- 0
-
Posts
-
.thumb.jpg.020771498d0f162940c909002777c55e.jpg)
Added the protection module to the demo. DDoS Guard Pro v2.0 is a system protection module for PlayMMO CMS designed to reduce the load on the website during HTTP floods, bot activity, suspicious frequent requests, and attacks on individual pages or API methods. Unlike simple global limiters, DDoS Guard Pro v2.0 supports flexible rules based on routes and HTTP methods. This allows you to block the entire site in a targeted manner, rather than blocking the entire site equally. You can set up protection for specific areas of the site, such as login, registration, APIs, administration, forms, and other sensitive areas. What is the purpose of the module? DDoS Guard Pro v2.0 helps protect your site from basic L7 attacks at the HTTP request level. The module is useful when your site receives: frequent requests from a single IP address; HTTP page floods; login or registration form flooding; automatic requests from bots; URL scanning; frequent API requests; suspicious activity spikes; load on individual CMS methods or pages. The module helps to reduce the load on PHP and CMS by limiting suspicious activity before it starts to create a serious load on the site. Main features Per-route and per-method Rate Limit In the new version, protection is configured not only globally, but also according to specific rules. You can set limits separately for: GET; POST; PUT; PATCH; DELETE; ALL. This allows you to flexibly protect different parts of your website. For example: for the login page, you can set a strict limit; for registration, you can set a separate limit; for the API, you can set a limit for reading and a limit for changing data; for regular website pages, you can set a soft limit or not set a limit at all. This approach reduces the risk of accidentally blocking regular users and makes the protection more accurate. Flexible rule system The module supports setting rules in the following format: METHODS|PATTERN|LIMIT|WINDOW|BURST_LIMIT|BURST_WINDOW|BLOCK_SECONDS|IDENTITY|NAME Example of rules: POST|*login*|10|60|5|10|600|ip|login_post POST|*register*|8|60|4|10|600|ip|register_post GET|*api*|300|60|80|10|120|ip|api_get PUT,PATCH,DELETE|*api*|80|60|20|10|300|ip|api_write This allows you to specify exactly: which HTTP methods to protect; which URLs or URL patterns to consider; how many requests are allowed; over what time period; what burst limit to use; how many seconds to block the offender; by which ID to count the limit; what the rule is called. Burst protection against sharp spikes In addition to the regular request limit, the module monitors sharp spikes of activity. This is useful when a bot makes many requests in a few seconds. In this case, the protection can be activated faster, without waiting for the overall limit per minute. Burst protection is especially useful for: authorization pages; registration; API; search; data submission forms; administrative sections. Support for different types of requests DDoS Guard Pro v2.0 works not only with POST requests. The module can control: GET — regular pages, API requests, search; POST — forms, login, registration, data submission; PUT — updating data via API; PATCH — partial data update; DELETE — data deletion; ALL — all methods at once. This makes the module suitable not only for regular sites, but also for CMS with API, personal accounts, game panels and administrative actions. Limit storage: Redis, APCu and file fallback In the new version, the module supports several options for storing temporary data. Available modes: Redis; APCu; file fallback. The auto mode tries to use the most suitable option: Redis; APCu; file storage as a fallback. Redis or APCu are suitable for more efficient operation, while the file storage is left as a fallback option for simple hosting environments that do not have additional extensions. JSONL logging The module records protection events in JSON Lines format. Logs are saved in the following file: storage/logs/ddos_guard.jsonl This format is more convenient than a regular text log, because each event is stored as a separate JSON record. The logs can record the following information: event time; IP address; HTTP method; URL; name of the triggered rule; reason for blocking; number of requests; action status; user-agent; protection mode. The JSONL format is convenient for analysis by external tools, log agents, and monitoring systems. Prometheus metrics DDoS Guard Pro v2.0 adds an endpoint for receiving metrics in Prometheus format. Endpoint: /?ddos_guard_metrics=TOKEN The token is set in the module settings. Metrics allow you to track: the number of processed requests; the number of rule activations; the number of blocks; activity by limits; protection events; module status. This allows you to connect monitoring and configure alerts so that the administrator can see when suspicious activity starts on the site. LOG ONLY mode The module has a LOG ONLY mode. In this mode, DDoS Guard Pro does not block users, but only records events and potential triggers in the log. This mode is recommended to be used after installation, in order to first see which rules are triggered, and only then to enable the real blocking. This helps to avoid too strict limits and random blocking of regular users. Support for Cloudflare and proxy The module supports working behind Cloudflare or another reverse proxy. With proper configuration, it is possible to take into account the real IP of the user, and not the IP of the proxy server. This is important for sites that use: Cloudflare; nginx reverse proxy; load balancers; CDN; hosting proxy protection. Nginx-recommendations DDoS Guard Pro v2.0 contains an example nginx-config: modules/ddos_guard/nginx-ddos-guard-example.conf This allows you to use the module as an additional application layer of protection, and to move the main coarse limits to the nginx level. Recommended protection scheme: Cloudflare / nginx / firewall → DDoS Guard Pro → PlayMMO CMS This approach is more correct than trying to solve all problems only at the PHP level. -
-
-
-
-
-
Topics
-
Question
larroukos
Kalhspera sas melh tou MxC,
loipon ex9es apofashsa na dwsw allh mia eukereia sta ubuntu wste na asxoli9w mazi tous kai eida pws vgike nea ekdosh 11.04...
Ee loipon phga katevasa thn nea ekdosh thn ekana Install kai mou arese pragmatika para polu to ubuntu gt teleutaia fora to eixa dei se ekdosh 9 kai enta3h htan kalo ma oxi k toso...
Phra loipon thn apofash asxolh9w apoklistika me auto to logismiko authn thn epoxh, omws dn exw idea apo ka9e idous programmata gia auto to logismiko,
eixa omws akousta to wine p einai programma gia na trexeis programmata twn windows se linux k to antistrofo... to katevasa ma dn h3era kan pws na to kanw na tre3ei... (LoL k fusika dn ginotan apla me diplo klik, oute eixe de3i klik -> ektelesh).
H9ela loipon na rwthsw ean kanenas 3erei pws mporw na xrhsimopoihsw to wine sto ubuntu kai pou mporw na vrw mysql 5.1 k navicat full version k java gia ubuntu 11.04?
Epishs sumvoulevw osous exoun ena oxi kai toso kalo pc kai 9eloun na anoi3oun enan home hosted server gia thn parea tous xwris na exoun lag ka9olou na katevasoun ta ubuntu giati apla PETAN... Apla prepei na vreite ta programmata pou apetei gia na stisete ton server sas!!!
Euxaristw gia ton xrono pou 3odepsate wste na diavasete to topic m, k euxaristw ean me helparete...
30 answers to this question
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now