Intelligent protection, always on
Automatically mitigate network floods, protocol and connection attacks across a global edge, keeping large-scale attack traffic away from your origin
SHIELD AEGIS
Keep your business moving
Intelligent network protection for the AI era, with continuous attack detection and automated mitigation for TCP, UDP and HTTP/HTTPS services. Bring AI Agents into configuration and operations while the global edge absorbs attack traffic
- Protection capacity
- 600 Gbps – 20+ Tbps
- Application access
- TCP · UDP · HTTP/HTTPS
- Distributed protection
- Global
Origin access under your control
Use a protected edge entry point, configure origin firewall allowlists, and retain TLS and application authentication to control how services are reached
Availability as your business grows
Protect game sessions, real-time communication, remote operations and application connections as traffic and demand grow
L3 / L4 protection
- Traffic floods
- Reflection & amplification
- Protocol & connection attacks
- Multi-vector attacks
BUILT AROUND YOUR BUSINESS
Security for every critical connection
Protect the connections behind games, remote operations, web services and connected infrastructure through one global network
Games & real-time communication
Keep multiplayer sessions, voice and interactive services accessible when attacks target your TCP or UDP infrastructure
Remote operations
Put SSH, remote desktops and deployment endpoints behind a protected edge, with origin access rules you configure
HTTP/HTTPS and APIs
Protect web applications and API connections on dedicated IP, including long-lived sessions
IoT & hosted infrastructure
Protect MQTT, connected devices and hosted workloads through a consistent network edge
AI moves innovation forward. Keep your defenses in step
Faster releases need protection that keeps pace. Shield combines continuous attack detection and automated mitigation with AI-assisted operations, bringing protection settings, resource checks and origin updates into each release
Connect your operations workflow
Explore the management workflow- Claude Code
- Codex
- OpenCode
Your Agent reads the service
Inspect code and deployment settings to identify the protocol, origin and protection configuration
Your Agent configures protection
Within granted permissions, call MCP to create or associate the RingLink resource and retain its ID
Your Agent checks each release
Check connectivity and update the origin as deployments change, keeping protection attached to the application
Recognize network attacks
Traffic characteristics and dynamic rules identify protocol anomalies, connection floods and reflection attacks
Mitigate at the global edge
Intercept attack traffic before it reaches the origin, protecting connections for TCP, UDP and web applications
Bring AI into security operations
Let your Agent review connection settings and resource status, then update authorized origins as applications evolve
CONNECT AND MANAGE
Your services. Your way of working
Connect your services and carry network configuration through deployments
Connection and resource settings
- Protocol
- TCP or UDP, per application
- Public port
- Assigned port or plan-supported custom port
- Origin
- Publicly reachable IP or hostname + port
- Proxy Protocol
- Off for an unmodified service
Enable Proxy Protocol only when your origin supports it
Use your own domains, addresses, ports and resource IDs in these configuration examples
Configuration examples
TCP game.example.com:25565 → 203.0.113.10:25565UDP voice.example.com:27015 → 203.0.113.11:27015Choose your level of protection
From core applications to large-scale deployments, every Shield Aegis plan includes dedicated IP and HTTP/HTTPS support. Web access uses TCP and does not require a UDP add-on
Dedicated IP (IPv4 / IPv6)
Aegis Core
/mo
A strong foundation for business continuity
- DDoS protection
- 600 Gbps
- Applications
- 5
- Protocols
- TCP
- HTTP / HTTPS
- Included
- Included monthly transfer
- 500 GB
- Additional transfer
- USD 0.15/GB
- Port assignment & ranges
- Each application supports a single port or a range of up to 6 consecutive ports
- IP allocation
- Dedicated IP (IPv4 / IPv6)
- Anycast coverage
- Standard coverage
Dedicated IP (IPv4 / IPv6)
Aegis Prime
/mo
More capacity for demanding services
- DDoS protection
- 1 Tbps
- Applications
- 10
- Protocols
- TCP
- HTTP / HTTPS
- Included
- Included monthly transfer
- 2 TB
- Additional transfer
- USD 0.15/GB
- Port assignment & ranges
- Each application supports a single port or a range of up to 6 consecutive ports
- IP allocation
- Dedicated IP (IPv4 / IPv6)
- Anycast coverage
- Advanced coverage
Dedicated IP (IPv4 / IPv6)Recommended
Aegis Apex
/mo
Large-scale defense for high-traffic platforms
- DDoS protection
- 3.2 Tbps
- Applications
- 10
- Protocols
- TCP / UDP
- HTTP / HTTPS
- Included
- Included monthly transfer
- 12 TB
- Additional transfer
- USD 0.15/GB
- Port assignment & ranges
- Each application supports a single port or a range of up to 6 consecutive ports
- IP allocation
- Dedicated IP (IPv4 / IPv6)
- Anycast coverage
- Advanced coverage
Dedicated IP (IPv4 / IPv6)
Aegis Sovereign
/mo
A tailored defense for your critical infrastructure
- DDoS protection
- ≥20 Tbps
- Applications
- Custom contract
- Protocols
- TCP / UDP
- HTTP / HTTPS
- Included
- Included monthly transfer
- Unmetered (best-effort)
- Additional transfer
- —
- Port assignment & ranges
- Each application supports a single port or a range of up to 6 consecutive ports
- IP allocation
- Dedicated IP (IPv4 / IPv6)
- Anycast coverage
- Advanced coverage
Advanced coverage excludes mainland China
Put global security behind your applications
Choose Shield Aegis for intelligent network protection, or combine protection and acceleration with Global Accelerator