My Rules for Cloudflare and Tips on How to Protect Your Site/Server

High-Tier Anti-DDoS Providers

• ReactLabs (Paid) click

  Not recommended to use – overpriced and based in Russia, but the protection is good.

• Cloudflare (Free/Paid) click
• DDoS-Guard (Trial Request/Paid) click
• Stormwall (Trial Request/Paid) click

Medium-Tier Anti-DDoS Providers

• Aeza (Free/Paid) click

  Not recommended to use after 03.02.2023 – too much downtime, unstable protection.
  Not recommended due to Russian ownership, as Russian hackers may scam you.

• CasT-Security (Paid) click

  Not recommended – overpriced.

• GreyWeb (Paid) click

Low-Tier Anti-DDoS Providers

• Bytfend (Paid) click

  Not recommended – resells OVH, has a small network, no own data center, and poor protection methods.

Cloudflare Rules

1. [Challenge] Interactive Challenge (Fixed)
2. [ASN #1] Interactive Challenge
3. [ASN #2] Interactive Challenge
4. [Standard Check for Bad Traffic #1] Block
5. [Standard Check for Bad Traffic #2] Block
6. [Stupid Geo Block] Block (Don't use this rule xD)
7. [Protection Against Bad Browsers] Block/Managed Challenge

Scripts to Protect L7

• PowShield click

  Reverse proxy, similar to Baloo.

• BalooProxy click

  A proxy like Cloudflare but better. Highly recommended.
  For better attack mitigation and uptime, use at least a 8-core, 16GB RAM, 2.5Gbps server.

• vDDoS-Protection click

  Good, but lacks updates and modern technologies.
  For better attack mitigation and uptime, use at least a 8-core, 16GB RAM, 2.5Gbps server.

• Nginx-Lua-Anti-DDoS click

  Good, but lacks updates and modern technologies.

Scripts to Prevent L3/L4 Attacks

• YukiAntiDDoS click

  Good, waiting for new features.

Stress Testing Scripts

• DDoSify (Free/Script) click

  A simple script to simulate virtual load testing on your site and create custom attack scenarios.

• MHDDoS (Free/Script) click

Useful Scripts

• Cyber-Shield click

  Monitors and analyzes incoming packets to the server.