Filter out DDoS attacks - Anyone can help me please?

This tutorial for install xdp ?

XDP requires custom build IPFire Linux kernel and a few other custom addon software, no simple tutorial could do that by youself :). I have a custom build IPFire software, ISO and KVM virtual machine image here https://www.99os.org/download/, it will be just a few mouse clicks from the WebUI to enable DDoS feature with the custom build image. depending on your DDoS traffic, it may require custom XDP program written to meet your situation, please refer GitHub - xdp-project/xdp-tutorial: XDP tutorial for XDP, it is more targeted to developer though.

1 Like

This ipfire iso include xdp sir ?

yes, I will publish video on how to use it, very easy

Let me know when u publish the video … and i try install your iso ipfire now … anything i comment back here

What is the type of DDoS traffic you got, TCP or UDP? I saw your previous screen shot you have TCP port forward to your backend game server? or is it UDP ? XDP could do UDP rate limit at driver level based on source IP or subnet with longest prefix match in kernel eBPF map, much faster than iptables

Udp and tcp … btw can i install at hyper v your iso ??

if hyper v support iso installation, I think you can

Yes now i use ipfire with hyper v its work … but your iso i see got some error … i send u screenshort when i at home

sure, I only tested the virtual machine image since it is easier for me to test in KVM hypervisor during development, it would be good to know what’s wrong with the ISO, make sure you run b2sum command to checksum the ISO image you downloaded to match the checksum from the download site, make sure the ISO is not corrupted during download

Got this error

it appears when /bin/sh is executed, it fails to find libreadline.so.8 library, on my KVM image virtual, there is libreadline.so.8

[root@ipfire ~]# ldd /bin/sh
	linux-vdso.so.1 (0x00007fff36b83000)
	libreadline.so.8 => /usr/lib64/libreadline.so.8 (0x000078d15b817000)
	libhistory.so.8 => /usr/lib64/libhistory.so.8 (0x000078d15b809000)
	libncursesw.so.6 => /usr/lib64/libncursesw.so.6 (0x000078d15b790000)
	libc.so.6 => /lib64/libc.so.6 (0x000078d15b5af000)
	/lib64/ld-linux-x86-64.so.2 (0x000078d15b874000)

and in my build directory, there is also

find build/ -name "libread*"

build/usr/lib/libreadline.so.8
build/usr/lib/libreadline.so
build/usr/lib/libreadline.so.8.2

not sure why the ISO not including the libreadline.so.8, maybe other ipfire expert knows, I will keep digging.

this is the virtual image boot while running /init, no libreadline library error

[    2.032059] x86/mm: Checked W+X mappings: passed, no W+X pages found.
[    2.033354] Run /init as init process
[    2.034067]   with arguments:
[    2.034069]     /init
[    2.034071]   with environment:
[    2.034072]     HOME=/
[    2.034074]     TERM=linux
[    2.034075]     BOOT_IMAGE=/vmlinuz-6.6.15-ipfire

@eykalzz can you show the checksum of ISO you downloaded, just make sure you got the right ISO. here is the checksum

cat ipfire-2.29-core184-x86_64.iso.b2
5b931235a934615056485ab6f2e8d2528742d44aafb4f6371e008a5ace5d615c574f31197512e12a6d6627cc6d39cf6dbf23f4cb5ec390c21371191a61ce596c  ipfire-2.29-core184-x86_64.iso

how can i attach with checksum ?? i have download ipfire-2.29-core184-x86_64.iso.b2 and ipfire-2.29-core184-x86_64.iso … at hyper v only can attach ipfire-2.29-core184-x86_64.iso

no you don’t attach checksum file, checksum .b2 is just a text file, what you need is to checksum the ISO file with b2sum command and check if the output matches the content of .b2 file, you probably can upload the ISO file to a linux machine, or your existing ipfire machine to run b2sum ipfire-2.29-core184-x86_64.iso

1 Like

can we ulraviewer ?

i just do like this … original from ipfire also use like this all work fine … when i use your ipfire … got problem

(post deleted by author)

@eykalzz here is the video on how to enable DDoS from WebUI https://youtu.be/1pdNgoP-Kho