Hi,
I wonder what are suitable methods to protect a Lemmy instance against DDOS attacks.
For example, can we use Cloudflare? Or it could break the federation?
Any ideas/suggestions?
Anything about running your own Lemmy instance. Including how to install it, maintain and customise it.
Be sure to check out the docs: https://join-lemmy.org/docs/en/administration/administration.html
If you have any problems, describe them here and we will try to help you fixing them.
At lemm.ee, we are using Cloudflare and have no issues with federation.
I’ve tried using proxy protection with cloudflare, but it breaks access to the site and just about every external replication service. Maybe something about pointing a proxy at a proxy? You still get telemetry, so you’d likely still go down without that protection, but at least you get reports in the cloudflare console about what ips to blackhole in your firewall.
YMMV
I would use cloudflare. How would this affect federation?