07-28-2019, 01:10 PM
(07-28-2019, 12:17 PM)chanalku91 Wrote: I have 4 VPS and 1 Private Datacenter Hmm GRE Tunnel, I don't want to use it Because I don't know the function of this device!
Can you explain how the GRE tunnel can protect VPS from DDOS attacks?
GRE is short for Generic Routing Encapsulation. It's similar to a VPN - It acts as a tunnel proxy between two points on the router level and ensures all packets are sent to the receiving point from Point A to Point B. You could use a machine with several IP Addresses leased as the front end point while tunneling it to other machines.
| Machine with several IP Addresses [Point A] | ----------> | GRE Tunnel | ----------> | Server [Point B] | ----------> | Reverse Proxied Servers (Nginx) |
Note that you will be suffering some latency when you establish such network but shouldn't be a problem with caching techniques if this is for a web server. Also, if security is a main concern then you may want to use something like an IPSec Tunnel which encrypts all data being sent through a tunnel.