User Tools

Site Tools


ddos

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
ddos [2015/05/13 14:57]
Francisco Dias [What subnets do the the Layer 7 protection use?]
ddos [2016/05/08 02:24] (current)
Francisco Dias [What subnets does the the Layer 7 protection use?]
Line 78: Line 78:
 Layer 7 protection connections will come from the following subnets. Layer 7 protection connections will come from the following subnets.
  
-| 5.254.110.0/​26 |+
 | 93.115.83.64/​26 | | 93.115.83.64/​26 |
 | 93.115.90.64/​26 | | 93.115.90.64/​26 |
-| 5.254.108.64/26 |+| 5.254.88.64/26 | 
 +| 5.254.110.0/26 |
 | 5.254.107.0/​26 | | 5.254.107.0/​26 |
 +| 5.254.115.128/​26 |
 +| 5.254.108.64/​26 |
  
-You'll need to configure your webserver to assign the users connecting IP from the ''​X_FORWARDING_FOR''​ field. In NGINX you'll want to use a setup like:+You'll need to configure your webserver to assign the users connecting IP from the ''​X_FORWARDING_FOR''​ field. In ''​NGINX'' ​you'll want to use a setup like:
  
 <​code>​ <​code>​
-set_real_ip_from ​5.254.110.0/26 + 
-set_real_ip_from 93.115.83.64/26 +set_real_ip_from ​93.115.83.64/26; 
-set_real_ip_from ​93.115.90.64/26 +set_real_ip_from 93.115.90.64/26; 
-set_real_ip_from 5.254.108.64/26 +set_real_ip_from ​5.254.88.64/26; 
-set_real_ip_from 5.254.107.0/​26 +set_real_ip_from 5.254.110.0/26; 
-real_ip_header ​X_FORWARDING_FOR;+set_real_ip_from 5.254.107.0/​26
 +set_real_ip_from 5.254.115.129/​26;​ 
 +set_real_ip_from 5.254.108.64/​26;​ 
 +real_ip_header ​X-Forwarded-For; 
 </​code>​ </​code>​
  
-For Apache you'll have to install [[https://​github.com/​gnif/​mod_rpaf|mod_rpaf]] to do this for you.+For Apache ​2.2 you'll have to install [[https://​github.com/​gnif/​mod_rpaf|mod_rpaf]] to do this for you.  
 + 
 +For Apache 2.4 you'll want to install ''​mod_remoteip''​. You'll want to configure ''​mod_remoteip''​ the following way: 
 + 
 +<​code>​ 
 + 
 +RemoteIPHeader X-Real-IP 
 +RemoteIPInternalProxy 93.115.83.64/​26 
 +RemoteIPInternalProxy 93.115.90.64/​26 
 +RemoteIPInternalProxy 5.254.88.64/​26 
 +RemoteIPInternalProxy 5.254.110.0/​26 
 +RemoteIPInternalProxy 5.254.107.0/​26 
 +RemoteIPInternalProxy 5.254.115.129/​26 
 +RemoteIPInternalProxy 5.254.108.64/​26 
 + 
 +</​code>​
 ===== Is there an SLA? ===== ===== Is there an SLA? =====
  
ddos.1431554247.txt.gz · Last modified: 2015/05/13 14:57 by Francisco Dias