说明：之前发过一篇防DDOS的文章，参考：Linux VPS 使用DDOS deflate来抵御DDOS攻击，今天又看到一个使用vDDoS Proxy防御DDOS CC攻击的教程，就说下。

Vddos proxy是什么

引用原文“

vDDoS Protection is Nginx bundled with module HTTP/2; GeoIP; Limit Req, Testcookie; reCaptcha processor…

Working like CloudFlare, but vDDoS is software help you build your own System Firewall.

”

Github地址：https://github.com/duy13/vDDoS-Protection
作者主页：http://vddos.voduy.com/
原作者还提供了更强大的功能以及更详细的说明，有能力的MJJ可以前去研究。

安装

vDDos proxy必须安装在WEB程序以前例如(cPanel, VestaCP, LAMP, LEMP…)。

vDDos proxy暂只支持Centos 5/6/7 64位和CloudLinux Server 5/6/7 64位。

接下来以Centos 7为例。

运行以下命令：

yum -y install epel-release
yum -y update
yum -y install curl wget gc gcc gcc-c++ pcre-devel zlib-devel make openssl-devel libxml2-devel libxslt-devel
yum -y install gd-devel perl-ExtUtils-Embed GeoIP-devel gperftools gperftools-devel libatomic_ops-devel
yum -y install automake autoconf apr-util-devel GeoIP-devel libatomic_ops-devel

目前最新版本为1.13.1

curl -L https://github.com/duy13/vDDoS-Protection/raw/master/vddos-1.13.1-centos7 -o /usr/bin/vddos
#curl -L https://github.com/duy13/vDDoS-Protection/raw/master/vddos-1.13.1-centos6 -o /usr/bin/vddos #Centos6.X
#curl -L https://github.com/duy13/vDDoS-Protection/raw/master/vddos-1.13.1-centos5 -o /usr/bin/vddos #Centos5.X
chmod 700 /usr/bin/vddos
/usr/bin/vddos help
/usr/bin/vddos setup

至此，安装完毕

使用

Welcome to vDDoS, a HTTP(S) DDoS Protection Reverse Proxy. Thank you for using!

               Command Line Usage:
       vddos setup             :installing vDDoS service for the first time into /vddos
       vddos start             :start vDDoS service
       vddos stop              :stop vDDoS service
       vddos restart           :restart vDDoS service
       vddos autostart         :auto-start vDDoS services on boot
       vddos attack            :create a DDoS attacks to HTTP target (in 30 min)
       vddos stopattack        :stop "vddos attack" command
       vddos help              :display this help

                                       Please sure download vDDoS source from: vddos.voduy.com

保护某一个网站

# vi /vddos/conf.d/website.conf

# Website       Listen               Backend                  Cache Security SSL-Prikey   SSL-CRTkey
default         http://0.0.0.0:80    http://127.0.0.1:8080    no    200      no           no
your-domain.com http://0.0.0.0:80    http://127.0.0.1:8080    no    200      no           no
default         https://0.0.0.0:443  https://127.0.0.1:8443   no    307   /ssl/key.pri /ssl/crt.crt
your-domain.com https://0.0.0.0:443  https://127.0.0.1:8443   no    307   /ssl/key.pri /ssl/crt.crt

参数解释

your-domain.com为你想要保护的域名listen为本地监听IP端口backend为后端IP端口（可以当作为使用CDN或者反代源网站）cache是否进行缓存。

security是保护强度 可选no, 307, 200, click, 5s, high, captcha。

强度阶梯：`no

如教程需要更新，或者相关链接出现404，可以在文章下面评论留言。

Vultr新用户注册送100美元/16个机房按小时计费，支持支付宝，【点击查看】。

                 **

<div