Build your own IP monitoring and Anti-DDoS Appliance

OVERVIEW:

The quickest and most cost-effective method of protecting your network and services against DDoS attacks is by installing Andrisoft Wanguard on a spare, commodity server. The software can be installed easily, in just a few minutes, on any 64-bit server equipped with an Intel or AMD processor.

HARDWARE
REQUIREMENTS:

Wanguard was designed to be completely scalable. It can be installed either on a single server with adequate hardware resources or on multiple servers distributed across the network. The exact hardware specifications needed for each Wanguard component are listed on each component page: Console, Packet Sensor, Flow Sensor and Filter.

The table below shows how to size the hardware for each software component:

	CPU Speed (> GHz/core)	CPU Cores (> cores)	RAM Size (> GB)	HDD Size (> GB)	HDD/SSD Speed (> Mbytes/s)	Network Adapter (Vendor, Model)
Console	High	High	High	Very High	Very High	Very Low
Packet Sensor	Very High	High	Low	Low	Low	Very High
Flow Sensor	Low	Low	Very High	Medium	High	Very Low
SNMP Sensor	Very Low	Low	Very Low	Very Low	Very Low	Very Low
Sensor Cluster	Medium	Medium	Medium	Very Low	Very Low	Very Low
Packet Filter	Very High	Very High	Medium	Very Low	Very Low	Very High
Flow Filter	Low	Low	High	Very Low	Very Low	Very Low
Filter Cluster	Medium	Medium	High	Very Low	Very Low	Very High

USING VIRTUAL
MACHINES:

You can use Virtual Machines during the trial period, but using dedicated servers for production is highly recommended.
A few arguments against using Virtual Machines to run Wanguard on a regular basis:
• Having fast and uninterrupted access to the hard disk is a critical requirement for the Console.
• The resources must be provisioned in a predictable and timely manner.
• Some Virtual Machines do not have a stable clock source.

OPERATING SYSTEM INSTALLATION:

Before installing Wanguard you will need to install (no advanced Linux skills required) on the designated server one of the following Linux distributions: Red Hat Enterprise Linux 7, 8 or 9 (commercial), CentOS 7 or 8 (free, RHEL-based), Rocky Linux (free, RHEL-based), AlmaLinux (free, RHEL-based), Debian 10, 11 or 12 (free, community-supported), Ubuntu 16, 18, 20, 22 or 24 (free, Debian-based).

Wanguard installs itself under /opt, so make sure the root partition has at least 10 GB free space.