Before You Start
You'll need:
- A Discord account (used to log in to fiveshield)
- A FiveM server already running (any hosting provider)
- $10 CAD of starting balance — free on your first server while the trial promotion is running, otherwise a deposit that goes straight into your balance
- Access to your server's file system (so you can edit
server.cfg)
That's it. No DNS changes, no Cloudflare setup, no complex networking. The whole process takes under 5 minutes.
Step 1 — Connect With Discord
Head to the fiveshield anti-DDoS dashboard and click Log in with Discord. We use Discord OAuth — we never see your password. Your Discord account becomes your fiveshield identity.
Once logged in, you'll land on the dashboard where you can manage your servers, monitor player counts, and control your balance.
Step 2 — Create Your Server and Fund Your Balance
Click Create Server from the dashboard. You'll need to:
- Name your server — this becomes your fiveshield subdomain (e.g.
myserver.fiveshield.co) - Choose a proxy location — pick the region closest to where your FiveM server is hosted, not where your players are (on OVHcloud, the one matching your server's datacenter): BHS5, US-EAST-VA-1, US-WEST-OR-1, DE1, GRA9, RBX-A, SBG5, UK1, WAW1, SGP1 or SYD1. It can't be changed later.
- Start with $10 CAD of balance — this is never a fee: while the trial promotion is running it is credited free on your first server, otherwise you deposit it and it goes directly into your balance to pay for your daily usage
Either way that $10 covers the first days of protection. After that, billing is daily based on your peak player count — no contracts, no subscriptions.
Step 3 — Copy Your Configuration
From your server's dashboard, open the Install Guide. You'll see a personalized configuration block with your subdomain, API token, proxy IP ranges, and CDN key already filled in — nothing to edit. Click Copy to copy it to your clipboard.
Keep this private. The block contains your API token. Don't share it publicly or commit it to a public repository.
Step 4 — Paste it at the top of server.cfg
Open your server.cfg and paste the block at the very top of the file, before any other configuration:
endpoint_add_udp "0.0.0.0:30120"
endpoint_add_tcp "0.0.0.0:30120"
set sv_forceIndirectListing true
set sv_listingHostOverride "yourserver.fiveshield.co"
set sv_proxyIPRanges "..."
set mumble_maxClientsPerIP 9999
net_tcpConnLimit 65535
sv_listingIPOverride "yourserver.fiveshield.co:443"
sv_endpoints "yourserver.fiveshield.co:443"
sv_playersToken "..."
sets DDoS "Protected by fiveshield.co"
set adhesive_cdnKey "..."
fileserver_add ".*" "https://cache-yourserver.fiveshield.co/files"
This single block:
- Forces indirect listing through your fiveshield subdomain
- Sets your CDN endpoint and proxy IP ranges
- Registers your player token and txAdmin/listing overrides directly with FiveM — no separate resource needed
The endpoint_add_udp/endpoint_add_tcp lines already use the origin port from your server's connection settings — 30120 above is just the FiveM default. If your server listens on a different port, set it in the dashboard first, then copy the block again.
Why the top of the file? FiveM reads these settings in order, so fiveshield's listing and file-server overrides need to be applied before the rest of your config runs.
Step 5 — Restart Your Server
Restart (or start) your FiveM server. Once it's back up, your server is listed and routed through fiveshield — each connecting player is assigned a proxy instance in your chosen location automatically.
CDN caching is handled automatically via the fileserver_add line — resource downloads are served from Cloudflare's network (330+ cities) with no extra setup.
Optional but Strongly Recommended — OVH Edge Firewall
If your origin server is hosted on OVH (bare metal, VPS, or Game), finish the install by locking down the Edge Network Firewall so nothing but fiveshield and your own IP can reach the box. This is what prevents attackers from bypassing the proxy and hitting your origin IP directly.
In the OVH Manager, go to Bare Metal Cloud → Network → IP, find your server's IP, open the ⋮ menu → Configure the Edge Network Firewall, and add:
| Priority | Mode | Protocol | Source IP | TCP State |
|---|---|---|---|---|
| 0 | Allow | TCP | All | established |
| 1 | Allow | IPv4 | Your IP (e.g. 1.2.3.4) | — |
| 19 | Deny | IPv4 | All | — |
Then flip the Active toggle on in the top-right.
Critical: The Allow rule at priority 1 must have an IP filled in. Leaving the Source IP empty allows all IPv4 traffic and defeats the whole firewall.
You can add more Allow rules (priorities 2, 3, …) for each IP you want to whitelist — your home IP, your admin's IP, etc. fiveshield's own proxy traffic is already handled at a different layer and does not need to be whitelisted here.
What Happens Next
Once your server is running with fiveshield:
- Dashboard monitoring — real-time player counts, bandwidth stats, and cache hit rates
- Daily billing — charged based on your peak concurrent players each day (minimum $2.25 CAD/day)
- Automatic protection — DDoS attacks are absorbed silently, no action needed from you
- Cache management — purge CDN cache with one click when you update resources
Common Questions
What if my balance runs out? Your server will be disabled — all active player sessions are closed and proxy forwarding stops. Top up your balance from the dashboard to re-enable protection.
Does this work with txAdmin? Yes. fiveshield includes txAdmin panel protection at no extra cost.
Do I need to change my server IP? Not necessarily. Players connect through fiveshield's proxy and your origin IP stays hidden, but if that IP is already receiving attacks and you are not hosted with OVH, you will usually need to change your server IP so you can start from a clean address.
Where do I find my configuration if I need to reinstall? Open your server in the dashboard, click Install Guide, and copy the block again — it always reflects your current API token and settings.
Learn More
- What to check in a FiveM DDoS protection before you pay — the reference page on the three attacks and what stops them
- How to Hide Your FiveM Server IP (And Every Way It Still Leaks) — finish the job the OVH firewall rules above start
- The 11 proxy locations and the XDP filtering behind them — the architecture, and why same-location latency is < 0.5 ms
- Why every FiveM server needs a CDN cache — how the cache takes resource downloads off your origin
- Pay-per-player pricing explained — how daily billing works