HaProxy DDoS protection system PoC

If there is an unusual HTTP requests flow to a specific domain, the system detects it and triggers DDoS protection mode. Each new client will be first forced to complete hCaptcha, before proceeding to the website.

How to test
  • export hcaptcha sitekey and secret:
export HCAPTCHA_SITEKEY=xxxXXxxx
export HCAPTCHA_SECRET=xxxXXxxx
  • run docker compose:
docker compose up
Description
HAProxy configuration and lua scripts implementing a challenge-response page where visitors solve a captcha and/or proof-of-work (cpu intensive) task. Intended to stop bots, spam, ddos, etc.
Readme 938 KiB
Languages
Lua 94.3%
JavaScript 4.1%
Dockerfile 1.1%
HTML 0.4%
Shell 0.1%