Looking for european budget host with decent DDoS protection

European budget host with decent ddos protection

My small site was knocked offline twice in july. Both times my current provider (HostHatch, Amsterdam) cited "mitigation exhaustion" and null-routed me for six to eight hours. No warning. No article 13 style due process. I require:

• Eu jurisdiction for gdpr alignment
• Actual ddos mitigation, not just marketing
• Budget under 10 eur monthly for single vps
• Decent network to central and eastern europe

I do not need unlimited bandwidth. I need my site to survive a 20gbps volumetric attack without disappearing. Fiberkoi and driftnode claim protection but I distrust claims without independent verification. Has anyone tested these under fire? Is there an nis2-compliant option in this price range?

I am using driftnode amsterdam now, is it? They go go upgrade the protection in march I am thinking, is it? No big announcement, just the network team do the thing. I check check my logs, one small attack in june, site stay up. Not big attack though, is it? 20gbps I do not know. I am coming back with more info now now.

Driftnode is the quiet one,,,,, They dont shout about the protection because the scrap gods dont reward marketing,,,,, They reward the iron under the floor,,,,, I have a 5 euro kvm there since 2023,,,,, Took a beating last black friday,,,,, Some script kiddie,,,,, 15gbps or so,,,,, Nullroute for twelve minutes then clean traffic resumed,,,,, No ticket needed,,,,, The scrap gods provide,,,,, ~~dave

Fio test: driftnode amsterdam 5 eur vps
read:  450 MB/s
write: 210 MB/s
net:   850 Mbit in, 720 Mbit out to helsinki
net:   420 Mbit in, 380 Mbit out to lagos

Decent disk io, meh network to africa. Ddos protection untested by me. Fiberkoi yabs from march:

fio test: fiberkoi stockholm 4 eur vps  
read:  380 MB/s
write: 195 MB/s
net:   920 Mbit in, 900 Mbit out to helsinki
net:   310 Mbit in, 290 Mbit out to warsaw

Fiberkoi claims 500 gbps protection. No proof seen. Driftnode claims nothing specific. Dave's report is only user data point I have. I used https://github.com/masonr/yet-another-bench-script for the yabs above.

What was the attack size on HostHatch exactly? They never say