Hi everyone,

I have a number of VPS servers, from chicagovps.net, running ubuntu 11.10 server edition. I also have a high end dedicated server running windows server 2008R2. I noticed the VPS servers have DDoS protection on them, and a gigabit pipe. I am looking for a way to possibly use one (or all of) my VPS servers to act as like a gateway/router for this windows box, so that all traffic sent to this VPS, is instantly routed to my windows, and that this VPS will also be able to absorb and mitigate any DDoS attacks.
In addition, it would be nice (but is not essencial, i would rather stick to simplicity here if at all possible, being quite inexperienced with linux), to be able to also use this box as a firewall, to filter out packets matching rules i deem toxic. (such as possibly port scans max size UDP packets, excessive SYN packets, or an unusally high PPS from the same host over a period of time etc)

Thanks for any assistance!


Edit: Just realised, i onl have one IP and network card on the VPS

talk to your provider for the VPSs, they should already have that available as an option.

iptables nat forwarding should do the trick

Hi, thanks for the responses. I asked my VPS provider, and they suggested i use a VPN for my purposes, however neither of us could get packet forwarding to work.

@vl23, how would this work? Would it not mean that the linux server would forward it's traffic to the windows machine, which would then reply to that packet with ITS public lan address? Either causing broken communication, or circumventing my DDoS protection?

Sorry if i have greatly misunderstood how this will work.