5
edges in 4 independent networks
Distribute
Attacks don’t hit one server but five edges in four independent networks. If an edge fails, DNS redirects visitors to the others within seconds.
- Home
- CDN
Fast. Protected. From Germany.
Websites, Minecraft servers, DNS and services from home behind one network with edges across Germany – with DDoS and bot protection, automatic certificates and a portal that tells you what to do. No US cloud services; all data stays in Germany.
- Free plan, forever
- no credit card required
- set up in minutes
- edges across Germany
- Nationwide
- permanent starter plan
- Free
- protection in four layers
- DDoS
- Minecraft Java Edition
- From 1.8
How it works
Your server stays. The CDN sits in front.
Visitors and players connect to the nearest CDN edge. It passes clean requests on to your server; attacks and bots end there.
- 1
Sign up for free
Create an account and start with the free plan, forever – no credit card.
- 2
Add a website or game server
The wizard detects your DNS provider and shows you exactly which record to change. For Minecraft there’s a plugin and mods – or the PROXY protocol.
- 3
Done – protected and faster
From now on, traffic runs through the CDN – every user via the edge near them. Attacks end there; your server stays where it is.
DDoS protection
DDoS protection in four layers. Before anything reaches you.
An attack has to get past all four layers – most end at the very first.
0
open ports with Expose Host
Hide
Nobody can attack an address they don’t know: origin protection for websites, the plugin for Minecraft, Expose Host without any open port.
200
requests/s per IP – default limit
Filter
On every edge: connection and rate limits per IP, invalid packets dropped, bot checks, WAF, country blocking – and “under attack” mode in an emergency.
24 h
served from cache during outages
Absorb
Whatever is in the cache, the CDN serves itself – even while your server is under load, for up to a day. The Minecraft server list comes entirely from the edge.
Products
One portal. Six building blocks.
Everything runs over the same edges and can be combined – for example a website behind a device at home, or game servers in your own DNS zone.
Websites & WordPress
Caching, HTTPS, HTTP/3, redirects and a WordPress plugin that purges exactly the pages that changed.
Learn moreDDoS protection
Four layers against attacks: distribute, hide, filter, absorb – with rate limits, WAF, bot and AI crawler control.
Learn moreMinecraft
Hidden IP, bot protection, a queue, your own server list entry and the fastest edge for every player.
Learn moreDNS management
Move zones without downtime, DNSSEC, DynDNS and a history that can undo every change.
Learn moreLoad balancers
Spread HTTP(S) or TCP/UDP across multiple servers – the CDN removes failed ones automatically.
Learn moreExpose Host
Publish services from home without port forwarding – DDoS-protected, with SSH in the browser and time-limited remote desktop.
Learn more
Expose Host · kh-tunnel
Publish services from home. No port forwarding, DDoS-protected.
NAS, Home Assistant, web server or Minecraft server in your home network: the kh-tunnel client connects to the CDN from the inside. No open port on your router, no static IP – and your home address stays hidden.
- Works behind DS-Lite and CGNATEven on fiber and mobile connections without their own IPv4 address.
- With everything the CDN offersHTTPS certificate, caching, WAF, bot and DDoS protection – just like any website or game server.
- Only for your teamOptionally, only people signed in to the portal get through.
- SSH in the browserPlus time-limited remote desktop – no VPN needed.
Edge locations
Edges across Germany. Short paths for every user.
Visitors and players automatically connect to the edge nearest to them – in Berlin, Wolfsburg, Düsseldorf, Frankfurt am Main or Baden-Baden. That shortens paths, speeds up loading times and lowers ping.
- edges
- 5
- cities
- 5
- networks (AS)
- 4
- Nearest edge, automaticallyVisitors land on the nearest healthy edge; the plugin sends players to the fastest one when they join.
- Separate networks, maximum resilienceThe edges run with different providers in independent networks (AS). If a data center or an entire network fails, DNS redirects visitors to the others within seconds.
- Two cache tiersWhat an edge doesn’t have yet, it fetches from the shield in Frankfurt – your server is only asked once.
- Redundant DNSThe two name servers of the CDN zone are also located in two different networks.
Benefits
One network for all of Germany. For websites, game servers and more.
Six reasons why KernHosting CDN is worth it.
Servers in Germany
Edges in five German cities and separate networks, a cache shield in Frankfurt – no US cloud services, GDPR-compliant, IP addresses stored only in truncated form.
DDoS protection
The CDN stops DDoS attacks, bot waves and login floods before they reach your server.
Game server protection
Minecraft servers with a hidden IP, bot protection, a queue and the real player IP – from 1.8 to today.
Fast websites
Caching at the edge near you, compression and HTTPS with automatic certificates – no configuration effort.
Everything in one portal
Websites, game servers, DNS, load balancers and devices in one place – with clear hints on what to do.
Start for free
A free plan, forever, to get going – larger plans when you need them.
Comparison
KernHosting CDN or Cloudflare? An honest comparison.
Cloudflare is strong if you need a global network or edge computing. If your visitors and players are mainly in Germany and data protection matters, KernHosting CDN is the better fit.
