Vesta Control Panel - Forum

Hi,

Does anyone have an idea how to block stronger layer-7 attacks?

You'd need a web application firewall (WAF), or some sort of proxy to inspect all the traffic.

Probably the easiest way is to put it behind CloudFlare and use their WAF - Otherwise there are some open source options.

I am able to block the most layer-7 attacks with a good Nginx configuration, however strong attacks go through and take the whole web server down. I am not in for Cloudflare, as I am not a fan of it.
Could you perhaps link those open-source options? Would like to check them out.