@Nuggets The ICE adapter exposes your real IP address, even when you’re using a VPN. This has been tested. Check IceMsg

I have an idea for a DDoS protection solution: use a VPN server and run host-to-host gameplay inside that server. The ICE adapter already supports this. We just need to add a checkbox/option to launch the ICE adapter without STUN/TURN servers to preserve confidentiality. Ideally, FAF would spin up 2–3 servers that players could connect to using their FAF username/password (or another method). Any DDoS inside the VPN would mean an immediate account ban, since the source is clear. Externally, the VPN’s cloud IP would rely on the provider’s built-in DDoS protection (which they already have). Please consider this approach.