https://github.com/fnzv/net-shield

An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices - Beta
https://github.com/fnzv/net-shield

antiddos ddos-detection ddos-mitigation firewall iptables linux nginx proxy

Last synced: about 1 month ago
JSON representation

An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices - Beta

• Host: GitHub
• URL: https://github.com/fnzv/net-shield
• Owner: fnzv
• License: mit
• Created: 2017-05-14T15:05:19.000Z (over 7 years ago)
• Default Branch: master
• Last Pushed: 2021-11-09T12:18:35.000Z (about 3 years ago)
• Last Synced: 2024-05-20T00:12:43.074Z (6 months ago)
• Topics: antiddos, ddos-detection, ddos-mitigation, firewall, iptables, linux, nginx, proxy
• Language: Go
• Homepage:
• Size: 1.18 MB
• Stars: 254
• Watchers: 23
• Forks: 57
• Open Issues: 6
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
## net-Shield 

[![Build Status](https://travis-ci.org/fnzv/net-Shield.svg?branch=master)](https://travis-ci.org/fnzv/net-Shield) 


An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices based on iptables/ipsets

![](nshield-scheme.png?raw=true)

-----------------

## Requirements

- Linux System with golang, iptables/ipsets

- Nginx 

### Quickstart

Run the bash script (install.sh) to install all the required dependencies.

```bash install.sh```




You will be prompted to insert a domain and the real IP address associated to it so net-Shield will configure for you the first proxydomain (you can see the changes on /etc/nshield/nshield.conf).




### Proxy Domains

To configure proxydomains you need to enable the proxy option on /etc/nshield/nshield.conf (proxy = 1) and be sure that the proxydomain list (on the same conf file) is correct:





```

proxydomains = [

  "sami.pw 8.8.8.8",

  "example.org 1.2.3.4"

]

```




### Usage

After you completed the install with the quickstart script you can call the "config-nshield" commad that will read the nshield.conf and re-configure shield rules based on the new configuration.

Example:

I want to enable SSL on sami.pw that i just configured as above:

1) Edit /etc/nshield/nshield.conf and set autossl = 1

2) On your terminal run: ```# config-shield ```

3) You can now see the changes on the Nginx configuration

The domain must point to the net-Shield instance otherwise will fail let's encrypt verification.

Logs are diplayed on: /var/log/nshield.log

## How it works

Basically this script is set by default to run every 30 minutes and execute these operations:

- Get latest Bot,Spammers,Bad IP/Net reputation lists and blocks if those Bad guys are attacking your server (Thank you FireHol http://iplists.firehol.org/ )

- Enable basic Anti-DDoS methods to deny unwanted/malicious traffic 

- Rate limits when under attack 

- Allows HTTP(S) Proxying to protect your site

## Demo

[![asciicast](https://asciinema.org/a/zozehdooPDbvem9tCDLI321Hp.png)](https://asciinema.org/a/zozehdooPDbvem9tCDLI321Hp)

Tested on Ubuntu 16.04 and 14.04 LTS

## Contributors

Feel free to open issues or send me an email

## Binaries

In case you cannot compile it your self and/or run the install.sh you can find the binaries on: 

https://github.com/fnzv/net-Shield/tree/master/binaries

## License

Code distributed under MIT licence.