Protect Your Nginx Server with Nginx-Lua-Anti-DDoS Script

In today’s digital landscape, DDoS (Distributed Denial of Service) attacks can cripple web servers and services, leading to substantial downtime and loss of revenue. Website owners, developers, and system administrators are increasingly facing these threats, and finding a reliable solution is crucial. The Nginx-Lua-Anti-DDoS script offers a robust defense mechanism for Nginx web servers, leveraging Lua scripting and an innovative authentication method to ensure that only legitimate users can access your site during an attack.

What Is Nginx-Lua-Anti-DDoS?

The Nginx-Lua-Anti-DDoS script is an open-source tool designed to protect your Nginx web servers from various types of DDoS attacks. It employs a clever HTML and JavaScript-based authentication puzzle, inspired by Cloudflare's "I'm Under Attack" mode. When a potential attack is detected, the script presents a challenge to users, allowing you to filter out malicious traffic while letting genuine users through with minimal disruption.

Key Features

• DDoS Protection: Mitigates DDoS attacks of any size by analyzing traffic patterns and filtering out malicious requests.
• Authentication Puzzle: Displays a brief authentication challenge for users during an attack to ensure they are human.
• IP Whitelisting/Blacklisting: Enables you to manage access by controlling which IPs can or cannot reach your server.
• Remote Data Storage: Supports remote servers for storing anti-DDoS data and keys, enhancing your protection strategy.
• Asynchronous Non-blocking I/O: Ensures high performance and responsiveness, even under heavy traffic loads.
• Logging Capabilities: Logs user attempts, both successful and failed, to help you analyze traffic and improve security.
• Flexible Configuration: Allows for extensive customization to suit various types of web applications and hosting environments.

Installation & Setup

Setting up the Nginx-Lua-Anti-DDoS script is straightforward. Ensure you have Nginx and Lua installed on your server. Here are the steps to get started:

# Install OpenResty (Nginx with Lua support)
# Follow the instructions on the official OpenResty website or use your package manager.

# Clone the repository
git clone https://github.com/C0nw0nk/Nginx-Lua-Anti-DDoS.git
cd Nginx-Lua-Anti-DDoS

# Move the Lua script to your Nginx configuration directory
mv lua/anti_ddos_challenge.lua /etc/nginx/lua/

# Configure Nginx to use the Lua script
# Edit your Nginx configuration file (e.g., /etc/nginx/nginx.conf)

location / {
    content_by_lua_file /etc/nginx/lua/anti_ddos_challenge.lua;
}

# Test your Nginx configuration
nginx -t

# Restart Nginx
systemctl restart nginx

How to Use It

Once installed, the script will automatically activate its protection features when a DDoS attack is detected. Here’s a practical example:

# Configure IP Whitelist in the Lua script
local allowed_ips = {"192.168.1.1", "192.168.1.2"}

for _, ip in ipairs(allowed_ips) do
    if ngx.var.remote_addr == ip then
        return ngx.exit(ngx.HTTP_OK)
    end
end

# If the IP is not whitelisted, trigger the authentication puzzle
return ngx.redirect("/auth_challenge.html")

This snippet checks if the IP address of the incoming request is whitelisted. If not, it redirects the user to the authentication challenge page, effectively filtering out malicious traffic.

Who Should Use Nginx-Lua-Anti-DDoS?

This script is ideal for anyone running Nginx web servers, including:

• Web developers looking to enhance their site’s security.
• System administrators managing high-traffic websites.
• Businesses concerned about online security and uptime.
• Anyone using content management systems (CMS) like WordPress, Joomla, or Drupal.

Final Thoughts

The Nginx-Lua-Anti-DDoS script is a powerful tool for anyone looking to fortify their web server against DDoS attacks. With its unique approach to user authentication and extensive range of features, it provides a solid defense mechanism that can be tailored to fit various environments. While no solution can guarantee 100% protection, implementing this script can significantly enhance your web server's resilience against malicious attacks. If you want to take your site's security to the next level, give this script a try.