KernHosting CDN and Cloudflare compared
| KernHosting CDN | Cloudflare | |
|---|---|---|
| Headquarters | Germany (Kaisen.group, Leipzig) | USA (San Francisco) |
| Edge locations | 5 cities in Germany, 4 independent networks | Around 340 cities in more than 130 countries |
| Data processing | Only in Germany by default – servers, databases and statistics | Worldwide; restricting to regions only as an Enterprise add-on (Data Localization Suite) |
| Cookies for your visitors | None – only one technically necessary cookie in “under attack” mode | Depending on features, e.g. __cf_bm (Bot Fight Mode) and cf_clearance after a challenge |
| Free plan | Yes, forever | Yes |
| DDoS protection | Yes – in four layers on every edge | Yes – unmetered, on all plans |
| Minecraft protection | Own plugin: real player IP, bot protection, queue, custom server list, fastest edge | Via Spectrum, according to Cloudflare from the Pro plan |
| Load balancers | Included in the portal – HTTP(S) and TCP/UDP | Paid add-on, from US$5 per month |
| Publishing services from home | Expose Host (kh-tunnel) – with SSH in the browser and time-limited remote desktop | Cloudflare Tunnel |
| Support | In German and English, requests right in the portal | Free plan: community forum and documentation; tickets from Pro |
| Edge computing and storage | Not offered | Workers, Pages, R2 and more |
Information about Cloudflare according to cloudflare.com (plans, company, Data Localization Suite, Cookies, Spectrum for Minecraft), as of November 2026, without guarantee. Cloudflare is a trademark of Cloudflare, Inc. Want to move? See DNS management.
Your account
You always know what’s going on.
Notifications
On outages, lag, certificate or quota problems – via email (instantly or as a daily digest), Matrix, ntfy, Slack, Mattermost, Discord or webhook.
Your own status page
A public page for your visitors and players: Is everything running? Is there maintenance? With availability for the last 90 days.
Monthly report
On the 1st of every month, your numbers by email: traffic, cache share, players, blocked attacks, availability.
Team with roles
Owner, manage or read-only – with an activity log of who changed what and when.
Secure sign-in
Two-factor authentication with recovery codes and an overview of all signed-in devices – optionally mandatory for the whole team.
API for everything
Everything the portal can do, also via REST API – with documentation, an OpenAPI description and read-only keys.
Support in the portal
Open a request for a service – its name and incidents from the last 7 days are attached automatically.
Help center
Guides on websites, game servers, DNS and devices – searchable, no login required.
For hosters
Game server hosts protect their customers’ servers through a dedicated interface right from their own panel.
Plans
Start for free. Grow when you need to.
With the free plan you can get going right away. If you need more traffic, more services or additional features, request a larger plan – we activate it after a short review. No hard cut-off: at 80 % and 100 % of your traffic you get a notification, and your websites stay online.
Plans differ in quotas and features, such as the WAF, “under attack” mode, attack reports, player profiles, the queue or your own status page. Vouchers, a trial period and a referral program (a bonus for both sides) are available in the portal under “Gutscheine & Partner” (vouchers & partners).
Privacy & location
Your data stays in Germany.
Servers, databases and statistics of KernHosting CDN are located in Germany – without Amazon, Google, Microsoft or other US cloud services. IP addresses are truncated (IPv4 /24, IPv6 /48) before they leave the edge. Individual requests are deleted after 7 days; only totals remain after that. The CDN sets no cookies for your visitors.
- Edges and shield in Germany
- No US cloud services
- IP addresses stored only in truncated form
Do I have to move my server?
No. Your server stays where it is. You only change one DNS record – the wizard in the portal shows you exactly which one, and with many providers it can even set it for you.
What does it cost?
Nothing to get started: there’s a free plan, forever. You can see larger plans when you sign up and at any time in the portal.
What happens when my traffic runs out?
You get a notification at 80 % and 100 %. Your websites stay online – we get in touch instead of simply switching you off.
Where are the edges?
In Berlin, Wolfsburg, Düsseldorf, Frankfurt am Main and Baden-Baden – spread across different providers and independent networks. Visitors and players automatically land on the nearest healthy edge; the status page shows the current state.
Am I protected against DDoS attacks?
Yes – in four layers: traffic is spread across five edges in four independent networks, your server IP stays hidden, the edges filter with limits, bot checks and WAF, and the cache keeps serving under load. More on the DDoS protection page.
What is Expose Host?
The service for publishing servers from home through the CDN: the kh-tunnel client connects to the edges from the inside – without port forwarding and without a static IP. In the portal you’ll find it under “Geräte” (devices). More on the Expose Host page.
What happens if a data center goes down?
Nothing your visitors will notice: the edges are located in different cities and independent networks (AS). If one fails, DNS redirects visitors to the others within seconds.
Can I switch from Cloudflare?
Yes, without downtime: import your records with a Cloudflare token, switch name servers, done. What Cloudflare features are called here is shown on the DNS management page.
Where is my data stored?
Exclusively on our servers in Germany, without US cloud services.
Can I automate the CDN?
Yes. Everything the portal can do also works via the REST API – with an OpenAPI description for Postman, Insomnia or your own client.
Get started
Protected in minutes. Start for free.
Free plan, forever · no credit card required · set up in minutes