▲ 851 ▼ Welcome to 2025 (content.federation.network) submitted 11 months ago by daniel@federation.network to c/memes@lemmy.world 82 comments fedilink hide all child comments Welcome to 2025 @memes@lemmy.world
[+] wildbus8979@sh.itjust.works -8 points 11 months ago* (2 children) Don't expose the website. That's the point. Only connect remotely via wireguard. If you must expose the website, I also provided options in my original post. permalink fedilink source parent hideshow 4 child comments replies: [–] Kolanaki@pawb.social 69 points 11 months ago* (2 children) I think you misunderstood; if I run a publicly accessible website (like a Lemmy instance), those ports need to be opened. permalink fedilink source parent hideshow 4 child comments replies: [–] kautau@lemmy.world 9 points 11 months ago (1 child) A cheap VPS hosting https://anubis.techaro.lol/docs/admin/installation/ as a reverse proxy may work. The VPS will do the work of verifying requests and stopping bad requests from hitting the target resource. Though certainly if the DDoS is a matter of a massive botnet raiding your domain it may not work as well as something like cloudflare permalink fedilink source parent hideshow 2 child comments replies: [–] maus@sh.itjust.works 1 point 11 months ago (1 child) Anubis does not prevent a ddos attack and only shifts the saturation point to your VPS. Anubis is the answer for bots and ai scrappers, not DDoS. permalink fedilink source parent hideshow 2 child comments replies: [–] kautau@lemmy.world 1 point 11 months ago* (last edited 11 months ago) Sure, but to someone running a website out of their house, 100,000 bots trying to hit the site at the same time to scrape it is going to have the same effect. So yes, you're correct, Anubis has nothing to do with stopping a literal DDoS attack, but it does help smaller websites stay alive by avoiding responding to requests from scrapers or one-off malicious agents. permalink fedilink source parent [–] wildbus8979@sh.itjust.works 1 point 11 months ago* (2 children) Yes, I've addressed this in my original message. Get yourself a 3$/month VPS, they almost all come with DDoS protection, and reverse proxy from there. Either restrict the ports on your home network to only that IP, or better yet tunnel all the traffic via Wireguard. Obviously if you're hosting a large server this is another matter, but nevertheless almost all serious hosting services offer in house DDoS protection. But the comment I was originally replying to specifically refered to homelabs. permalink fedilink source parent hideshow 4 child comments replies: [–] Kolanaki@pawb.social 8 points 11 months ago* (2 children) What would be a good resource to, like, relearn modern networking stuff cuz some of these solutions are totally new ideas to me? I was CISCO and A+ certified way back in 2003; but the only thing I ever really used from those classes and training since then was making cables and setting up smaller, simple networks for home or small businesses. I get the sense a fuckton has changed and this exchange made me want to brush up. permalink fedilink source parent hideshow 4 child comments replies: [–] peoplebeproblems@midwest.social 14 points 11 months ago A fuckton is an understatement. permalink fedilink source parent [–] ProjectPatatoe@lemmy.world 9 points 11 months ago I found just doing it the best for me. Start with proxmox hypervisor on some old pc. Start running a bunch of services. Some documentation mentions "heres how you set it up behind a reverse proxy". "Hmm...whats that" is pretty much how i learned it. Then compare with people in the homelab communities who are doing differently and find out why. permalink fedilink source parent [+] DaPorkchop_@lemmy.ml 1 point 11 months ago [deleted] permalink fedilink source parent [–] kilgore_trout@feddit.it 6 points 11 months ago (1 child) There is no point in hosting a website if it's not accessible from the Web. permalink fedilink source parent hideshow 2 child comments replies: [–] wildbus8979@sh.itjust.works 3 points 11 months ago* Again, this thread replying to the original comment is talking about homelabs. But also, again, this is addressed in the second half of my comment. permalink fedilink source parent
