which anti-DDoS hardware/software in front of cPanel ?

[bejbi]

Hi,

What software or hardware solution are you using in front of your cPanel servers ?
I need something against DDoS attacks. But not volumetric attacks (many packets/bandwidth - with defence by bgp blackhosling).

I need something to filter incorrect tcp packets (i.e only syn) from non-reverse dns from exotic places. Something to detect connections to apache on port 443 using http/1.1 (and with segregation false traffic from good ones...)

I tried:
Wanguard (mostly to protect access network, not for hosting)
Watchguard (Firebox machine) - many things happens non-configurable - after I connect it in fron of cPanel server, this server dissapears from net.

I dont'n mean about CSF (I'm using it)

What do you use ?

w.

 

[NetVicious]

You can use the apache module mod_evasive. I don't know if it's available on any distro supported by cPanel.
I use it on Debian or Ubuntu without any problem.

 

[cPanelLauren]

I know a lot of people utilize CDN's such as Cloudflare, which is by far the most popular options, though there are a number of others, including some more hybrid solutions that include scrubbing like Radware for enterprise purposes. I can't give any advice on specific services though but I do hope you'll get some advice from others here.