Anti-DDOS, eh?
You lost me there. There is no self-hosted anti-ddos solution that is going to be effective.... Because any decent DDOS attack, can easily completely overwhelm your WAN connection. (And potentially even your ISP's upstream(s) )#
this post was submitted on 09 Nov 2023
89 points (96.8% liked)
Selfhosted
40459 readers
379 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 2 years ago
MODERATORS
Had a router / firewall salesman talk about a firewall's ddos protection once. I kinda laughed in his face and asked how they did that feat.
Of course, he had no clue. But was still very confident in it. After all, it said so on the box.
Oh my god, thank you! This changes everything for me and my planning. I was just starting to look into authentication and properly securing my stuff and was feeling overwhelmed. This adds the features I need without locking me in unlike pretty much all the other alternatives I've looked at. No need to refactor my setup much at all, and if I want more granular control of an aspect I can, seemingly, easily decouple that part. Just fantastic. I wouldn't even call this a all-in-one solution, since it can build on top, it doesn't need to be all.
Good point about the all-in-one. I'll need to find some time to digest it properly, but seems amazing at a glance.
Did you consider keeping the services closed to the outside world and using tailscale to access them? Doesn't work well if you want to give access to a bunch of people, though.
It's that grant access part that meant I need a refactor. I want to start hosting our photos and other media and while tailscale and similar sort of work OK for that it's not ideal for multiple users and mobile devices work but not as smooth etc.
That's really cool, I've felt for a while that a middle ground between something like yunohost and a manual deployment would be cool and this seems to fit the bill quite nicely
Yo, fuck, this seems too good to be true. But I just completely re-initialised my NAS.. 😑
If it would be ha-capable it would be perfect. (At least on paper. )
I really need to try this.
Assuming you mean high availability, I keep hoping for something like that too. Right now I'm using a UI I built to control all my services running on a nomad cluster. I've been thinking of packaging it up since it's pretty simple and nomad does most of the work
Immediately thought this was a Cosmos DB wrapper.
So it's kind of like Umbral in that it's a server application that installs and runs other server applications within it?
This seems Interesting. thanks! I'll add a semi-ot question: if I'm using CasaOs, can I stop using it (maybe even uninstall it) while keeping my docker apps and configuration as they are now? I started with CasaOs but now I feel I could give it up and start manually handling my containers
It would be a bit of work and you'd need to identify the container volumes but I'd say it could be done yup. Maybe can even find the config files you have currently to rebuild.