DoS and DDoS protection with Imunify360

Issue

Does Imunify360 provide mechanisms to protect against DoS and DDoS attacks?

Environment

• Imunify360

Solution

Currently, Imunify360 provides both DoS Protection and Enhanced DOS Protection.

• DoS Protection works by counting connections from each remote IP address per local port separately. When the number of simultaneous connections exceeds the configured threshold, the IP address is blocked.

• Enhanced DoS Protection forms an additional layer of protection. It monitors the rate of requests from attacker IP addresses per unit of time and reacts quickly to sudden bursts of requests.

DDoS protection is not currently available in Imunify360, although there are plans to implement this feature in the future. For large-scale distributed attacks, it is recommended to use an external protection layer such as:

• DNS-level reverse proxy services

• CDN-based traffic filtering solutions

• Network-level DDoS mitigation providers

As an example, Imunify360 is compatible to run with Cloudflare. More details are available in this article.

Although CSF is discontinued, guidance for environments running both Imunify360 and CSF can be found in this article.

Useful links

• https://cloudlinux.zendesk.com/hc/en-us/articles/4413535558546-DDoS-and-SYNC-attack-protection-with-Imunify360.
• https://docs.imunify360.com/dashboard/#dos-protection.
• https://help.liquidweb.com/s/article/Using-CSF-Firewall-to-Mitigate-DoS-DDoS-Attacks.