How to build traffic reception between 2 VDS?

Question

linux

There are 2 separate VDS servers which are located on different hostings. On one of the VDS there is protection against DDoS attacks, and on the second there is no.

The essence of the task is to build traffic reception from vds-1 (with attack protection) to vds-2 (without attack protection). I need to make sure that all traffic goes to vds-1, if there is a DDoS attack, it is filtered and sends clean traffic to vds-2, while the IP address of vds-2 is masked by the IP address of vds-1.

Example:
Client -> vds-1 -> vds-2.
DDoS -> vds-1 (drop).

Answer 1

The domain must refer to IP VDS-1. On VDS1 nginx in reverse proxy mode to VDS-2 with X-Forwarded-For headers enabled. On VDS-2, you need to configure to accept connections only from VDS-1 IP, and in nginx, on VDS-2, extract client IP from X-Forwarded-For.
Not all anti-DDOS hosts allow their virtual servers to be used as a filter.