Fexwall DDoS protection: attacks stop before they reach your server.
Fexwall is the last and most detailed layer of our defence: it works between L4 and L7, applies project-specific filters and forwards clean traffic to your service. The layers in front of it — distributed scrubbing nodes inside Türkiye, filtering abroad and our DPDK + VPP router — have already removed volumetric floods. It is included free on every VDS and dedicated server plan.
+100 Gbit
Point-to-point domestic network capacity
DPDK + VPP
Router data plane
L4 – L7
Fexwall protection from transport to application layer
100%
Protection against forged source addresses
End-to-end protection
Every packet passes through the right layer before reaching your service
Traffic from Turkish ISPs is first scrubbed at distributed nodes inside Türkiye, international traffic at filters abroad. What remains passes the filters on our DPDK + VPP router and finally Fexwall's L4–L7 inspection; verified packets reach your server.
01
First scrubbing layer
Traffic from Turkish ISPs is scrubbed at distributed nodes inside Türkiye; international traffic at filters abroad.
02
DPDK + VPP router
Runs full-route and state tracking in our core network and filters reflection and amplification based TCP/UDP attacks at router level.
03
Fexwall
Intelligent traffic analysis and project-specific security profiles between L4 and L7, inspecting the traffic that clears the volumetric layers.
04
Protected service
Only verified clean traffic reaches your VDS or dedicated server.
Technology built in-house
More than a general-purpose firewall
Fexwall runs inside the Datafex network topology as an integrated security layer shaped around real service requirements.
DPDK-powered processing
Packets are processed on a performance-focused data plane so protection does not become an infrastructure bottleneck.
Source address validation
Traffic carrying forged source addresses is blocked at the network edge before it can reach the protected service.
Project-specific filters
Protection profiles are tailored to the traffic patterns of games, applications, and specialized workloads.
Stateful control
Connection flow is tracked to distinguish expected traffic from anomalous traffic more accurately.
Flexible access rules
Reduce your service surface with allow or deny rules based on protocol, source, and port.
Traffic visibility
Monitor bandwidth, packet flow, dropped traffic, and active rules from the customer panel.
Fexwall control panel
You stay in control while protection runs at the edge
Monitor traffic for your protected IP, choose a ready-made protection profile, or define advanced rules for your own requirements.
- High-performance packet filtering on our DPDK + VPP router
- Automatic protection against forged source addresses
- Ready-made packages plus custom source, protocol, and port rules
Traffic statistics
203.0.113.10
Bandwidth
8.42 Gbps
Firewall rules
3 activeProtect your infrastructure with Fexwall
Let us assess your project's traffic profile and choose the right server infrastructure and protection profile with the Datafex team.