1

after i search how to protect my website host server using GRE tunnels, some friends of this forum give me a tip to use Reverse Proxy that would be better.

But i don't found any guide on how to Reverse Proxy, many guides teach only install Nginxs but nothing much directed to that i need.

I have in my mind, the following working scheme:

Attacks + Users --> My Cloud with DoS / DDoS Mitigation + Reverse Proxy --> My Dedicated Server with WHM/cPanel.

All traffic must pass through the reverse proxy that exists in the cloud.

It is possible?

Regards.

rodrigo286
  • 11
  • 2
  • Have you heard of HAProxy? It's really good at this and very low on resources. There is a great article at `http://blog.haproxy.com/2012/02/27/use-a-load-balancer-as-a-first-row-of-defense-against-ddos/`. – Gmck Mar 17 '16 at 12:55
  • The link seems broken, but i use blog.haproxy.com this works, realy thanks, i will read all of HAProxy. Regards. – rodrigo286 Mar 17 '16 at 13:34

1 Answers1

1

It sure is possible, and you have more than one choices as usual.

You can proxy the TCP connection (Layer 4), this is expecially useful when you are terminating SSL connections at your webserver so your proxy cant decrypt the traffic.

Pros:

  • Less work for the proxy

Cons:

  • Less flexible, fewer knobs for example if you want to do loadbalancing too

You can proxy in HTTP with eventual SSL temination on the proxy machine. Pros:

  • You can do additional security checks at the application layer and have much more control, ex. you can use nginx/apache + mod_security, manage load balancing if you have more than one webserver (origin server), add a caching layer

Cons:

  • The proxy doing more will have a higher load, but considering this load is taken from the existing webserver's one so you're effectively moving it
  • The configuration will be more involved.

As for what tools to use, the one that I'm familiar with are:

Both TCP and HTTP(s) Proxies:

  • HAProxy
  • Nginx

HTTP Only:

  • Varnish - can do caching but no HTTPS termination
  • Apache

Hope this helps.

Fredi
  • 2,227
  • 9
  • 13