Game Server DDoS Filter Selection Guide (Path.net)
Path.net DDoS protection game filters guide: Arma/DayZ, Source Engine, CS:GO, CS2, FiveM, Minecraft, Rust and more — how to apply each filter.
Complete REXE Path Panel user guide: Dashboard, My IPs, TR protection status, rule management, attack history, abuse filtered, password change and API access.
REXE Path Panel is the DDoS protection management interface offered to REXE Teknoloji customers. As a User (end user), you can manage the rules of the IP addresses assigned to you, monitor your attack history, and apply ready-made protection profiles through this panel.
Backed by Path.net's global 12 Tbps network capacity, this system performs stateful filtering at the L3/L4 layer, ensuring that only legitimate traffic reaches your server.
You can access Path Panel directly at x.rexe.tr.
When you log in, the dashboard page opens. Only data belonging to the IP addresses assigned to you is shown here.
Only data for the IPs assigned to you is displayed on the dashboard. Other users' data is not visible.
Menu: My IPs
You view the IP addresses assigned to you on this page.
| Column | Description |
|---|---|
| IP Address | IP address assigned to you |
| Protection | TR /32 protection status on the router |
| Default Block | Automatic blocking status (Yes / No) |
| Creation Date | Date the IP was added to the system |
You do not have permission to add, delete or assign IPs to other users. IPs are assigned to you by your parent user (Reseller or Manager).
Each IP's Protection column shows the TR /32 protection status on the router:
| Status | Description |
|---|---|
| TR Protected | Protection active |
| TR Unprotected | Protection off |
| Queued | Operation queued |
| Applying | Protection enable operation in progress |
| Removing | Protection disable operation in progress |
| Error | Operation failed |
Protection status on this page is view-only. Enabling/disabling protection is done by your parent user (Reseller/Manager) or Admin.
Each IP's default block status is shown as "Yes" or "No". Default Block is managed automatically by the system based on the rule state of your IP:
| Rule State | Default Block | Result |
|---|---|---|
| No rules | None | All ports open |
| At least 1 rule | Added automatically | Only allowed ports open |
| All rules deleted | Removed automatically | All ports open again |
Default Block management is done by your parent user or Admin; on this page you only view the status.
When you click an IP address, the rule management page opens. On this page you manage the firewall rules belonging to your IP.
| Column | Description |
|---|---|
| Filter | Applied DDoS filter |
| Protocol | TCP or UDP |
| Port | Target port number |
| Source | Source IP/range |
| Status | Rule synchronization status |
| Comment | Rule description |
The rules you newly create appear at the top of the list. The rule creation screen has two modes: standard filter (protocol + port only) and hard filter (you pick one of the game or application filters). For SSH, RDP, and most services the standard mode is enough; both modes operate at Layer7 and track connection state, the only difference with a hard filter being application-specific packet inspection, and TCP Symmetric is just one of those hard options. You can create rules from Path Panel (x.rexe.tr) or from the Rule Management product in your customer panel.
The moment you create your first rule, Default Block kicks in and all disallowed ports are closed. For this reason, be sure to include your management port such as SSH (port 22) or RDP (port 3389) in your first rule set; otherwise your connection to the server will be cut when the rule becomes active.
The rule form does not have a direct ICMP option. To open ping (ICMP) traffic, use the "Ping On/Off" toggle at the top of the rule page. When the toggle is turned on, an ICMP rule is created automatically; when turned off, it is deleted.
Ping Toggle: OFF → ON
→ ICMP rule created automatically
→ Ping responds after the rule is published
If you want to send an MTR test or check server access with ping, you must first enable ICMP.
The ICMP/Ping rule also counts as a rule. When you turn on the Ping toggle while there are no other rules on your IP, Default Block kicks in automatically and disallowed ports are closed. Make sure you also create rules for your management ports (SSH/RDP).
| Status | Description |
|---|---|
| pending | Rule created, waiting to be sent to Path.net |
| synced | Rule successfully sent to Path.net |
| propagated | Rule propagated to all network nodes (full protection active) |
| failed | Submission failed — can be retried with the retry button |
Publishing a rule (propagating it to all network nodes) can take 2-5 minutes. During this period the rule gradually takes effect.
