OVH Hetzner Scaleway DDoS
DDoS Protection

OVH vs Hetzner vs Scaleway: which offers the best DDoS protection?

OVH, Hetzner, Scaleway: detailed comparison of DDoS protection offered by each host in 2026 — filtering capacity, latency and real-world lim…

June 24, 2026 · 11 min
Illustration immersive du sujet : Cloudflare vs kernel firewall
DDoS Protection

Cloudflare DDoS Protection vs kernel firewall: when to use what?

Cloudflare or kernel firewall for DDoS protection? Understand the tradeoffs in filtering depth, latency, and control to choose the right sta…

June 21, 2026 · 11 min
Illustration immersive du sujet : nftables rules game server
nftables

Top 10 essential nftables rules for a production game server

10 battle-tested nftables rules for game server admins: conntrack, rate limiting, port whitelisting and layer 4 DDoS mitigation in one check…

June 18, 2026 · 10 min
Illustration immersive du sujet : block packets XDP
XDP / eBPF

How to block several million packets per second with XDP?

Learn how XDP enables blocking millions of packets per second at kernel level with eBPF programs for ultimate DDoS protection performance.

June 6, 2026 · 12 min
Illustration immersive du sujet : free minecraft anti-ddos
DDoS Protection

Free Minecraft anti-DDoS: real solutions or illusions in 2026?

Examining free Minecraft DDoS protection options in 2026: what actually works at kernel level versus provider marketing claims and service l…

May 31, 2026 · 10 min
Illustration immersive du sujet : protect Rust server DDoS
Game hosting

How to protect a Rust server against DDoS and massive lag?

Learn kernel-level DDoS mitigation techniques for Rust game servers using XDP/eBPF and nftables to maintain stable performance under attack.

May 28, 2026 · 10 min
Illustration immersive du sujet : pterodactyl ddos protection
Pterodactyl / Pelican

Pterodactyl: adding DDoS protection per game server in 2026?

Learn how to implement per-server DDoS protection in Pterodactyl using XDP/eBPF kernel filtering for optimal game server security and perfor…

May 25, 2026 · 9 min
Illustration immersive du sujet : secure OVH VPS DDoS
DDoS Protection

Securing an OVH VPS against DDoS attacks: 2026 checklist

Essential security checklist to protect OVH VPS infrastructure from DDoS attacks using modern kernel-level filtering techniques and proven m…

May 22, 2026 · 9 min
Illustration immersive du sujet : IP banning solution
Server security

fail2ban vs CrowdSec vs kernel protection: which IP banning solution in 2026?

Technical comparison of fail2ban, CrowdSec and kernel protection methods for blocking malicious IPs on Linux servers in 2026.

May 16, 2026 · 8 min
Illustration immersive du sujet : migrate iptables nftables
nftables

Migrating from iptables to nftables in 2026: a guide for Linux ops

Step-by-step migration guide from iptables to nftables for Linux administrators, covering rule conversion and performance optimization strat…

May 13, 2026 · 11 min
Illustration immersive du sujet : XDP filter before kernel
XDP / eBPF

XDP explained simply: why does Linux filter before the kernel in 2026?

XDP processes packets at driver level before kernel stack, enabling sub-microsecond filtering for DDoS protection and high-performance netwo…

May 10, 2026 · 11 min
Illustration immersive du sujet : protect FiveM server DDoS
DDoS Protection

How to protect a FiveM server against DDoS attacks in 2026? Complete XDP guide

Complete technical guide to implement XDP/eBPF DDoS protection for FiveM servers with kernel-level filtering and automated threat response.

May 7, 2026 · 9 min
Illustration immersive du sujet : Minecraft DDoS attack
DDoS Protection

Minecraft server under DDoS attack: how to react in an emergency?

Critical steps to protect your Minecraft server during a DDoS attack using XDP, nftables, and upstream filtering for immediate threat mitiga…

May 6, 2026 · 9 min