Absorb the storm.Stay online.
HolicNode keeps game servers, apps and infrastructure reachable through even the largest attacks — with always-on, multi-terabit protection at the edge.
No contracts · cancel any time · protected in minutes
Powered by Cloudflare Spectrum
What you get
Protection built to stay ahead of the flood
Every plan runs on the same mitigation edge. Larger plans add capacity, ports and hands-on support.
Multi-terabit capacity
A global anycast edge absorbs volumetric floods across many points of presence, so attack traffic is scrubbed far from your origin.
Layer 3/4 & Layer 7
TCP, UDP and application-layer filtering stop SYN floods, UDP amplification and HTTP request floods alike, automatically.
Always-on, sub-second
Protection is inline the moment you point your traffic — no waiting for an attack to be detected before mitigation kicks in.
Anycast routing
Your service is announced from every edge at once. Latency drops for legitimate users while attackers are dispersed.
Custom firewall rules
Shape exactly what reaches your backend with per-service rules, rate limits and geo controls from your dashboard.
Transparent dashboard
Live traffic, mitigation events and your active services in one place — with alerts when something hits the edge.
Games we protect
Built for the servers that get attacked
Popular in the Philippines and across South East Asia, or a small community anywhere — if your game speaks TCP or UDP, it sits behind the same anycast edge. These are the ones we see most.
MMO & private servers
Rival owners hit each other on launch day. This is the scene we see most.
Sandbox & survival
Persistent worlds that cannot afford to drop.
Roleplay & GTA multiplayer
Big communities, bigger targets.
FPS & community servers
Competitive rooms that go down mid-match without protection.
Voice & infrastructure
The servers your players talk on.
Running something not listed? If it speaks TCP or UDP, we protect it — ask us on Discord.
Inside the panel
A control plane, not a black box
Every connection, byte and edge location your service touched — read straight from the mitigation edge, per service.
Illustrative — your panel shows your own live figures.
Per-service analytics
Connections, open sessions, traffic and origin errors over 30 minutes to 30 days — with CSV export.
Change your backend
Move your service to a new IP and port yourself. Players keep the same address — only the forwarding changes.
Smart routing, your call
Turn Argo Smart Routing on or off whenever you like, and see the effect in the same panel.
The network
Anycast everywhere your players are
Powered by Cloudflare Spectrum
Your traffic rides Cloudflare's anycast edge — 330+ cities across 125+ countries, 256+ Tbps of capacity. The map below is not that whole network: it is the 0 locations that actually carried traffic for services here in the last seven days, read from the edge and refreshed daily.
Edge footprint is being collected.
How it works
Protected in three steps
Choose a plan
Pick the capacity, ports and backends that fit what you're protecting. Upgrade any time as you grow.
Give us your backend
Tell us the IP, port and transport at checkout. We create the edge application and hand you a public address.
Point your players
Publish the address we give you. Attacks are scrubbed at the edge automatically — watch clean traffic in your panel.
Pricing
Plans that scale with the threat
Straightforward monthly pricing. Cancel any time.
Game Proxy
Anycast endpoint for one or a few applications. We manage it — point your DNS and go.
- Anycast endpoint we manage
- 1 port (one TCP/UDP application)
- TCP & UDP, Layer 3/4 mitigation (Cloudflare Spectrum)
- 256+ Tbps network, 330+ anycast PoPs
- Cancel anytime
- 10 TB traffic / month, counted per group
rAthena Proxy
Tuned for rAthena / Ragnarok private servers — login, char and map behind one Anycast endpoint.
- Everything in Game Proxy
- Tuned for rAthena / Ragnarok Online
- 4 TCP ports — login, character, map and web
- Anycast endpoint we manage
- Cancel anytime
- 10 TB traffic / month, counted per group
Dedicated IP
Your own Anycast IP for unlimited apps and backends. $200 one-time setup covers IP allocation.
- Your own dedicated Anycast IP
- Unlimited applications and backends
- Set up your own Spectrum applications
- $200 one-time setup (non-refundable)
- Cancel anytime; setup fee is non-refundable
Proxy Accelerator (Custom Routing)
Accelerate accurately through a specified IP in each acceleration region. China Gateway available.
- Region-specific IP routing — accelerate through the right IP per region
- China Gateway available
- Custom routing, configured with you
- A dedicated accelerated path — not the shared Spectrum edge
- Cancel anytime
RoBrowser + Android Client
A RoBrowser web client (PWA) and a native Android APK for your Ragnarok server. One-time setup, billed yearly.
- RoBrowser web client (PWA) — play in the browser
- Native Android APK build
- One-time setup, billed per year
- Non-transferable — tied to your server, even if it runs only 3 months
- Setup fee is non-refundable
System Administrator
A dedicated admin for your server — crash response, major-error fixes, optimization and usage monitoring.
- We take responsibility when your server crashes
- Help fixing major errors
- Server optimization
- Usage monitoring
- Usage recommendations & tuning
Need more than Enterprise? Message us on Discord about custom capacity.
FAQ
Questions, answered
What kind of attacks does this stop?
Volumetric Layer 3/4 floods (UDP amplification, SYN floods, reflection) and Layer 7 application floods such as HTTP request floods. Mitigation is always-on, so it applies before an attack is even detected.
What games and servers can I protect?
Any TCP or UDP game server or application — Minecraft, FiveM, Rust, Ragnarok Online, RAN Online, MU Online, CS2, SA-MP, ARK, Valheim and more. You point the service at our anycast edge and we filter the traffic before it reaches your origin.
Will my players' real IPs still reach my server?
Yes, if you enable PROXY protocol at checkout and configure your server to read it. Without it your server sees the edge address instead. v1 and v2 work with TCP; v2 and Simple work with UDP.
How fast does mitigation start?
It's inline from the moment your traffic is routed through us — typically sub-second, because there's no detect-then-enable delay.
Can I move my server later?
Yes. Change the backend IP and port yourself from the panel at any time; your players keep the same public address. There's a five-minute cooldown between changes.
Can I upgrade or cancel later?
Yes. Move between plans at any time as your needs change, and cancel whenever you like from your dashboard.
Do you offer custom capacity?
Yes. Message us on Discord and we'll size it with you.
Ready before the next attack is
Get protected in minutes. No hardware, no long contracts.
Choose a plan