Separate VPS for DDOS protection?

Question

DDoS Protection

Hello, how can I implement secure DNS using a separate VPS to clear traffic through proxying? Is there an Open Source solution for this? To avoid contacting specialized providers. Interested for educational purposes.

Answer 1

https://github.com/duy13/vDDoS Protection

Answer 2

For educational purposes, maybe it's worth reading on Google then?
DDoS cannot be completely removed, in order to protect yourself, you need to understand what you want to protect and from what type of DDoS.
If we are talking about the simplest when the entire Internet channel is stupidly clogged, then the only protection is to have an Internet channel greater than the power of a DDoS attack. There is no way to do this on your knee through VPS.
All that can be beaten off by software is not DDoS, but pampering, which is usually treated through iptables / fail2ban or captcha on the site.
In general, there is no software to understand that this is DDoS and do something with it.
From ddos, everything will simply fall down for you, the rest is spam that is already being treated, depending on what kind of software you have, etc.

Answer 3

It's not clear to me what exactly you want to do.
Let's say we bought two ordinary, unprotected VPS from a hoster. An attack has begun, he writes to you: "Dear Psent1, 500 gbps / sec traffic is coming to your VPS "Mega_DDOS_killer_256_MB", we are nullrouting it." You have everything. What will you do next?
Such a solution clearly requires more than one machine, isolation from other DC clients, and most importantly, you understand how to repel attacks and what traffic to filter out.
If you don't want to buy this as a separate service, then look for a provider that provides DDoS-Protected VPSs or IP addresses. The monthly fee will be higher, but it will clearly be better than what you yourself can collect from non-designated services.

Answer 4

Use CloudFlare for educational purposes, the free plan will suffice.