DDOS protection

[Nassou]

Hi all ;

somebody know how to protect my apache webserver ?

because i receive an attack from different IP

[Dismounted]

DDoS protection should be done at the router point, if it reaches your server, it's already probably too far. Talk to your host.

[Angel-Wings]

Short answer - no.

dDoS attacks just overflood your servers with thousands or even more requests at the same time and there's no protection against that - except maybe taking down the server but the result would be the same.

Load balancing might help - until a special point but generally there's not much you can do.

[Brandon Sheley]

Here is a hack you might want to check out
https://vborg.vbsupport.ru/showthread.php?t=196791

[codershark]

Originally Posted by Loco.M

Here is a hack you might want to check out
https://vborg.vbsupport.ru/showthread.php?t=196791

this hack isnt against ddos

[Brandon Sheley]

ya, but I think it might be the best "mod" out right now for attacks
you can always pass protect your root url, and post the user and pass on the popup
but it will block the search engine spiders as well

[Angel-Wings]

Originally Posted by Loco.M

you can always pass protect your root url, and post the user and pass on the popup
but it will block the search engine spiders as well

Not if the dDoS overfloods the TCP Stack - then it doesn't matter if there's a 401 / 200 or whatelse reply - as long as the Webserver replies with something.

About pass protection the forum URL - you can still let some Useragents (Search Engine Bots) bypass the protection with LimitExcept / Limit directives still everyone who knows how to fake a Useragent can bypass the protection as well.

[Brandon Sheley]

well, it's what I did when I was getting ddos'd for days at a time and the forum ran great after you entered the login for the popup
maybe things have changed since then, it was 5 years ago.

[Marco van Herwaarden]

If the DDOS attacks the TCP stack, then no software solution will help. This would be best mitigaed by the host/datacenter at their outer border routers.

Most DDOS attacks i encounter are however attacking the web service. This kind of attack migth be stopped by an extra login.

[azn_romeo_4u]

Most DDOS protection is unprotectable at the software level. Massive DDOS protections are unprotecable by software or hardware. If it was just a regular DOS attack you could probably minimize the damage with stuff like apf firewall or mod_deflate.

I use for my apache server http://www.configserver.com/cp/csf.html Also I use www.litespeed.com that helps with DOS. Litepseed also speeds up my server way way way way faster than apache.

If you ever get DDOS just have your host null route for a few hours, but that's only if it's extremely severe. If not, you can block the IP with iptables or the CSF firewall. It has a nice UI for WHM.