Self-configuring DDoS hardware firewall DIY

In recent years, with the Trojan horse, virus increasingly rampant, the internet denial of service attacks and the frequency of attack traffic also increased rapidly, in the attack mode, attack technology and the attack resources are maturing, the anti-denial service related hardware and software products have also been a significant development. Today's IDC market has basically been to the lack of effective denial of service attack defense means will not be able to operate a stable IDC business situation.

But there are a wide range of denial of service defense products, the price difference is also very large, from hundreds of yuan installed on the target server to protect a single server software firewall to tens of thousands of or even a hundred thousand of Yuan trillion, gigabit hardware firewall, including the emergence of the provision of hardware firewall program and help customers DIY hardware firewall benefits of alternative solutions, etc. , customers are often at a loss, especially for DIY hardware firewalls used by the relevant technology, defense capabilities and so do not understand, so that it is often at a loss when the choice.

Recently, my computer room continued to suffer from DDoS attacks, also suffered the same troubles, in the installation of a variety of soft defenses can not be effective defense, hard to withstand the price too high, so the internet search a DIY hardware firewall site, holding to try the mentality, download the firewall provided by its core, according to the requirements of the corresponding hardware , after the installation configuration, finally resolved the DDoS attacks have been bothering me, now put the DIY firewall installation and setup process record as follows, I hope to help more and I encounter the problems of the friends of the early resolution.

The first step: Prepare the firewall hardware platform

In accordance with the requirements of the DIY firewall website, I have prepared the following hardware:

　　

1, a computer, I chose the bottom of the original in Taobao Amoy to the IBM ThinkCentre S50 quasi system. This is my original cost of 760 yuan to Amoy. The quasi-system comes with an Intel gigabit NIC that is used to connect to the extranet.

2, CPU one, I use is used to match the IBM ThinkCentre S50 P4 2.4G cpu.400 yuan.