How to protect your home Server from DDoS attacks?

Question

Computer networks

Is it possible to somehow secure your Home Server (home network) from DDoS attacks LDAP, DNS, UDPMIX, at least from 1Gbps - 20Gbps DDoS attacks? There is an Internet channel 1 Gbit / s (optics) as well as a mikrotik CRS212-1G-10S-1S + IN router. (As far as I know, almost all mikrotik models have the same OS and, in principle, the difference in throughput and a larger / smaller number of ports). What equipment to buy to repel such attacks?
I heard that even if you purchase hardware "filters", the Internet channel (pipe) from the provider will still clog up during a large DDoS attack ((
Are there any solutions to this?
Thanks in advance.

Answer 1

With DDoS on the "Home Server", the provider will simply disconnect you, what the hemorrhoids for him. Therefore, you can simply not bother about this.
Shl yes damn it, if there is such an attack on you, it will first kill the provider's channel to you and all those whom he connected on this "last mile". It makes no sense to put protection on your point, at least it must be done in levels higher.

Answer 2

There are no DDOS attacks on home networks. Because at first the attack will go to the equipment of the dip, which will simply turn you off until it is clarified. Traffic - it does not fly through the air - it goes through the wires. And Provo nafig such troubles.

Answer 3

You can use services like Cloudflare to disguise your home server.

Answer 4

That is, buying an iron filter for 15k bucks does not bother you, but for some reason you cannot buy 10 gigabit channels home)))

Answer 5

Did you solve the issue? if so, write me a PM like vk.com/roma_chepiga
It’s the same thing that you need to protect the ipsnik from l4, but the provider doesn’t protect bare at all, there is one idea how to protect yourself, but I don’t know if it will work or not
In general, if you proxy the ipsnik with some other host, that is, create a vpn on some foreign host where l4 protection is normal and create a vpn there and connect to this vpn from the IP address that you need to protect and make sure that traffic from your IP address goes to it and everything should work like on the main IP, like that So