# DDoS DataSec

> Open-source DDoS mitigation strategies, reverse-proxy rate-limiting rules, and web server security hardening recipes.

## Site Overview

DDoS DataSec provides sysadmins, DevOps, and security engineers with copy-paste firewall rules (iptables, UFW), web server configurations (Nginx, Cloudflare WAF), and CVE hot-mitigations.

## Verified Defense Recipes

- [SYN Flood Attack Mitigation with iptables & SYN Cookies](https://syn.ddosdatasec.com/syn-flood-iptables/): Production configuration, impact signature, and simulation commands.
- [HTTP Slowloris & Slow POST DDoS Defense on Nginx](https://syn.ddosdatasec.com/http-slowloris-nginx/): Production configuration, impact signature, and simulation commands.
- [Layer 7 HTTP Flood & CC Attack Mitigation with Nginx limit_req](https://syn.ddosdatasec.com/layer7-cc-nginx-ratelimit/): Production configuration, impact signature, and simulation commands.
- [DNS & NTP UDP Amplification Attack Defense with iptables](https://syn.ddosdatasec.com/udp-amplification-iptables/): Production configuration, impact signature, and simulation commands.
- [Linux sysctl.conf Network Hardening for Anti-DDoS Architecture](https://syn.ddosdatasec.com/kernel-sysctl-ddos-tuning/): Production configuration, impact signature, and simulation commands.
- [Cloudflare WAF Custom Rules to Block Scrapers & L7 Botnets](https://syn.ddosdatasec.com/cloudflare-waf-bot-rules/): Production configuration, impact signature, and simulation commands.
- [WordPress XML-RPC Pingback DDoS Mitigation (Nginx & Apache)](https://syn.ddosdatasec.com/wordpress-xmlrpc-ddos/): Production configuration, impact signature, and simulation commands.
- [Content Security Policy (CSP) for Next.js & Stripe Elements](https://syn.ddosdatasec.com/content-security-policy-stripe/): Production configuration, impact signature, and simulation commands.
- [Strict-Transport-Security (HSTS) Preload Setup on Nginx](https://syn.ddosdatasec.com/strict-hsts-preload-nginx/): Production configuration, impact signature, and simulation commands.
- [Strict CORS & Preflight Response Headers for Cloudflare Workers](https://syn.ddosdatasec.com/cors-headers-cloudflare-workers/): Production configuration, impact signature, and simulation commands.
- [Production SSH Hardening with Ed25519 & Fail2ban (Ubuntu/Debian)](https://syn.ddosdatasec.com/ssh-hardening-fail2ban/): Production configuration, impact signature, and simulation commands.
- [Nginx Modern TLS 1.3 Ciphers & Mozilla SSL Hardening Profile](https://syn.ddosdatasec.com/nginx-tls-cipher-hardening/): Production configuration, impact signature, and simulation commands.
- [Production UFW Firewall Baseline for Web & Database Servers](https://syn.ddosdatasec.com/ufw-firewall-production/): Production configuration, impact signature, and simulation commands.
- [Log4Shell (CVE-2021-44228) Hot-Patching & WAF Regex Mitigation](https://syn.ddosdatasec.com/log4shell-waf-regex/): Production configuration, impact signature, and simulation commands.
- [Spring4Shell (CVE-2022-22965) ClassLoader Block Rule for Nginx](https://syn.ddosdatasec.com/spring4shell-nginx-block/): Production configuration, impact signature, and simulation commands.
- [Clickjacking Defense with X-Frame-Options & CSP frame-ancestors](https://syn.ddosdatasec.com/x-frame-options-clickjacking/): Production configuration, impact signature, and simulation commands.

## Specification References

- [llmstxt.org Specification](https://llmstxt.org/): Machine-readable documentation standard.
- [OWASP Top 10](https://owasp.org/www-project-top-ten/): Web application security baselines.