Does REXE Apply Null Route? DDoS Protection Policy

Introduction

Null route (blackhole routing) is a method some hosting providers use during large DDoS attacks. All traffic to the attacked IP address — including legitimate traffic — is completely blocked, making the server inaccessible.

REXE Technology does not apply null routing.

Why We Don't Null Route

12 Tbps Global Network Capacity

Path.net has 12 Tbps of global network capacity. This massive capacity allows even the largest volumetric attacks to be absorbed.

Traditional Hosting:
Attack > Capacity → Null Route → Server Inaccessible

REXE + Path.net:
Attack > Any size → Filtering → Server Protected

Stateful Application/Game Filters

Path.net's stateful filtering technology works by understanding application and game protocols:

• Legitimate traffic is recognized and passed through
• Attack traffic is detected and blocked
• No packet loss or connection interruption

Protection Against the Most Sophisticated Attacks

Path.net filters protect against the following attack types:

Comparison with Other Providers

What Happens During an Attack?

1. Attack detected: Attack traffic is automatically detected in Path.net's global network
2. Traffic scrubbed: Attack traffic is filtered, legitimate traffic passes through
3. Server protected: Only clean traffic reaches your server
4. Notification: Attack details are displayed in the Path Panel attack history

Attack Start → Automatic Detection (< 1 second)
→ Traffic Scrubbing (Path.net Global POP)
→ Clean Traffic Delivery (REXE Servers)
→ Attack Logs (Path Panel)

Why Null Route Is Harmful

When null route is applied, legitimate user traffic is blocked along with attack traffic. This leads to:

• Service outage: Real users cannot access the server
• Revenue loss: E-commerce, game servers, or SaaS services go offline
• Reputation damage: Customers perceive the service as unreliable
• Attacker wins: The DDoS attack achieves its goal of service disruption

With REXE + Path.net architecture, null route is never applied. Regardless of attack size, only attack traffic is blocked; legitimate users maintain uninterrupted access.

Path.net Global Network Architecture

The technical infrastructure behind Path.net's ability to absorb DDoS attacks without null routing:

Anycast Network Structure

Path.net uses distributed anycast POP (Point of Presence) nodes worldwide. This structure ensures:

• Attack traffic is absorbed at the POP node closest to the source
• Attack traffic is cleaned before reaching REXE data centers
• Geographic distribution prevents load concentration at a single point

Hardware-Level Filtering

Path.net filters operate at the hardware level, not software:

• FPGA and ASIC based filtering hardware is used
• Billions of packets per second can be processed
• Filtering occurs with near-zero latency
• Server CPU is not affected by filtering load

Automatic Attack Detection

Path.net's machine learning-powered attack detection system:

• Detects attacks in under 1 second
• Automatically learns new attack vectors
• Monitored by a 24/7 NOC team

Conclusion

REXE Technology and Path.net partnership is one of the rare providers offering real DDoS protection without null routing. With 12 Tbps global network capacity, stateful filtering technology, and 24/7 NOC support, your server stays protected under all conditions.

Regardless of attack size — from a small UDP flood to a large amplification attack — Path.net's filtering infrastructure absorbs attack traffic and ensures only legitimate traffic reaches your server. This means uninterrupted service for game servers, web applications, and critical infrastructure.

For more information, check our Path Panel guide or attack logs guide. You can also view real-time attack statistics in the Path Panel Dashboard.