# Preparing a Web Front Server for DoS Attacks Using Cloudflare-Inspired Techniques

DevFeed: [Preparing a Web Front Server for DoS Attacks Using Cloudflare-Inspired Techniques](<https://devfeed.tech/articles/prepare-for-dos-like-cloudflare-do-27646.md>)

Original publisher: [Read original article](<https://gagor.pro/2016/02/prepare-for-dos-like-cloudflare-do/>)

Author: Tom

Published: 2016-02-05T00:00:00Z

Content type: tutorial

Language: en

Sources: [Tomasz Gągor](<https://devfeed.tech/sources/tomasz-gagor.md>)

Topics: [DDoS](<https://devfeed.tech/topics/ddos.md>), [Cloudflare](<https://devfeed.tech/topics/cloudflare.md>), [conntrack](<https://devfeed.tech/topics/conntrack.md>), [Kernel](<https://devfeed.tech/topics/kernel.md>), [servers](<https://devfeed.tech/topics/servers.md>)

Tags: [cloudflare](<https://devfeed.tech/tags/cloudflare.md>), [conntrack](<https://devfeed.tech/tags/conntrack.md>), [ddos](<https://devfeed.tech/tags/ddos.md>), [http-server](<https://devfeed.tech/tags/http-server.md>), [kernel](<https://devfeed.tech/tags/kernel.md>), [performance](<https://devfeed.tech/tags/performance.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

This tutorial adapts general techniques from a presentation about Cloudflare's DoS protection for typical web front servers. It covers ACK/FIN/RST/X-mas floods, SYN floods, botnet attacks, conntrack, syncookies, rate limiting, IP blacklisting, and related kernel and network tuning.

## Source excerpt

I watched nice presentation about how Cloudflare protects itself against DoS. Most of us are not able to do that exactly like them but some of tips were general enough to be used on typical web front server. I took notes from this presentation and presented here. Thanks to Marek agreement I also reposted all examples (in easier to copy paste way). Howto prepare against ACK/FIN/RST/X-mas flood Use conntrack rule: