1

I'm sure you all know what Cloudflare is (it's a very famous CDN).

What I want to do, is force my Apache HTTP server to ONLY answer to Cloudflare. I want Apache to ignore and close or not respond to any incoming socket that doesn't match a list of IPs. (in the Apache cor level, before reaching PHP etc)

I need this to protect my website from DoS/DDoS incase someone got my real webserver's IP.

I have this guy that creates like 1200 TCP connexions to my webserver, and these connexions don't send anything, they just stay open and alive, which makes my webserver down for a while.

I'm a total newbie at Apache configuration etc, I need a step by step Instructions. I'm using Windows Server 2008.

slhck
  • 235,242
Reacen
  • 227

3 Answers3

3

If you want to restrict access to your port 80 to a specific list of IPs, then you should look into using iptables (presuming linux) or another firewalling solution to drop all incoming connections to port 80 which are not from IPs on the whitelist.

Darth Android
  • 38,658
2

We (CloudFlare) put something up for this in our knowledge base yesterday for Apache.

damoncloudflare
  • 174
-1

This might help you :

If you want to restrict access to your port 80 to a specific list of IPs, then you should look into using iptables (presuming linux) or another firewalling solution to drop all incoming connections to port 80 which are not from IPs on the whitelist.

DDOS – Instant Protection with CloudFlare

Govind Karamta
  • 21