[TUT] DDoS TCP Proxy Tutorial (Linux VPS)

[MikeOxlong]

This tutorial will help you create a cheap DDoS Protected Proxy, without all of the shenanigans, if you need a cheap place to purchase your DDoS protected VPS then I reccomend BuyVM.net, make sure you buy a DDoS protected IP.

Tutorial Authors:
MikeOxlong (Spock)
Noman (Noz)

Special Thanks:
Haproxy Developers
Viking Community

What you need:
- CentOS 6.x 64bit
- Haproxy
- Nano
- DDoS Protected VPS
- PuTTY (Windows Users, for Mac and Linux (*nix systems) Users go into Console and type in SSH and root@ip)

Notice for Beginners: Make sure you type all this in the SSH Console!

How to do it:

1) Install Nano

yum install nano

If it asks for anything, say yes! (Y)

2) Install Haproxy

yum install haproxy

Again, if it asks for anything, say yes! (Y)

3) Configure Haproxy

First of all, you will need to make sure that the file is on your server, type into the SSH Console Excluding SQL Query.

nano /etc/haproxy/haproxy.cfg

Delete what ever is in there (clear it all) and replace it with this code (replacing the bits in red)

global
daemon
log /dev/log local4
maxconn 400000
ulimit-n 810000

defaults
log global
contimeout 4000
clitimeout 42000
srvtimeout 43000

listen proxy1 ddos-protected-vps-ip:port-you-wish-to-use
mode tcp
balance leastconn
server proxy1_1 target-ip:target port

To copy the config above just select the text then CTRL+C and then right click in the SSH Console (PuTTY only)

Make sure you save the file once you have edited it!

4) Start Haproxy

Type into your SSH Console

service start haproxy

5) Editing database (Phoenix)

Edit these tables in your database only for Phoenix, Butterfly and R63B will not need database alterations. Run the MySQL Query below:

UPDATE server_settings SET enable_securesessions = '0'; 
UPDATE server_settings SET enable_antiddos = '1'; 
UPDATE server_settings SET ip_lastforbans = '1';

You should be set, if you have any problems, go back through the steps before contacting us!

If you have any questions, or need any support. Please do not hesitate to PM Me or Add
internetserviceprovidings or nozonskype to your Skype list and we will be happy to help!

[MentaL]

[MaxZeus]

Now tell me, how can this be called as 'ddos protected proxy', if you need to get ddos protection from someone else ?

Then just host the emulator in a ddos protected host... lol.

[Noman]

Now tell me, how can this be called as 'ddos protected proxy', if you need to get ddos protection from someone else ?

Then just host the emulator in a ddos protected host... lol.

Yeah but all you need is a Linux Centos 6.4 server, which is cheap from buyvm.net and for $3 extra you get a DDoS Protected IP which is pretty much worth it. If you were to purchase a DDoS Protected host possibly a VPS/Dedi that's DDoS Protected it'll cost more or even if you wanted to purchase a TCP Proxy from other people who sell them, you can just easily make your own by following this tutorial plus it's cheaper and easy to use and some people like making their own Proxy as you can manage them yourself.

[MaxZeus]

Why not running linux or windows directly in buyvm then and placing your stuff there ? Because there is no need to make any proxy.

[Quackster]

You can use Ubuntu or Debian as well. Just type apt-get instead of yum install :)

[Noman]

Why not running linux or windows directly in buyvm then and placing your stuff there ? Because there is no need to make any proxy.

The WHOLE point of a proxy is to protect your VPS/Dedi IP as you may have a server that is not DDoS protected to host the emulator, however you can easily use the proxy to forward the TCP Connection to the server that your emulator is hosted on. You can also buy a DDoS Protected Windows VPS but there is no point as it's most likely to be expensive, therefore Setting up a Linux TCP Proxy is easy and cheap.

[MikeOxlong]

You can use Ubuntu or Debian as well. Just type apt-get instead of yum install :)

Yeah, I'd rather use Debian but the system I was using at the time of the tutorial was CentOS, It seems to be the most noob friendly to be honest, as sometimes the repositories are not fully setup.

Ubuntu is unsuitable, as it's using RAM for no need for it's bloated system.

Why not running linux or windows directly in buyvm then and placing your stuff there ? Because there is no need to make any proxy.

It'd be ideal, but to be honest BuyVM's KVM only currently supports Windows Server 2003, and it's prices aren't the best, it's more for people who don't want to splash out on a new VPS for KVM, but don't want to pay $9.99 for a proxy with the same amount of protection, sometimes less with these smaller hosts as it seems to be.

[Quackster]

Yeah, I'd rather use Debian but the system I was using at the time of the tutorial was CentOS, It seems to be the most noob friendly to be honest, as sometimes the repositories are not fully setup.

Ubuntu is unsuitable, as it's using RAM for no need for it's bloated system.



It'd be ideal, but to be honest BuyVM's KVM only currently supports Windows Server 2003, and it's prices aren't the best, it's more for people who don't want to splash out on a new VPS for KVM, but don't want to pay $9.99 for a proxy with the same amount of protection, sometimes less with these smaller hosts as it seems to be.

Yeah I use CentOS for both my Minecraft and web server.

[MaxZeus]

The only problem is that the protection of these companies aren't good, they can solve some small script kiddie attacks, however this is just a home-made solution, of course, it works, but still have a lot necessary to be done to become something powerful :).

Good tutorial tho :).

But as indication, if you have the budget, just focus in getting something complete and ready, so you save time and troubles.

[MikeOxlong]

The only problem is that the protection of these companies aren't good, they can solve some small script kiddie attacks, however this is just a home-made solution, of course, it works, but still have a lot necessary to be done to become something powerful :).

Good tutorial tho :).

But as indication, if you have the budget, just focus in getting something complete and ready, so you save time and troubles.

Well, we've used our botnet for network testing (Hits at around 23gbps on a good day), there was little to no lag at all.

[Noman]

The only problem is that the protection of these companies aren't good, they can solve some small script kiddie attacks, however this is just a home-made solution, of course, it works, but still have a lot necessary to be done to become something powerful :).

Good tutorial tho :).

But as indication, if you have the budget, just focus in getting something complete and ready, so you save time and troubles.

Fresh-Hotel Uses BuyVM for their protection, we checked their client source and IP was referred to Frantech which is BuyVM. So if they're using BuyVM and not being attacked by "skiddie skids" it must be good then? We also tested it ourself, therefore it can't be bad.

[MikeOxlong]

Yeah I use CentOS for both my Minecraft and web server.

Nice one, it's a bit more on the stable side being based from RHEL 6.

[MaxZeus]

Fresh-Hotel Uses BuyVM for their protection, we checked their client source and IP was referred to Frantech which is BuyVM. So if they're using BuyVM and not being attacked by "skiddie skids" it must be good then? We also tested it ourself, therefore it can't be bad.

For the price you get it, don't expect it to handle more than 1 mid sized booter....

[MikeOxlong]

For the price you get it, don't expect it to handle more than 1 mid sized booter....

Booters are powerless, but it's took quite a few at once pretty large ones using 5 attack servers hitting at roughly 10gbps per attack.

[MaxZeus]

Booters are powerless, but it's took quite a few at once pretty large ones using 5 attack servers hitting at roughly 10gbps per attack.

This is your scenario, although the internet is quite big than just what you see :).