All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Gateway Sentry: Anycast DDoS Protection | In-House XDP | $6.5 VPS RYZEN
gatewaysentryllc
Member, Patron Provider
Hey LowEndTalk! ๐
We're Gateway Sentry, and our primary focus is reliable DDoS protection built on a custom BGP-anycast network spanning 4 PoPs (Denver, Los Angeles, Chicago, Amsterdam). All mitigation is performed in-house using XDP for line-speed packet filtering, capable of absorbing up to 1.2 Tbps of attack traffic.
We also offer a small KVM VPS plan as a bonus for those who want hosting + protection bundled (see bottom of post).
๐ก๏ธ Why Gateway Sentry for DDoS Protection?
- Global Anycast: Traffic routes to the nearest of 4 PoPs (Denver, LA, Chicago, Amsterdam), ensuring optimal latency and absorbing attacks closer to their origin.
- Line-Speed Mitigation: Custom XDP-based filtering at the kernel level. No slowdowns.
- 1.2 Tbps Capacity: Absorb large-scale volumetric attacks without breaking a sweat.
- Fair Billing: Only legitimate traffic is billed. Attack bandwidth is on us.
๐ฅ Network Protection: Game Servers & Infrastructure
Line-speed packet filtering for UDP and TCP services. Ideal for game servers, voice servers, and custom protocols.
- Regular pricing:
$3.50/TB + $4.39/IP - LET Pricing:
$2/TB + $2/IP
Features:
- Line-speed packet filtering
- TCP & UDP protocol support
- Dedicated IP with per-IP billing
- 1.2 Tbps mitigation capacity
- Only legitimate bandwidth is billed
- Connection via GRE, FOU, Proxy Protocol or IP Proxy
- Real-time analytics dashboard
๐ฎ Supported Games
We've built purpose-tuned profiles for the most common titles, but our system can protect any TCP/UDP service:
- Minecraft (TCP, UDP). Full protocol support for Java and Bedrock editions, including vanilla, modded, and proxy networks like BungeeCord and Velocity.
- FiveM / GTA (TCP, UDP). Full protection for FiveM and FiveM-based roleplay servers. Game traffic filtered at the edge with zero impact on player sync or voice chat.
- Rust (UDP). Protection from raid-night attacks and targeted griefing. Keep your wipe day running smoothly.
- ARK (UDP). ARK: Survival Evolved and Survival Ascended servers fully protected. Keep your tames safe and your tribe online.
- Source Engine (UDP). Counter-Strike 2, Team Fortress 2, Garry's Mod, and all Source Engine titles fully protected.
- Custom Games (TCP, UDP). Running a private server or proprietary protocol? If it speaks TCP or UDP, Gateway Sentry can protect it. No protocol-specific configuration required.
๐ Web Protection: Web Services & APIs
AI-powered application-layer defense with fingerprinting, bot detection, WAF, and rate limiting.
- Regular pricing:
$30/TB+$0.55/1M requests - LET Pricing:
$15/TB+$0.55/1M requests
Features:
- Advanced Fingerprinting
- WAF, rate limiting & flow rules
- Bot protection & challenge modes
- Only legitimate bandwidth and requests are billed
- Real-time analytics dashboard
๐ Looking Glass
Test our network from any PoP:
- Amsterdam: ams-lg.gatewaysentry.com
- Chicago: chi-lg.gatewaysentry.com
- Los Angeles: lax-lg.gatewaysentry.com
- Denver: den-lg.gatewaysentry.com
๐ฆ Bonus: Pre-Protected KVM VPS
For those who want hosting and protection bundled in one place, we offer a small VPS plan with our DDoS protection baked in:
4 GB KVM VPS in Chicago: $6.50/month recurring (with code lowendtalk for 50% off lifetime)
โ ๏ธ Limited to 1 VPS per user.
| Spec | Detail |
|---|---|
| CPU | 2 Cores (AMD Ryzen 9 9900X / 9950X) |
| RAM | 4 GB |
| Storage | 40 GB NVMe |
| Bandwidth | 1 TB/month |
| Port Speed | 10 Gbps (Shared) |
| Virtualization | KVM |
| Location | Chicago |
| IPv4 | 1 Anycast routing optimized IP (Denver, LA, Chicago, Amsterdam) |
| IPv6 | Not included |
| DDoS Protection | Up to 1.2 Tbps included free |
Bandwidth overages: $3.50/TB โ $2/TB with LET promo, billed as used. No throttling, no surprise invoices. Any OS available, just request via ticket.
๐ณ Payment Methods
Debit/Credit Card, Cash App, and Bank Transfer (all processed via Stripe).
๐ Policies
- Terms of Service: gatewaysentry.com/tos
- Privacy Policy: gatewaysentry.com/privacy
๐ How to Get Started
- Register an account: control.gatewaysentry.com/register
- Once you're registered, type in the promo code
lowendtalkwhen prompted.
โฐ This promotional code lasts FOREVER for everyone who registers before May 31, 2026 (31MAY26).
Orders will be taken as they come in, please note it might take up to 24 hours to provision your service. (Excluding Web Application protection).
Questions? Reply in this thread or open a ticket. Happy to help.
Comments
Do you have IPv6 /64 and BGP full table and IPv9 native?