[–] Kolanaki@pawb.social 69 points 11 months ago* (2 children) I think you misunderstood; if I run a publicly accessible website (like a Lemmy instance), those ports need to be opened. permalink fedilink source parent hideshow 4 child comments replies: [–] kautau@lemmy.world 9 points 11 months ago (1 child) A cheap VPS hosting https://anubis.techaro.lol/docs/admin/installation/ as a reverse proxy may work. The VPS will do the work of verifying requests and stopping bad requests from hitting the target resource. Though certainly if the DDoS is a matter of a massive botnet raiding your domain it may not work as well as something like cloudflare permalink fedilink source parent hideshow 2 child comments replies: [–] maus@sh.itjust.works 1 point 11 months ago (1 child) Anubis does not prevent a ddos attack and only shifts the saturation point to your VPS. Anubis is the answer for bots and ai scrappers, not DDoS. permalink fedilink source parent hideshow 2 child comments replies: [–] kautau@lemmy.world 1 point 11 months ago* (last edited 11 months ago) Sure, but to someone running a website out of their house, 100,000 bots trying to hit the site at the same time to scrape it is going to have the same effect. So yes, you're correct, Anubis has nothing to do with stopping a literal DDoS attack, but it does help smaller websites stay alive by avoiding responding to requests from scrapers or one-off malicious agents. permalink fedilink source parent [–] wildbus8979@sh.itjust.works 1 point 11 months ago* (2 children) Yes, I've addressed this in my original message. Get yourself a 3$/month VPS, they almost all come with DDoS protection, and reverse proxy from there. Either restrict the ports on your home network to only that IP, or better yet tunnel all the traffic via Wireguard. Obviously if you're hosting a large server this is another matter, but nevertheless almost all serious hosting services offer in house DDoS protection. But the comment I was originally replying to specifically refered to homelabs. permalink fedilink source parent hideshow 4 child comments replies: [–] Kolanaki@pawb.social 8 points 11 months ago* (2 children) What would be a good resource to, like, relearn modern networking stuff cuz some of these solutions are totally new ideas to me? I was CISCO and A+ certified way back in 2003; but the only thing I ever really used from those classes and training since then was making cables and setting up smaller, simple networks for home or small businesses. I get the sense a fuckton has changed and this exchange made me want to brush up. permalink fedilink source parent hideshow 4 child comments replies: [–] peoplebeproblems@midwest.social 14 points 11 months ago A fuckton is an understatement. permalink fedilink source parent [–] ProjectPatatoe@lemmy.world 9 points 11 months ago I found just doing it the best for me. Start with proxmox hypervisor on some old pc. Start running a bunch of services. Some documentation mentions "heres how you set it up behind a reverse proxy". "Hmm...whats that" is pretty much how i learned it. Then compare with people in the homelab communities who are doing differently and find out why. permalink fedilink source parent [+] DaPorkchop_@lemmy.ml 1 point 11 months ago [deleted] permalink fedilink source parent
[–] kautau@lemmy.world 9 points 11 months ago (1 child) A cheap VPS hosting https://anubis.techaro.lol/docs/admin/installation/ as a reverse proxy may work. The VPS will do the work of verifying requests and stopping bad requests from hitting the target resource. Though certainly if the DDoS is a matter of a massive botnet raiding your domain it may not work as well as something like cloudflare permalink fedilink source parent hideshow 2 child comments replies: [–] maus@sh.itjust.works 1 point 11 months ago (1 child) Anubis does not prevent a ddos attack and only shifts the saturation point to your VPS. Anubis is the answer for bots and ai scrappers, not DDoS. permalink fedilink source parent hideshow 2 child comments replies: [–] kautau@lemmy.world 1 point 11 months ago* (last edited 11 months ago) Sure, but to someone running a website out of their house, 100,000 bots trying to hit the site at the same time to scrape it is going to have the same effect. So yes, you're correct, Anubis has nothing to do with stopping a literal DDoS attack, but it does help smaller websites stay alive by avoiding responding to requests from scrapers or one-off malicious agents. permalink fedilink source parent
[–] maus@sh.itjust.works 1 point 11 months ago (1 child) Anubis does not prevent a ddos attack and only shifts the saturation point to your VPS. Anubis is the answer for bots and ai scrappers, not DDoS. permalink fedilink source parent hideshow 2 child comments replies: [–] kautau@lemmy.world 1 point 11 months ago* (last edited 11 months ago) Sure, but to someone running a website out of their house, 100,000 bots trying to hit the site at the same time to scrape it is going to have the same effect. So yes, you're correct, Anubis has nothing to do with stopping a literal DDoS attack, but it does help smaller websites stay alive by avoiding responding to requests from scrapers or one-off malicious agents. permalink fedilink source parent
