How do I create a Reserve Server Proxy for DDoS Protection?

[Spetsnaz]

I just got a dedi with CNServers and I was wondering how can i set up this dedicated server (node) to make a reverse proxy for some ips I have for ddos protection?

 

[REAK]

Buzz me over Skype / PM,

I can setup that for you if you want.

 

[l0calh0st]

You can do it with nginx. Google for nginx reverse proxy with Apache, then replace the Apache IP with your target server IP.

 

[SplitIce]

For HTTP nginx is all you need. CNServers is good (its who provides our service in the US).

You may need to implement our own filters to catch the attacks they miss, be sure you do the same (although your options are more limited being on a dedicated server and not a BGP session).

 

[Spetsnaz]

I am still having problem with this. :/
I can't seem configure ngxin so my ddos protected ips, connect with my other ips.

 

[5gbps]

it's very simple to configure nginx as reverse proxy.
just use this in your location part of the nginx configuration file:

location / {
proxy_pass http://DESTINATION_IP;
proxy_next_upstream error timeout invalid_header http_500 http_502 http_503 http_504;
proxy_redirect off;
proxy_buffering off;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}

 

[concerto49]

Best way would be to setup a GRE tunnel?