We do not support IPv6 just yet nor BGP,
We hope to soon support IPv10 native
Any plans to not use Sharktech as your single upstream?
https://lowendtalk.com/discussion/215525/upstream-provider-sharktech-linked-to-data-broker-team-cymru-selling-netflow-data
Always interested in seeing new mitigation providers come out, the market needs more options. Just wish they were all more ethically ran and whatnot.
GLWS
Hello MannDude,
We use Sharktech to be able to provide T1 upstreams like GTT NTT Cox and much more, The biggest problems with alot of providers out there is that we struggle to get high throughput services without insane amounts of traffic commit, Thankfully Sharktech has helped us by allowing lower commits for our massive amounts of ingress and egress traffic.
We do plan on adding more upstreams later down the line (Colocrossing/Hostpapa), talks are currently inprogress.
Thank you
yea... like manndude said. That is definitely an issue. Hopefully you guys can find a better provider that doesn't do that. It definitely possible to find providers that can meet those needs but just means more money out of your pockets.
We did some digging the only information that they provide to Cymru is botnet information, other than that all of these claims are extremely false.
Do you have an option to suspend/turn off the server or throttle the port to minimal say 100Mbps instead of billing the overage?
Hello @FatGrizzly,
That is currently in the development pipeline, currently we will send users a notice regarding their overage.
No IPv6 hall of shame
Include IPv6 for no extra cost on every plan in every location to get delisted.
Provider supplied looking glass and network benchmark reports must also demonstrate IPv6 reachability.
THOUSANDS of ISPs provide real time feeds to Team Cymru.
Let's not be hypocritical and shame only the few ones which were kind public about it, when this is an industry wide issue, and frankly, too big to be fixed at this point.
Just going to remind LET that this is Andy Feng / Bytefend / Limeshosting and the dozen other DDoS-attacking communities.
https://lowendtalk.com/discussion/172835/keep-away-from-bytefend-bytefend-threaten-to-launch-ddos-attacks/p1
Hello wdmg,
Please stop trying to slander our company, we've said multiple times that we have no association with those claimed above but yet your main focus is to get attention from us.
Thank you
We have given all the threads and information in that post a read and the reason why Sharktech went to Cymru, Was to provide attack information of the DNS reflectors that was targeting his business. This is very different from disclosing ALL traffic over to Cymru and saying that they are doing that is a very large assumption especially if they are publicly disclosing what information they gave up rather than keeping it under the hood.
I don't believe Sharktech should be shamed over this.
It would actually be a very logical assumption as that is a very common arrangement of ISPs with Team Cymru - mutual intelligence sharing.
They should not be singled out, when "everyone" is doing it. But of course it is shameful.
I agree that, that should not be the standard, I feel as if everything nowadays is collecting data about users haha, Can't even use Chrome incognito anymore.
Quick question. Was Andy, Gateway Sentry's CEO, involved with ByteFend at any point?
No, if we was associated with Bytefend we would have been suspended already, and unable to get the Provider tag.
Image removed. Will be sent to the mods.
Do you still wish to maintain that denial? I could go on, but I'll save the rest for the mods. If there's nothing to hide, admitting your affiliation and involvement should be straightforward
Save it for the mods, and or post about it. This is our last time responding to these accusations.
Thank you to everyone who shown interest and we welcome our new customers.
We are almost fully sold out, we didn't expect this much support.
Hopefully we have exceeded your expectations truly.
Kinda low bandwidth. i'd say atleast 8TB would be nice. anyways, mandatory GLWS to any ddos protection first provider.
Thank you,
The reason why we offer limited bandwidth options is due to us having to pay double egress on our network.
We run all users through our premium anycast offering T1 ISP's directly, GTT, NTT, Cox, China Mobile, China Telecom and much more, and yes all VPS servers have an anycast IP address linked to them.
If you would like to send us a dm and we can change you view on why its super worth it, we would love to show you the effort and technology behind our network!
I understand but I doubt anything can change my view because my view is based on my current setup which is a TURIN 6 core, 24 GB RAM 5Gbps @ 30-40TB per month at 9.9 euros a month.
@berohost
I get 2.5-2.9k single core geekbench6. I understand 9950X is a competitor but number of cores also matter. I doubt you'd be up to change your pricing to this for me but nonetheless, a ddos protection, if its really good, is always a plus.
Swing on over,
We can offer you a free 2CPU 4 GB ram VPS to test! if you enjoy it... well...
we will honor 6 CPU, 24GB Ram, 20GbE Chicago, 20TB bandwidth $3.5/TB overage, 9USD/month. We can make this onetime price drop for you! all we ask is an honest review.
(If you need EU we have Amsterdam but its limited to 1Gbps port.)
what about for me? kidding, gratis bump.
Shoot us a DM, I'm sure we can work something out!
Okay I'm really interested now. Possible to get a week trial before committing? Thing is, I live in Asia and US server is kinda far for me. That said, price to performance sounds really good so I wouldn't mind paying given my usecase. I'll move my stack to the VPS and if it works to my requirement, I will commit and a month later, I will post an honest review. How does that sound?
Sounds great, send us a DM.
OK Andy. I don't know why you feel the need to continue to lie.
@jbiloh hopefully you can see this.