[–] kautau@lemmy.world 1 point 11 months ago* (last edited 11 months ago) Sure, but to someone running a website out of their house, 100,000 bots trying to hit the site at the same time to scrape it is going to have the same effect. So yes, you're correct, Anubis has nothing to do with stopping a literal DDoS attack, but it does help smaller websites stay alive by avoiding responding to requests from scrapers or one-off malicious agents. permalink fedilink source parent
[–] wildbus8979@sh.itjust.works 1 point 11 months ago* (2 children) Yes, I've addressed this in my original message. Get yourself a 3$/month VPS, they almost all come with DDoS protection, and reverse proxy from there. Either restrict the ports on your home network to only that IP, or better yet tunnel all the traffic via Wireguard. Obviously if you're hosting a large server this is another matter, but nevertheless almost all serious hosting services offer in house DDoS protection. But the comment I was originally replying to specifically refered to homelabs. permalink fedilink source parent hideshow 4 child comments replies: [–] Kolanaki@pawb.social 8 points 11 months ago* (2 children) What would be a good resource to, like, relearn modern networking stuff cuz some of these solutions are totally new ideas to me? I was CISCO and A+ certified way back in 2003; but the only thing I ever really used from those classes and training since then was making cables and setting up smaller, simple networks for home or small businesses. I get the sense a fuckton has changed and this exchange made me want to brush up. permalink fedilink source parent hideshow 4 child comments replies: [–] peoplebeproblems@midwest.social 14 points 11 months ago A fuckton is an understatement. permalink fedilink source parent [–] ProjectPatatoe@lemmy.world 9 points 11 months ago I found just doing it the best for me. Start with proxmox hypervisor on some old pc. Start running a bunch of services. Some documentation mentions "heres how you set it up behind a reverse proxy". "Hmm...whats that" is pretty much how i learned it. Then compare with people in the homelab communities who are doing differently and find out why. permalink fedilink source parent [+] DaPorkchop_@lemmy.ml 1 point 11 months ago [deleted] permalink fedilink source parent
[–] Kolanaki@pawb.social 8 points 11 months ago* (2 children) What would be a good resource to, like, relearn modern networking stuff cuz some of these solutions are totally new ideas to me? I was CISCO and A+ certified way back in 2003; but the only thing I ever really used from those classes and training since then was making cables and setting up smaller, simple networks for home or small businesses. I get the sense a fuckton has changed and this exchange made me want to brush up. permalink fedilink source parent hideshow 4 child comments replies: [–] peoplebeproblems@midwest.social 14 points 11 months ago A fuckton is an understatement. permalink fedilink source parent [–] ProjectPatatoe@lemmy.world 9 points 11 months ago I found just doing it the best for me. Start with proxmox hypervisor on some old pc. Start running a bunch of services. Some documentation mentions "heres how you set it up behind a reverse proxy". "Hmm...whats that" is pretty much how i learned it. Then compare with people in the homelab communities who are doing differently and find out why. permalink fedilink source parent
[–] peoplebeproblems@midwest.social 14 points 11 months ago A fuckton is an understatement. permalink fedilink source parent
[–] ProjectPatatoe@lemmy.world 9 points 11 months ago I found just doing it the best for me. Start with proxmox hypervisor on some old pc. Start running a bunch of services. Some documentation mentions "heres how you set it up behind a reverse proxy". "Hmm...whats that" is pretty much how i learned it. Then compare with people in the homelab communities who are doing differently and find out why. permalink fedilink source parent
[–] kilgore_trout@feddit.it 6 points 11 months ago (1 child) There is no point in hosting a website if it's not accessible from the Web. permalink fedilink source parent hideshow 2 child comments replies: [–] wildbus8979@sh.itjust.works 3 points 11 months ago* Again, this thread replying to the original comment is talking about homelabs. But also, again, this is addressed in the second half of my comment. permalink fedilink source parent
[–] wildbus8979@sh.itjust.works 3 points 11 months ago* Again, this thread replying to the original comment is talking about homelabs. But also, again, this is addressed in the second half of my comment. permalink fedilink source parent
