Setting up iptables on ubuntu server

Question

Apache HTTP Server

There is a server with a raised Ubuntu Server 10.10, an SSH server and Apache are raised. The server is regularly subjected to a DDoS attack, and falls from the simplest LOIC. Could you tell me how to configure iptables so that this does not happen again? Please do not suggest nginx, in this case the task is specific and only Apache is suitable.
Thank you.

Answer 1

So put nginx as a proxy in front of Apache, since you need Apache. It will become much easier

Answer 2

Fail2ban configure it to ban those who pull Apache too often.
Well, a little more difficult to set up, but more effective as a banomet - denyhosts.

Answer 3

I recently encountered a similar situation on a local project.
used deflate from medialayer dot com + JS redirect to fake domains that were CNAME to the second level domain.
The second moment saved us from a heavy load on apache, as a result of which the machine used 100% of the resources and made it possible for the script to work.
Unfortunately, the programmers who wrote the project did not take care of caching, we periodically suffer from DDoS.