{"topic":{"id":12618,"title":"anti-ddos tactics","slug":"topic","userId":4668,"categoryId":2,"createdAt":"2024-05-18 03:25:47.217775","bumpedAt":"2024-05-19 15:16:32.658024","views":312,"postsCount":1,"highestPostNumber":1,"likeCount":1,"closed":false,"pinned":false,"pinnedGlobally":false,"pinnedAt":null,"pinnedUntil":null,"isBanner":false,"excerpt":"protect signup requires hCaptcha to signup (even with SSO) protect /login page set maximum vigilance level in CF for this path set low-level for other pages for better experience prevent ddos by logged-in users (highly u…","deletedAt":null,"isAnonymous":false,"isPrivate":false,"isMembersOnly":false,"category":{"id":2,"name":"网站","slug":"website","color":"986a44"},"author":{"id":4668,"username":"IO","name":null,"avatarUrl":null},"realAuthor":{"id":4668,"username":"IO","name":null,"avatarUrl":null},"tags":["ddos"]},"posts":[{"id":33785,"postNumber":1,"raw":"## protect signup\nrequires hCaptcha to signup (even with SSO)\n\n## protect /login page\n\nset maximum vigilance level in CF for this path\nset low-level for other pages for better experience\n\n## prevent ddos by logged-in users (highly unlikely)\n\nwhos-online does not show those hidden profile\nquery them using:\nhttps://xjtu.app/admin/plugins/explorer?id=42\n\n## limit public port listening\ncurrently only sshd, netdata, cloudflared listens :: / 0.0.0.0 \n\n## limit CPU/memory usage of minor service \nprioritize resource provision of core service (this website) \n```\ndocker update --memory-swap \"2g\" --memory \"2g\" --cpuset-cpus \"1\" webnp\ndocker update --memory-swap \"1g\" --memory \"1g\" --cpuset-cpus \"1\" datanp\n```","cooked":"

protect signup

requires hCaptcha to signup (even with SSO)

protect /login page

set maximum vigilance level in CF for this path
\nset low-level for other pages for better experience

prevent ddos by logged-in users (highly unlikely)

whos-online does not show those hidden profile
\nquery them using:

/admin/plugins/explorer?id=42

limit public port listening

currently only sshd, netdata, cloudflared listens :: / 0.0.0.0

limit CPU/memory usage of minor service

prioritize resource provision of core service (this website)

docker update --memory-swap \"2g\" --memory \"2g\" --cpuset-cpus \"1\" webnp\ndocker update --memory-swap \"1g\" --memory \"1g\" --cpuset-cpus \"1\" datanp\n

\n","createdAt":"2024-05-18 03:25:47.295198","updatedAt":"2024-07-19 03:24:38.37856","replyToPostNumber":null,"replyCount":0,"likeCount":1,"wordCount":99,"liked":false,"bookmarked":false,"polls":[],"reactions":[{"reaction":"❤️","count":1,"users":[{"id":1892,"username":"AI","name":null}],"hasReacted":false}],"wiki":false,"version":3,"publicVersion":3,"deletedAt":null,"isAnonymous":false,"user":{"id":4668,"username":"IO","name":null,"avatarUrl":null,"admin":true,"moderator":false,"signatureRaw":"","signatureCooked":null}}],"hasMore":false,"lastReadPostNumber":1,"hasUrlPostNumber":false}