Web server methods to prevent DDoS attacks

1, ensure the security of the server system
The first step is to ensure that the server software does not have any vulnerabilities to prevent attackers from invading. Make sure the server is up to date with the latest system and security patches. Remove unused services on the server and close unused ports. For Web sites running on the server, make sure that they have the latest patches and no security holes.

2. Hide the server real IP
Server front-end plus CDN Transfer (free Baidu Cloud acceleration, 360 website defender, speed music, security treasure, etc.), if the funds are abundant, you can buy high-defense shield machine, used to hide the real IP server, domain name resolution using CDN IP, all the resolved subdomains use the CDN IP address. In addition, other domain names deployed on the server cannot use real IP resolution, and all are resolved using a CDN.
In addition, to prevent the server from transmitting information leaked IP, the most common is that the server does not use the Send mail function, if not to send mail, can be sent through a third-party agent, so that the external display of IP is the proxy IP.
In short, as long as the server's real IP does not leak, less than 10G of small traffic DDoS prevention can not spend much money, free CDN will be able to cope with. If the attack traffic is more than 20G, then the free CDN may not be able to stop, need to buy a high-defense shield machine to cope with, and the server's real IP also need to be hidden.

Web server methods to prevent DDoS attacks