Detection, Mitigation & Response

Detect and mitigate DDoS attacks in under 1 second, respond automatically, and keep your users informed.

All features →
1-Second Detection
Know the instant traffic spikes. PPS checked every second.
Attack Classification
Identifies 7 attack families with protocol-level confidence scores.
Node Firewall Rules
Per-server iptables, null-routes, CDN rules & scripts.
Cloud Scrubbing
Auto-divert to Cloudflare, OVH, or Hetzner on attack detection.
BGP Mitigation
Auto-deploy FlowSpec, RTBH blackhole & rate-limiting via BGP.
Multi-Channel Alerts
Discord, Slack, PagerDuty, OpsGenie, SMS, email, webhooks.
PCAP Capture
Full packet capture with AI-powered forensic analysis.
Layer 7 Detection
HTTP flood, credential stuffing, API abuse & bot detection.
Automated Runbooks
Chain mitigation steps into automated incident response playbooks.
Analytics Baselines Threat Intel & IOC Multi-Node Status Pages Correlation Audit Log Attack Profiles Flow Collection Mirror / SPAN Mode
Learn
Documentation Quick Start API Reference Agent Setup DDoS Protection Landscape State of DDoS 2026 REPORT Free Certifications Hackathon Sponsorships
Research & Guides
Server Nerd Comic NEW Mirai Botnet Kill Switch Research memcached Amplification Dynamic Baselines PCAP Forensics PagerDuty Setup
Company
About Us Partners Managed Protection Whitelabel / Reseller Affiliate Program Pay with Crypto System Status
Legal & Support
Contact Us Security Trust Center Terms Privacy SLA
Who Uses Flowtriq

From indie hosts to ISPs, see how teams like yours use Flowtriq to detect and stop DDoS attacks.

All Use Cases → Talk to Us →
Infrastructure
Hosting Providers ISPs MSPs/MSSPs Small Operators Routers Edge Node Defense Proxy Providers VPN Providers
Gaming & Entertainment
Game Server Hosting Game Studios Esports Platforms iGaming & Sportsbooks
Business & Emerging
SaaS Platforms E-Commerce Financial Services Compliance VoIP & Cloud Calling GPU & AI Cloud
Home/Integrations/Pterodactyl
Pterodactyl 1.11+ Auto Port Sync 20+ Games

DDoS Detection for
Pterodactyl Panel

Automatic port sync, game-aware protocol classification, and on-node firewall rules for every server your Pterodactyl panel manages. When a customer creates a game server, Flowtriq starts monitoring it automatically.

Read the full guide → Start free trial

How It Works

Pterodactyl Panel
Server created / updated
Flowtriq Addon
Syncs ports + protocol
ftagent (Wings node)
Monitors game ports
Detection + Mitigation
Alerts + firewall rules

Setup

Get started in three steps

1

Install ftagent on Wings nodes

Install ftagent on each Wings node. One command: pip install ftagent && sudo ftagent --setup. The agent runs alongside Docker and monitors all container traffic.

2

Install the Pterodactyl addon

Upload the addon to your Pterodactyl Panel directory, run php artisan flowtriq:install, and configure your API credentials. Then run php artisan flowtriq:sync to push all existing allocations.

3

Automatic from here

Every new game server, port change, or deletion is synced to Flowtriq automatically. The agent monitors service ports with the correct protocol classification. No manual configuration needed.

Capabilities

Built for game hosting at scale

Automatic Port Sync

The addon watches Pterodactyl's allocation table and pushes changes to Flowtriq in real time. Create a Minecraft server and port 25565/TCP is classified as service traffic within minutes. Delete the server and the port is removed.

Game-Aware Classification

Built-in protocol maps for 20+ games. Minecraft Java is classified as TCP, Rust as UDP, FiveM as both. The agent uses this to distinguish legitimate game traffic from attack traffic on the same node.

DOCKER-USER Chain Rules

Firewall rules are applied in the DOCKER-USER iptables chain, which is the correct chain for Docker container traffic. Standard INPUT rules do not affect containers. The agent handles this automatically.

Server Owner Visibility

The addon adds a DDoS status view in each server owner's panel. They see active protection status, active incidents, and recent attack history. This reduces support tickets during attacks.

Per-Wings or Central Mode

Run one ftagent per Wings node (recommended) for isolated per-node detection, or run a single agent in central mode for small deployments. Choose what fits your infrastructure.

Multi-Channel Alerting

Get notified via Discord, Slack, PagerDuty, OpsGenie, email, SMS, or webhooks when attacks hit any Wings node. Alert messages include the affected server, attack type, and mitigation status.

Protect your Pterodactyl game servers

Real-time DDoS detection with automatic port sync starting at $9.99/node/month. Free 14-day trial.

Start your free trial → Read the guide → Talk to us →
Also available on BuiltByBit | Agent on PyPI and Docker Hub

FAQ

Frequently Asked Questions

Does the addon work with Pterodactyl Panel 1.11+?

Yes. The addon supports Pterodactyl Panel 1.11 and later, including both Laravel 10 and 11. It uses standard Eloquent observers and Laravel events, so it is compatible with most Pterodactyl forks like Pelican.

Do I need one ftagent per Wings node?

The recommended deployment is one ftagent per Wings node (per-Wings mode). This gives you per-node detection, per-node firewall rules, and per-node incident history. You can also run in central mode with a single agent if you have a small deployment.

Does the addon sync ports automatically?

Yes. When a server is created, updated, or deleted in Pterodactyl, the addon automatically pushes the port allocations and protocol information to Flowtriq. The ftagent picks up the new configuration and starts monitoring those ports immediately.

Which games are supported?

The addon ships with protocol mappings for over 20 games including Minecraft Java (TCP), Minecraft Bedrock (UDP), Rust (UDP), ARK (UDP), FiveM/RedM (both), CS2/CSGO (both), and more. Games not in the built-in list default to monitoring both TCP and UDP.

How does detection work with Docker containers?

The ftagent applies firewall rules in the DOCKER-USER iptables chain, which is the correct chain for traffic routed to Docker containers. Standard INPUT rules do not affect container traffic, so this is handled automatically.

Can server owners see attack status in their panel?

Yes. The addon adds a DDoS status view to the server owner panel showing whether protection is active, any active incidents, and recent attack history with timestamps and classification.