Skip to main content

Remote DDoS Protection Setup

Last reviewed: July 9, 2026

Remote DDoS Protection works by keeping your real server IP private and publishing only your Protected IP. Attacks hit the Protected IP first, get scrubbed, and clean traffic is sent through the tunnel to your server.

warning

Do not publish your real server IP after protection is enabled. If your current IP has ever been exposed, request a new IP from your server provider and switch your server to it first.

Before You Start​

You will need:

  • Administrator access on your Windows game server.
  • Your Remote DDoS Protection tunnel configuration from the billing portal.
  • Your Protected IP.
  • Access to edit your FiveM server.cfg.
info

Tunnel tokens expire shortly after they are issued. If your token has aged out, click Regenerate in the billing portal and use the fresh configuration.

Allow the App in Antivirus​

The client bundles a WireGuard tunnel driver. Antivirus software, including Windows Defender, may incorrectly flag the driver or app. Allowlist the app before downloading and running it.

Fastest method: open PowerShell as Administrator and run:

Add-MpPreference -ExclusionPath "C:\Program Files\1of1RemoteShield"
Add-MpPreference -ExclusionPath "C:\ProgramData\1of1shield"
Add-MpPreference -ExclusionPath "$env:USERPROFILE\Downloads"
Add-MpPreference -ExclusionProcess "1of1RemoteShield.exe"

Manual method:

  1. Open Windows Security.
  2. Go to Virus & threat protection.
  3. Open Manage settings.
  4. Open Exclusions.
  5. Add this folder: C:\Program Files\1of1RemoteShield.
  6. If you use third-party antivirus, allowlist the app there too.

Install and Connect Remote Shield​

  1. Download the Windows client: 1of1RemoteShield.exe.
  2. Run the app on your game server.
  3. Click Yes when Windows asks for administrator permission.
  4. Copy your tunnel configuration from the billing portal.
  5. Paste the tunnel configuration into the app.
  6. Click Connect.
  7. Wait until the app shows Connected with your Protected IP.

The app enrolls your server, installs the background service, and brings the tunnel online for you.

Update Your FiveM Server Configuration​

In your server.cfg, add the block below right under your existing endpoint lines. Do not remove anything that is already there.

Replace PROTECTED_IP with your actual Protected IP.

## 1of1 Servers Remote DDoS Protection

set sv_forceIndirectListing true
set sv_listingIpOverride "PROTECTED_IP"
set sv_endpoints "PROTECTED_IP:30120"

## 1of1 Servers Remote DDoS Protection

Restart your FiveM server after saving server.cfg so the new lines take effect.

Starting Over​

If you need to remove the setup and start fresh, open the Remote Shield app on the server, click Uninstall, then paste a fresh tunnel configuration and click Connect again.