Skip to content
An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices - Beta
Branch: master
Clone or download
Latest commit 4198a6d Jan 23, 2019
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
binaries Full refactor in Golang Jan 7, 2018
example Delete whitelist Jan 7, 2018
old Rename nshield-main.py to old/nshield-main.py Jan 7, 2018
.travis.yml Update .travis.yml Jan 7, 2018
LICENSE
README.md Update README.md Jan 23, 2019
config-shield.go Create config-shield.go Jan 7, 2018
install.sh Update install.sh Jan 7, 2018
nshield-scheme.png
shield.go

README.md

net-Shield

Build Status
An Easy and Simple Anti-DDoS solution for VPS,Dedicated Servers and IoT devices based on iptables/ipsets


Requirements

  • Linux System with golang, iptables/ipsets
  • Nginx

Quickstart

Run the bash script (install.sh) to install all the required dependencies.

bash install.sh


You will be prompted to insert a domain and the real IP address associated to it so net-Shield will configure for you the first proxydomain (you can see the changes on /etc/nshield/nshield.conf).

Proxy Domains

To configure proxydomains you need to enable the proxy option on /etc/nshield/nshield.conf (proxy = 1) and be sure that the proxydomain list (on the same conf file) is correct:

proxydomains = [
  "sami.pw 8.8.8.8",
  "example.org 1.2.3.4"
]

Usage

After you completed the install with the quickstart script you can call the "config-nshield" commad that will read the nshield.conf and re-configure shield rules based on the new configuration.

Example: I want to enable SSL on sami.pw that i just configured as above:

  1. Edit /etc/nshield/nshield.conf and set autossl = 1
  2. On your terminal run: # config-shield
  3. You can now see the changes on the Nginx configuration

The domain must point to the net-Shield instance otherwise will fail let's encrypt verification.

Logs are diplayed on: /var/log/nshield.log

How it works

Basically this script is set by default to run every 30 minutes and execute these operations:

  • Get latest Bot,Spammers,Bad IP/Net reputation lists and blocks if those Bad guys are attacking your server (Thank you FireHol http://iplists.firehol.org/ )
  • Enable basic Anti-DDoS methods to deny unwanted/malicious traffic
  • Rate limits when under attack
  • Allows HTTP(S) Proxying to protect your site

Demo

asciicast

Tested on Ubuntu 16.04 and 14.04 LTS

Contributors

Feel free to open issues or send me an email

Binaries

In case you cannot compile it your self and/or run the install.sh you can find the binaries on: https://github.com/fnzv/net-Shield/tree/master/binaries

License

Code distributed under MIT licence.

You can’t perform that action at this time.
You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session.