« previous next »
Pages: [1]

Author Topic: Mitigate Layer7 HTTP Flood with Nginx+Fail2ban in CWP  (Read 12197 times)

0 Members and 1 Guest are viewing this topic.

brijendrasial
Mitigate Layer7 HTTP Flood with Nginx+Fail2ban in CWP
« on: October 24, 2015, 07:12:32 PM »
Logged
Offline
cyfocus
*
Re: Mitigate Layer7 HTTP Flood with Nginx+Fail2ban in CWP
« Reply #1 on: November 06, 2015, 09:03:45 PM »
thanks for the tip!
Logged
------
https://CyFocus.com - Domain, Hosting, Ecommerce, SEO
Offline
aicon
*
Re: Mitigate Layer7 HTTP Flood with Nginx+Fail2ban in CWP
« Reply #2 on: November 17, 2015, 12:31:13 PM »
Thank you. This one works, but you need powerful CPU on each new attack.
(min 2 cores 2400GHz, depending on the attack volume)
Does not work with varnish is enabled, only nginx.
« Last Edit: November 17, 2015, 12:35:25 PM by aicon »
Logged
In case anyone wants $10 bonus for FREE on cheap cloud VPS from Vultr:
http://www.vultr.com/?ref=6855695
-------------------------------------------------------------------------------------------------
And $10 bonus for FREE on cheap cloud VPS from Digitalocean:
https://www.digitalocean.com/?refcode=c41029801394
Offline
mozev
*
Re: Mitigate Layer7 HTTP Flood with Nginx+Fail2ban in CWP
« Reply #3 on: December 22, 2016, 06:37:40 AM »
it works even when you turn on varnish

just add "set_real_ip_from   SERVERIP;" to your nginx.conf
Logged
Offline
CyberCr33p
*
Re: Mitigate Layer7 HTTP Flood with Nginx+Fail2ban in CWP
« Reply #4 on: August 03, 2017, 09:38:31 AM »
Quote from: mozev on December 22, 2016, 06:37:40 AM
it works even when you turn on varnish

just add "set_real_ip_from   SERVERIP;" to your nginx.conf

It will only work if you have varnish on the same server. Because if you use varnish in different server the connections are made from varnish server IP, so blocking the real visitor ip makes no sense.
Logged
Pages: [1]
« previous next »