Even if the rule appears not yet propagated in the panel, it has most likely already been published within 2-5 minutes. Due to reasons such as the panel's status check interval, the status may update with a delay; this is only a visual delay, the port has actually already been opened in the system.
Click the delete button next to the rule. The rule is removed from both the panel and Path.net.
A retry button appears next to rules in the "failed" status. By clicking the button you can resend the rule to Path.net.
Presets let you apply frequently used rule combinations with a single click.
Preset rules are shown grouped in the table and can be deleted in bulk.
Menu: Attack History
You view the history of DDoS attacks made against your IPs.
| Column | Description |
|---|---|
| Target IP | Target of the attack |
| Reason | Attack type (e.g. volumetric attack) |
| Detail | Attack detail (e.g. UDP flood, TCP SYN flood) |
| Peak BPS | Highest bits/second value |
| Peak PPS | Highest packets/second value |
| Start | Time the attack started |
| End | Time the attack ended (empty if ongoing) |
Attack data is automatically updated every 5 minutes.
Menu: Abuse Filtered
You view your IPs that have been filtered on the Path.net side due to abuse.
Menu: Panel User Guide
This is the page where you view guide content specially prepared for you, organized into categories, about how to use the panel's features.
If API access has been enabled by the Admin, additional pages appear in the left menu.
With endpoint details, a response codes table and the "Try" feature you can test directly. The endpoints you can use:
Base URL: https://x-api.rexe.tr/api/v1/external — the paths below are appended to this address.
| Endpoint | Method | Description |
|---|---|---|
/health | GET | API connection check |
/ips | GET | IP list |
/rules | GET | All rules in the user + their hierarchy |
/rules/count | GET | Total rule count (hierarchical) |
/rules/count/ip/:address | GET | Single IP rule count |
/rules/count/ip/:address/:prefix | GET | CIDR/subnet rule count (max /20) |
/rules/ip/:address | GET | Rules belonging to a single IP |
/rules/ip/:address/:prefix | GET | CIDR block rules (max /20, aligned to network address) |
/rules | POST | Create a new rule |
/rules/:id | DELETE | Delete a rule |
/filters | GET | Filter list |
/attack-history | GET | Attack history |
Common error codes: 400 validation error, 401 invalid API key, 403 resource out of scope, 404 not found, 409 conflict (e.g. same IP + port), 500 server error.
For all API requests you must send your key with the X-API-Key header:
curl -H "X-API-Key: YOUR_API_KEY" https://x-api.rexe.tr/api/v1/external/ips
IPs are assigned to you by your parent user (Reseller). No IP may have been assigned yet; contact your Reseller.
When creating a rule, only the filters permitted to you are shown. For more filters, contact your Reseller.
Click the retry button. If the problem persists, report it to your parent user.
No attack may have been made against your IPs yet, or your IPs may not have been assigned yet.
You can access Path Panel directly at x.rexe.tr.
No. The TR protection status on the My IPs page is view-only; enabling/disabling protection is done by your parent user (Reseller/Manager) or Admin.
If there are no rules on your IP, all ports are open by default and you can connect directly. The moment you create the first rule, the system automatically adds a Default Block and only the ports you allow remain open. For this reason, also add a rule for SSH (port 22) or RDP (port 3389) to your first rule set; select TCP as the protocol and enter the relevant port as the target port (standard filter mode; hard filter (Layer7) options like TCP Symmetric are only needed for highly sensitive applications).
Path.net DDoS protection game filters guide: Arma/DayZ, Source Engine, CS:GO, CS2, FiveM, Minecraft, Rust and more — how to apply each filter.
Path.net DDoS protection application filters guide: OpenVPN, Wireguard, DTLS, RTP, QUIC, SIP, TCP Symmetric and more — how to choose the right filter.
REXE Technology and Path.net null route policy: With 12 Tbps capacity, your server stays protected regardless of attack size — no null routing ever applied.