User is seeking a solution to implement rate limiting and DDoS protection on a per-port basis for their home server setup. This would enhance security against potential attacks.
Hi, I've been rolling my own version of Cloudflare's proxy using FRP and a Hetzner VPS for a couple years now. Basically, my website is pointed to the Hetzner VPS, which is running FRP. FRP then forwards the traffic through Wireguard to my home server which is running SWAG (Nginx). My home server terminates the TLS connection and forwards to other services. This lets me hide my public IP address, and in the event of a DDoS attack, I can just shut down the Hetzner VPS and connect to my server with a VPN. For security, I've got fail2ban inside the SWAG container, but nothing for the game servers on UDP. I'd like to add something in front of FRP that can do rate limiting and DDoS protection on a per port basis, but most projects in this space seem geared to enterprises. Has anyone gotten a setup like this working?