Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

This question already has an answer here:

I was just wondering what would be the best way to stop a VPS from being attacked, bandwidth would be a problem in this case so methods that reduce the amount of incoming attacks and stop sending outgoing data would be great. I've been looking for some open source linux projects that can auto detect on an assumption of an attacker however I can't seem to find any success. Just wanted a good idea of some solutions or methods of reducing or stopping a DDOS attack.

share|improve this question

marked as duplicate by Adi, NULLZ, Xander, Terry Chia, TildalWave Dec 1 '13 at 4:02

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

up vote 1 down vote accepted

There are many OS-level solutions to protect against application- and transport-layer DoS attacks, like SYN cookies, Apache modules, etc. However, to protect against a full bandwidth flood, unfortunately there is little you can do, as it is a function of the pipe of your VPS provider.

One good solution (which will also help you with the other kinds of attacks at the same time) is to point your domain at a DDoS-protection provider like Cloudflare:

They can basically soak up attacks of almost any size. The key, however, is to make sure that no one can determine the real IP address of your server once the domain is behind Cloudflare.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.