About Guard
Guard watches the traffic that has already reached your server: connections, SYN requests, dropped packets and the busiest addresses. It applies flood protection on the server itself and lets you block or unblock an address from your dashboard.
What it does
- Host flood control: SYN cookies, dropping invalid packets and a rate limit on ports 80 and 443
- Traffic view with the busiest addresses and abnormal spikes
- Block and unblock addresses from the dashboard
What it does not do
- It is not an internet DDoS scrubber: it only handles traffic that already reached this server
- It cannot protect a server whose network link is already full
Schedule: Samples every minute
How it updates
The agent can update itself on request.
sudo rootmanage-guard --updateGuard version history
- v1.0.0New
Guard launched: flood control for your server
The fifth RootManage agent: host-level flood control, with block and unblock from the dashboard.
What changed
- Host flood control: SYN cookies, dropping invalid packets and a rate limit on ports 80 and 443
- A traffic view with the busiest addresses and abnormal spikes
- Block and unblock addresses from the dashboard
- It is not an internet DDoS scrubber and only handles traffic that already reached the server
How it affects you
- Helps a server survive abusive floods, but it cannot help if the network link is already full
What to do. Install it with the command from your dashboard.
Questions about Guard updates
How do I update Guard?
Run sudo rootmanage-guard --update. rootmanage-guard --version shows the installed version.
Will Guard block my own visitors?
Guard limits abusive rates and invalid packets. If an address is blocked by mistake, unblock it from the dashboard or with rootmanage-guard --unblock IP.