Ddosing a site through mysql phpbb?

Question

DDoS Protection

Hello, my site gives a 502 error. On the top command, I see that the entire cpu is loading mysql. I went there, brought out a list of processes

MariaDB [(none)]> SHOW FULL PROCESSLIST;
+--------+------------+-----------+-------+---------+------+----------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------+
| Id     | User       | Host      | db    | Command | Time | State          | Info                                                                                                                                                                                                                                                                                                                                                                                                                                                   | Progress |
+--------+------------+-----------+-------+---------+------+----------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+----------+
| 108764 | root       | localhost | NULL  | Query   |    0 | init           | SHOW FULL PROCESSLIST                                                                                                                                                                                                                                                                                                                                                                                                                                  |    0.000 |
| 108776 | phpbb_user | localhost | phpbb | Query   |    4 | Sending data   | SELECT COUNT(session_id) AS sessions
          FROM phpbb_sessions
          WHERE session_user_id = 1
          AND session_time >= 1572967576                                                                                                                                                                                                                                                                                                                       |    0.000 |
| 108778 | phpbb_user | localhost | phpbb | Query   |    1 | Sending data   | SELECT f.* FROM (phpbb_forums f) ORDER BY f.left_id                                                                                                                                                                                                                                                                                                                                                                                                    |    0.000 |
| 108779 | phpbb_user | localhost | phpbb | Query   |    4 | Sending data   | SELECT COUNT(session_id) AS sessions
          FROM phpbb_sessions
          WHERE session_user_id = 1
          AND session_time >= 1572967577

Everything is forgotten like this, increased the number to 50, scored immediately. I changed the domain, the attack stopped immediately. Through such actions, I realized that the site was being ddosed. phpbb is the latest version. Can you suggest how to proceed?

Answer 1

Muscle cache
limit unlogged
on regu captcha