nginx anti-ddos

if ($cookie_antiflood !~* "что-нибудь") {
    rewrite ^(.*)$ /set_cookie$1 permanent;
    break ;
}
location ~ ^/set_cookie/ {
    add_header Set-Cookie "antiflood=что-нибудь; path=/";
    rewrite ^/set_cookie/(.*)$ /$1 permanent;
    break ;
}

http://habrahabr.ru/blogs/infosecurity/128526/#comment_4251423

User tags

source perlbrew mount SSD MODx vtysh zRam search debootstrap xhost sysrq proxy find groups soa iowait hotplug exim exim4 HDFS Adaptec oprofile fido7 glxinfo mysql backtrace xfs alien kernel virt-install jackd chroot rpm munin fail2ban security erase ps dovecot Salt mdadm .htaccess debian git parallel bonding performance cache opreport apt tin wget ssh puppet lstat NFS docker nfs4 alsa tftp RT swap rkhunter profiling nvidia usb tzdata bscan tiger radeon opcontrol PTR video vlan cpu elliptics ulimit language glusterfs vrrp replication KVM ddos mkfs bridge slab ipmitool OpenStack raid shellshock OpenSSL apache rtsp dns quagga 3Ware netfilter bind regex /etc/network/interfaces initrd cpanm StorMan qcow2 sysfs gpg deb backup iptables php freedos X forwarding taskset sftp vim lenny ubuntu corosync java AMD bug pam cfq qemu gre Areca cpu usage DRBD nginx squeeze sysctl APU lubuntu su sg MegaRAID chromium hdparm cgroups iSCSI fio wordpress shorewall tun conntrack keyboard xen ansible routing Swift ardour LVM build openvpn youtube cluster sysresccd numa arch firefox vrrpd in-addr.arpa grub graylog2 arp SpamAssassin drupal virtualbox lxc iops equalizer core dump flash PXE rsync dhcp dstat raid5 iostat xargs HTTPS leap second newgrp sublime gtk etch limit_conn encrypt pacemaker rtl8723be LSI perl lts ha storage docker-compose CPAN pulseaudio idmapd boot htop dpkg dhclient bacula ipmi tool pvmove virsh scsi bash SuperMicro asoundrc top noop mariadb sysctl.conf SYN tar arping CentOS centos 7 gdb route ip