Wooow nice.
Printable View
Wooow nice.
I'm sure what others are trying to infer is that these are all unnecessary to aid the mitigation of just Denial of Service attacks - your webserver can be capable of doing so, itself. For DDoS, however, prevention at the application level won't even touch the network side of things. Your options are as follows;
Keep your IP address secret and choose Cloudflare. The free version is good, and the prices aren't bad either.
OR
Choose a well-established host, capable of mitigating attacks and boasting enterprise hardware w/ firewalls. It may cost a little more, but for the money many of you make on these 'retros', you'd be damned if you can't afford a little extra.
Nice, but as a webmaster if you simply setup cloudflare correctly and modify the PHP configuration you're able to easily hide the IP (I setup cloudflare for a forum then it got hit constantly with 130Mbit Ddos' nullrouting the IP so I let someone edit the configuration and it worked perfectly). Although these programs are good; in the sense you're only being hit on port 80 then sure go ahead but if they're sending SSYN attacks then you're not going to get much out of them hence a hardware firewall is ultimately the only way you're going to completely if not partially stop all attacks seen as it route's through the network. IIS+ Cloudflare + Hardware firewall = Ultimate protection against most attacks.