Security
What is Null route?
A null route discards all traffic to an IP address, protecting the wider network by making the target completely unreachable. From the customer's point of view a null route is indistinguishable from a successful attack: the service is unreachable, which is precisely what the attacker wanted.
Why Null route matters
From the customer's point of view a null route is indistinguishable from a successful attack: the service is unreachable, which is precisely what the attacker wanted. It exists because the alternative can be worse — an attack large enough to saturate a shared uplink degrades every other customer behind it, so the address under attack is dropped upstream to protect the rest. A provider that reaches for null-routing quickly is telling you its scrubbing capacity is thin. OnionVPS filters first and null-routes only when an attack exceeds what the edge can absorb without collateral damage, and tells the affected customer when it happens rather than leaving them to diagnose an outage that has no cause on their server.
Null route in practice
When an attack saturates the edge, the address gets dropped upstream. You see the server go dark: no ping, no connections, and the panel shows the route as nulled. Costs you time diagnosing a problem that isn't on the box, and you lose the fight—the attacker wins. OnionVPS filters first and null-routes only when traffic exceeds what the edge can absorb without hurting neighbours. Check the panel first; if it says null route, wait it out and keep logs clean.
What people get wrong about Null route
People assume a null route means the attack failed. Wrong: it means your service is down, which is what the attacker wanted. The null route is a protective measure for the network, not a defense for your box. You're not getting scrubbed—you're isolated. The correction is to see it as a sign the mitigation capacity was exceeded, and plan for attacks large enough to trigger it.
Null route — common questions
What happens to my traffic when a null route is active?
All traffic to your IP is discarded at the network edge. Your server stops receiving anything, and connections drop. To outside observers, it looks exactly like a successful attack — the service is unreachable. It stays that way until the null route is lifted, which depends on the attack subsiding.
Does a null route affect other services on my account?
Only traffic to the specific IP address that is null-routed gets dropped. Other IPs on the same account — such as a different IPv4 or your IPv6 subnet — are unaffected. So if you have multiple addresses, you can often keep other services running while the attacked one is blackholed.
More from security
- LUKS
- LUKS is the standard Linux full-disk encryption format, storing key material in a header on the encrypted volume itself.
- DDoS
- A DDoS attack floods a target with traffic or expensive requests from many sources at once, to exhaust bandwidth, connection state or processing capacity.
- Traffic scrubbing
- Scrubbing routes traffic through filtering infrastructure that discards attack packets and forwards legitimate ones.
- fail2ban
- fail2ban monitors log files for repeated authentication failures and temporarily firewalls the offending addresses.