New on LowEndTalk? Please Register and read our Community Rules.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
Comments
Ddos deflate is so old as my grandfather. CSF is a great free option that wont help so much in ddos attacks.
Ddos deflate is a script, csf a firewall
ive tested ddos delate it handle small-mid size ddos attack from booter.xyz
is they working as the same ? following ips and if found number of request in low time after some number or request he ban the ip?
used apf+ddos deflate
what should i use ?
ddos deflate+apf or csf+lfd
If you don't know how to use them, use neither in a production environment.
i've used apf+ddos defalte in the old server just people told me about csf+lfd so im asking for advice ..
whats the diffrents between them ?
use csf + mod_security + mod_evasive + ddos deflate
Basically DDOS deflate is a script that assumes, incorrectly, that it can prevent floods at the server level. CSF is a generic and excessive set of firewall rules, LFD is basically fail2ban.
Lets just be clear.
You cannot prevent a DDoS using software. It saturates the link before even reaching your server.
should i install csf+ddos deflate instead apf+ddos deflate ?
does csf + ddos deflate will get any conflict?
?
no conflict at all
DDoS Deflate uses CSF or APF for banning IP with high number of connections. So of course you can choose and use both of them.
cloudflare can protect your website much better, then any CSF / or APF or DDoS Deflate.
In 2015, you can't protect your server against any DDoS attacks by yourself. You always need 3rd-party provider to help you.
neqste i know i just reinstall ios but cloudfalre did not really help against ddos attack when i was using ddos deflate my server not suffer 1min of downtime in attack for like 12 hours.
more then 600 ips been blocked by deflate so i guess its working :P
@Ishaq
You can prevent Layer 7 DDoS attacks with software. DDoS deflate/fail2ban is good for this.
These scripts won't really protect from DDoS.
don't forget lfd!
I personally prefer APF+BFD over CSF+LFD. I feel CSF is clunky.
I agree ddos deflate doesn't do much. DDoS protection is always on the network hardware side.
software mitigation's a great help in lieu of network filter/vacuum, and they should work well together too. Been a tad lazy since getting network mitigation and not tried having 'em work together (csf + lfd + mod_security + mod_evasive + ddos deflate + network protection)