How to protect yourself from DOS attacks on a server with Nginx?

Question

Nginx

Good afternoon bright minds. I ask for your help today.
There is a server on which the Vesta + nginx panel is installed. For 3 days there have been attacks from different ip addresses. I block one - they dosyat from the other, and so on, and eventually the site goes down with an error 500. How to protect the server? I would like detailed instructions. All day I read about various modules for ngixn, about testcookies and so on. But everywhere everything is somehow in general terms. In general, HELP, PLEASE!

Answer 1

And why not use the Cloudflare service and hide the IP of the site and there will be protection from small ddos ​​and bots, for free.

Answer 2

If you want to fight off simple attacks on your own, then there are recommendations https://serveradmin.ru/zashhita-web-servera-ot-ddos/ There about iptables, ipset, log analysis, refferer, nginx limit_conn and the like.

Answer 3

testcookie module