Routes you straight to the team. Every packet bound for your service passes through our multi-layered, in-house mitigation pipeline. Malicious traffic is dropped at each stage, so only clean traffic ever reaches your servers.
Already a 1of1 customer? This DDoS protection is already included with your services, so there's no need to purchase it.
Lightweight client that tunnels your traffic through our scrubbing network. Install, connect, and you're protected in seconds.
Not happy in the first week? Full refund, no questions asked.
Filtering on our own network. We can patch any attack.
No overage bills, no matter how big the attack.
Layer 4 and Layer 7 protection, tuned for game traffic.
Setup takes minutes. Keep the server you already have.
Mitigation runs 24/7, so you're covered from the very first packet.
Filtering happens on the path your traffic already takes, with no slowdown for players.
Every tier runs the same in-house mitigation pipeline. Here's exactly what you get at each level of protection.
Everything you need to get RemoteShield running on your server, from antivirus exclusions to your server.cfg and tunnel configuration.
1of1RemoteShield bundles a WireGuard tunnel driver, which antivirus software (including Windows Defender) can wrongly flag and quarantine. Add these exclusions before you install.
Fastest fix: open PowerShell as Administrator (Start Menu → type "PowerShell" → right-click → Run as Administrator), paste this, then download and run the app.
Add-MpPreference -ExclusionPath "C:\Program Files\1of1RemoteShield"
Add-MpPreference -ExclusionPath "C:\ProgramData\1of1Shield"
Add-MpPreference -ExclusionPath "$env:USERPROFILE\Downloads"
Add-MpPreference -ExclusionProcess "1of1RemoteShield.exe"Prefer to click? Windows Security → Virus & threat protection → Manage settings → Exclusions → Add an exclusion → Folder, then add C:\Program Files\1of1RemoteShield. If it is still removed, temporarily turn off real-time protection while you install.
Your unique tunnel token is generated in your 1OF1 dashboard once your plan is active. Open your panel, copy the configuration string, and keep it handy for step 4.
Tokens expire shortly after issue. Regenerate from your panel if yours has aged out.
Grab the Windows client and run it on your game server, then click Yes at the administrator prompt (it manages the tunnel service for you).
Paste the tunnel configuration from step 2 into the app and click Connect. The app enrolls, installs the background service, and brings the tunnel up, with no commands needed.
Give it a moment until the app shows Connected along with your Protected IP. That is the address you will advertise next.
In your server.cfg, bind to your Bind IP and advertise your Protected IP:
set sv_forceIndirectListing true
set sv_listingIpOverride "Protected IP"
set sv_endpoints "Protected IP:30120"Need to start over? If you have a new server, a stale config, or a stuck tunnel, click Uninstall in the app to remove the service and all local data, then paste a fresh configuration and click Connect again.