How to build a secure network?

Question

network hardware

Good time experts. Pre history. There is a home server at home, due to periodic ddos, a new router was bought, which helped, after the attack they became stronger and even more problems began, as a result, I made a decision such that at the moment the Internet from the provider goes first to the server, it is filtered , then goes to the router and other devices. But again, there were problems, in that the Internet at home periodically falls off, then problems with iptables, then with ppp0, then something else and the devices at home constantly suffer because of this, as well as the server itself (the server itself is on debian 8) . The question is what equipment to buy for normal traffic filtering. Perhaps it is worth buying some kind of hardware firewall, if so, which models are the most normal in price, and so on. Thanks in advance
PS Do not offer to buy a normal hosting, etc.

Answer 1

Usually the network is built just the opposite - first, the router, which is assigned defensive functions, and then the server. It is the task of the router to filter traffic, it is specially designed for this. Do not just take "doshirak-models" from TP-Link and the like - they are for those who want to "set and forget" and often do not even change the admin password. You need to take a Mikrotik, a model like RB450G, if there are few machines, RB2011-UiAS, if there are more (or their newer counterparts).

Answer 2

The correct answer is buying a normal hosting. The home channel compared to the hosting channel (or the channel of any CDN that protects against DDoS) is a thin thread. Alas.

Answer 3

Buy a simple VPS (you can find ~ 65r per month), set up a VPN on it. Connect your home server through VPN. You forget about the white IP at home.