We have decided to outsource our DDoS protection, as we found measures provided by many data centres to be inadequate when hosting game servers. By GRE tunneling from a nearby DDoS protected node to our destination node, we can make use of the superior DDoS protection that is provided by the first node. As both the protected node and the destination node (where client's services are actually hosted) are so close, latency is only increased by approx. 10ms. This means our clients can receive up to 3500Gbps+ (and 700M PPS) of DDoS protection, which usually far exceeds that of other providers, and still enjoy excellent ping times.