IP transit · from €5/month
Announce your ASN to the whole world
An IPv6 BGP session with AS218268, delivered over a tunnel and RPKI-filtered. No commitment, with real humans to help you set it up.
- Full table, default route or both
- WireGuard or GRE anycast tunnel, edge firewall and anti-DDoS included
Choose your plan
Monthly prices. Every plan includes the BGP session and the tunnel.
Transit EssentielAvailable
To announce your ASN to the whole world
5 €/month
No commitment, cancel anytime.
- 1 Gbps port
- IPv6 BGP session with your ASN
- A routed IPv6 /56 included
- Full table, default route or both
- Unlimited prefixes (those in your as-set)
- WireGuard or GRE anycast tunnel (Düsseldorf, Paris)
- Edge firewall included
- Basic anti-DDoSBasic anti-DDoS
For small attacks under 500 Mbps: they are filtered on our routers. Above 500 Mbps of attack traffic, the targeted IPv6 address may be blackholed to protect the network, then restored automatically 30 minutes after the attack ends. To absorb large attacks, choose a Protégé or Bouclier plan.
- RPKI and IRR (as-set) filtering
- No commitment
Transit ProComing soon
IPv4, private VLAN and priority support
10 €/month
Coming soon: write to us to be notified.
- 1 Gbps port
- Everything in Transit Essentiel, plus:
- 4 IPv4 addresses included
- Private VLAN to interconnect with an IX or your infrastructure
- Priority setup and support
- No commitment
Transit ProtégéComing soon
For game servers and exposed services
15 €/month
Coming soon: write to us to be notified.
- 100 Mbps of clean traffic, always filtered
- Everything in Transit Essentiel, plus:
- 8 IPv4 addresses minimum
- Volumetric attacks absorbed by Smartnet
- Game profile: common game attacks, ample capacityGame profile
Filters common attacks on game servers (UDP floods, spoofed game queries, amplification). Mitigation capacity is ample for the vast majority of servers.
- No commitment
Transit Protégé PlusComing soon
More clean traffic for your exposed services
30 €/month
Coming soon: write to us to be notified.
- 200 Mbps of clean traffic, always filtered
- Everything in Transit Essentiel, plus:
- 8 IPv4 addresses minimum
- Volumetric attacks absorbed by Smartnet
- Game profile: common game attacks, ample capacityGame profile
Filters common attacks on game servers (UDP floods, spoofed game queries, amplification). Mitigation capacity is ample for the vast majority of servers.
- No commitment
Transit BouclierComing soon
Mitigation from a global network
50 €/month
Coming soon: write to us to be notified.
- 250 Mbps of clean traffic, always filtered
- Everything in Transit Essentiel, plus:
- 16 IPv4 addresses
- Volumetric attacks absorbed by Gcore
- Advanced Game profile: more games and attacks covered, more capacityAdvanced Game profile
A higher Game filtering level: more games recognised and more attack types covered (game-specific application attacks, high-rate floods), with more mitigation capacity than the Smartnet plans.
- No commitment
- Bandwidth beyond 1 Gbps, on request
- Pro anti-DDoS up to 50 Gbps
- Game anti-DDoS: filtering built for game servers
- Volumetric mitigation up to 200 Tbps
- Dedicated L2 connection (VLAN, VXLAN)
- No ASN? We route a prefix to you
- Configuration help (BIRD, FRR, MikroTik)
- Direct technical contact
Included in every plan
Transit built for small networks and BGP enthusiasts.
Full table or default
The full IPv6 table, a default route, or both.
RPKI filtering
RPKI-invalid announcements are rejected, yours stay clean.
IRR filtering
We only accept prefixes registered in your as-set.
Anycast tunnel
WireGuard or GRE to a single address, served by the nearest PoP.
Anti-DDoS included
Your prefixes filtered on our routers, with a Game profile for UDP.
Edge firewall
Your rules applied on our side, before traffic enters your tunnel.
Ready-made config
WireGuard and BIRD ready to paste, in your client area.
No commitment
Billed monthly, cancel anytime.
Anycast, edge firewall and anti-DDoS
Your transit lands as close as possible, and unwanted traffic stops at our network, not yours.
Anycast
A single tunnel address, announced from Düsseldorf and Paris: you land on the PoP nearest your router.
Automatic failover
If a PoP goes down, your tunnel reconnects to another one on its own, with the same configuration.
Edge firewall
Block ports, protocols or sources from your client area: applied on every router within a minute.
Anti-DDoS
SYN floods, amplification (DNS, NTP, memcached…) and malformed packets filtered before your tunnel. Standard, Game and Strict profiles.
Available tunnels
Choose the one your router can bring up, and where it lands. We take care of the rest.
| Tunnel | Landing | MTU | Best for |
|---|---|---|---|
| WireGuard | Anycast or Düsseldorf | 1420 | Encrypted, works behind NAT or a dynamic IP. The recommended choice. |
| GRE | Anycast (IPv6) or Düsseldorf (IPv4) | 1456 / 1476 | The most widespread on routers (Linux, MikroTik, Cisco). MTU 1456 over anycast (GRE over IPv6), 1476 to Düsseldorf over IPv4. |
Your transit in 3 steps
From your order to your first BGP announcement.
1
Order online
Create your account, enter your ASN, your as-set and your router's IP, then pay.
2
We validate your ASN
Tunnel and session created on validation, configuration in your client area.
3
Announce
Your prefixes are visible worldwide via our upstreams.
IP transit FAQ
What to know before you order.
For all transit plans, yes: we set up a BGP session with your ASN. Without an ASN, the custom plan lets us route an IPv6 prefix to you.
Allow 24 to 48 h after we receive your ASN, your as-set and the IP on your side of the tunnel.
Yes. All plans are monthly with no commitment.
Transit Pro includes 4 IPv4 addresses, Protégé and Protégé Plus 8, Bouclier 16. The BGP session with your ASN stays IPv6; for more IPv4, ask for a custom plan.
Your prefixes are filtered on each of our routers, before your tunnel: SYN floods, amplification, malformed packets, and with the Game profile a per-source UDP limit. You choose the profile from your client area. During a volumetric attack, the Protégé and Protégé Plus plans route all your traffic through Smartnet's mitigation network, and the Bouclier plan through Gcore's: the attack is absorbed there and you only receive clean traffic.
Essentiel and Pro: best effort, up to 1 Gbps, the port speed. Anti-DDoS plans: 100 Mbps (Protégé), 200 Mbps (Protégé Plus) or 250 Mbps (Bouclier) of clean traffic, always filtered.
The Game profile (Protégé, Protégé Plus) covers common game attacks, with ample capacity for most servers. The Advanced Game profile (Bouclier) has finer filters and more capacity, and covers more games and more attack types.
Your tunnel points to a single IPv6 address, announced from all our PoPs (Düsseldorf and Paris today). The internet sends you to the nearest one, and if one goes down, you fail over to another without changing anything. Without IPv6 on your side, the tunnel lands in Düsseldorf.
From your client area, you add rules (block or allow a port, a protocol, a source) or close everything except what you allow. They are applied on our routers: blocked traffic uses neither your tunnel nor your bandwidth.
As many as you want: no limit, as long as they are registered in your as-set and RPKI-valid.
Discover the anycast tunnel
One address, the nearest PoP, automatic failover: how it works.
See the anycast tunnelComing soon: BGP VPS
An NVMe server with its own BGP session, no tunnel to set up. From €5 to €20/month.
See the VPSCheck our live upstreams
Our transit providers and the networks carrying your routes, measured by RIPE RIS.
See the network