Build your own IP monitoring and Anti-DDoS Appliance


OVERVIEW: The quickest and most cost-effective method of protecting your network and services against DDoS attacks is by installing Andrisoft Wanguard on a spare, commodity server which usually costs under 3000 US$. The software can be installed easily, in just a few minutes, on any 64-bit server equipped with an Intel or AMD processor.

HARDWARE
REQUIREMENTS: 
Wanguard was designed to be completely scalable. It can be installed either on a single server with adequate hardware resources or on multiple servers distributed across the network.
The exact hardware specifications needed for each Wanguard component are listed on each component page: Console requirements, Packet Sensor requirements, Flow Sensor requirements and Filter requirements.

The table below shows how to size the hardware for each software component:

Importance of
HW resources

CPU Speed
(> GHz/core)

CPU Cores
(> cores)

RAM Size
(> GB)

HDD Size
(> GB)

HDD/SSD Speed
(> Mbytes/s)

Network Adapter
(Vendor, Model)

Console

High

High

High

Very High

Very High

Very Low

Packet Sensor

Very High

High

Low

Low

Low

Very High

Flow Sensor

Low

Low

Very High

Medium

High

Very Low

SNMP Sensor

Very Low

Low

Very Low

Very Low

Very Low

Very Low

Sensor Cluster

Medium

Medium

Medium

Very Low

Very Low

Very Low

Packet Filter

Very High

Very High

Medium

Very Low

Very Low

Very High

Flow Filter

Low

Low

High

Very Low

Very Low

Very Low

Filter Cluster

Medium

Medium

High

Very Low

Very Low

Very High


USING VIRTUAL
MACHINES: 
You can use Virtual Machines during the trial period, but using dedicated servers for production is highly recommended.
A few arguments against using Virtual Machines to run Wanguard on a regular basis:
  • Having fast and uninterrupted access to the hard disk is a critical requirement for the Console.
  • The resources must be provisioned in a predictable and timely manner.
  • Some Virtual Machines do not have a stable clock source.
OPERATING SYSTEM INSTALLATION:  Before installing Wanguard you will need to install (no advanced Linux skills required) on the designated server one of the supported Linux distributions: Red Hat Enterprise Linux 6 or 7 (commercial), CentOS 6 or 7 (free, Red Hat-based), Debian Linux 6 “Squeeze”, 7 “Wheezy”, 8 "Jessie" or 9 "Stretch" (free, community-supported), Ubuntu 12, 14 or 16 (free, Debian-based), OpenSuSE 13 (free, Novel-based).

Wanguard installs itself under /opt, so make sure the root partition has at least 10 GB free space.