3 ms·

HAProxy + DDOS protection? https://www.haproxy.com/blog/application-layer-ddos-attack-protection-with-haproxy https://www.haproxy.com/blog/application-layer-d

HAProxy + DDOS protection? https://www.haproxy.com/blog/application-layer-ddos-attack-protection-with-haproxy https://www.haproxy.com/blog/application-layer-ddos-attack-p... Or any proof of work proxy that delays the ingress traffic. If you only have one server there is very little you can do except maybe redirect to a static page or kill the DNS entries.

OutOfHere 2y ago
HAProxy looks good, but I would also consider a unique unguessable subdomain per established customer. This won't thwart the IP-level attacks, but it will thwart most subdomain attacks for those customers.