Title: Protection Against DDoS Author: WPChef Published: 2016년 7월 1일 Last modified: 2020년 4월 29일 --- 플러그인 검색 이 플러그인은 **최근 3개의 주요 워드프레스 출시와 시험 되지 않았습니다**. 워드프레스의 좀 더 최근 버전으로 이용할 때 더 이상 관리되지 않고 지원되지 않고 호환성 문제가 있을 수 있습니다. ![](https://s.w.org/plugins/geopattern-icon/protection-against-ddos.svg) # Protection Against DDoS 작성자: [WPChef](https://profiles.wordpress.org/wpchefgadget/) [다운로드](https://downloads.wordpress.org/plugin/protection-against-ddos.1.5.2.zip) * [세부사항](https://ko.wordpress.org/plugins/protection-against-ddos/#description) * [평가](https://ko.wordpress.org/plugins/protection-against-ddos/#reviews) * [개발](https://ko.wordpress.org/plugins/protection-against-ddos/#developers) [지원](https://wordpress.org/support/plugin/protection-against-ddos/) ## 설명 This plugin resolves performance issues caused by brute force attacks described in the WordPress Codex here: [https://codex.wordpress.org/Brute_Force_Attacks](https://codex.wordpress.org/Brute_Force_Attacks) > **From WordPress Codex:** > _Due to the nature of these attacks, you may find your server’s memory goes through > the roof, causing performance problems. This is because the number of http requests( > that is the number of times someone visits your site) is so high that servers > run out of memory._ > _A common attack point on WordPress is to hammer the wp-login.php file over and > over until they get in or the server dies. You can do some things to protect yourself._ Protection Against DDoS plugin addresses these issues very well. It also allows to deny access to common WordPress features that get frequently attacked, like xmlrpc or RSS feeds pages. CloudFlare users can allow or deny access for visitors from specified countries. **All checks are done via the .htaccess file so that bogus requests can’t even reach your WordPress site and get bounced at the web server level.** You can also specify exactly where they can be bounced to. #### Compatibility * Doesn’t have any known conflicts with any other security plugins. * Fully compatible with WordPress multisites. Advanced users can get more technical information on the [FAQ page](https://wordpress.org/plugins/protection-against-ddos/faq/). ## 스크린샷 [⌊Settings page.⌉⌊Settings page.⌉[ Settings page. ## FAQ How does the plugin work? The plugin starts working right after you install it. It utilizes a very simple idea: when a real user accesses the login page, the plugin sets a validation cookie for this user. After the user submitted the log in form, the plugin checks if the cookie is there and correct. If so, the user is allowed to log in. Otherwise the user gets bounced off. Since malicious bots attack the WordPress login page directly, they don’t get the protection cookie and hence always get bounced off. Moreover validation happens at the server level BEFORE WordPress is even accessed (via .htaccess file) and hence no load is directed to the WordPress at all. The secure cookie is encrypted and unique for every site so the bots can’t falsify it. Simple and effective! Can it protect against any DDoS attack? This plugin protects against DDoS CAUSED by brute-force attacks ONLY. This is the most common cause for an operational WordPress site to be down though. If your site is under attack for other reasons (for example if you got a lot of traffic to one of your posts) this plugin will not help! What are the system requirements? This plugin only works on the servers that support .htaccess files. Most Linux servers do. ## 후기 ![](https://secure.gravatar.com/avatar/a61a3fe46da238ccd95abfc954213ec2486724e33b3a31caa2c3f6adf6aa27fb? s=60&d=retro&r=g) ### 󠀁[This is absolutely the best DDoS Protection plugin available](https://wordpress.org/support/topic/this-is-absolutely-the-best-ddos-protection-plugin-available/)󠁿 [Eli](https://profiles.wordpress.org/realact/) 2020년 4월 24일 Our site was being attacked heavily using exactly the technics for which this plugin was creating for. I cannot thank the creator enough for providing it to the public free of charge. Thank you so much for your contribution. My only concern is that it hasn't been updated for quite sometime, I really hope it's not abandoned. I'm surprised this product doesn't have more reviews and more downloads, I guess it hasn't had enough promotion. Thank you so much @WPChef, please keep it alive! ![](https://secure.gravatar.com/avatar/715c991a8f46c156b5d097d68b976ebb1ab5aaa2e8128e95a885a3d429bf8f72? s=60&d=retro&r=g) ### 󠀁[This Plugin Saved Me](https://wordpress.org/support/topic/this-plugin-saved-me-11/)󠁿 [kcwebguy](https://profiles.wordpress.org/kcwebguy/) 2019년 9월 9일 답글 1개 I was having a major DDOS against a number of my websites… the attack was taking down my entire VPS and affecting my entire business. I deployed this plugin to all of my sites and saw immediate relief from the attack. I took a screenshot of my load graph with an arrow at the point in time I deployed this plugin. My thanks to this author for a clever and effective plugin. ![](https://secure.gravatar.com/avatar/b6853eab0d51da161561de8cca10ba04b2cea39ed97c1f728acea8fcc5ffe617? s=60&d=retro&r=g) ### 󠀁[Serious(ly) Lightweight Extra Security](https://wordpress.org/support/topic/seriously-lightweight-extra-security/)󠁿 [Gahapati](https://profiles.wordpress.org/gahapati/) 2017년 5월 4일 When I first came across Protection Against DDoS, I was impressed by the simplicity of the idea and the effectiveness of its execution. Assuming that DDoS attacks will hardly be carried out by lone hackers armed with web browsers, it's reasonably safe also to assume that accepting and returning cookies will be among the least of their concerns. In which case the attack is stopped dead in its track very early on, in fact before WordPress is even asked to start up its engine. When I first tested this plugin, unfortunately it was not compatible with WP Multisite, yet. But within days of pointing this out to the developer, Protection Against DDoS was updated accordingly! The plugin has earned a permanent resident status in my toolbox! ![](https://secure.gravatar.com/avatar/a6b9bae4f6d662928894fffaf1af60facbdb44f6d725e7c5256942f5fccdd538? s=60&d=retro&r=g) ### 󠀁[Works very well](https://wordpress.org/support/topic/works-very-well-199/)󠁿 [2by2host](https://profiles.wordpress.org/2by2host/) 2016년 9월 3일 We use this when a WordPress site gets bombarded with bogus traffic and see the results within minutes. We can see how HTTP requests drop right after the plugin is installed. This plugin should be a must for any site. [ 모든 5 평가 읽기 ](https://wordpress.org/support/plugin/protection-against-ddos/reviews/) ## 기여자 & 개발자 “Protection Against DDoS”(은)는 오픈 소스 소프트웨어입니다. 다음의 사람들이 이 플러그인에 기여하였습니다. 기여자 * [ WPChef ](https://profiles.wordpress.org/wpchefgadget/) [자국어로 “Protection Against DDoS”(을)를 번역하세요.](https://translate.wordpress.org/projects/wp-plugins/protection-against-ddos) ### 개발에 관심이 있으십니까? [코드 탐색하기](https://plugins.trac.wordpress.org/browser/protection-against-ddos/) 는, [SVN 저장소](https://plugins.svn.wordpress.org/protection-against-ddos/)를 확인하시거나, [개발 기록](https://plugins.trac.wordpress.org/log/protection-against-ddos/)을 [RSS](https://plugins.trac.wordpress.org/log/protection-against-ddos/?limit=100&mode=stop_on_copy&format=rss) 로 구독하세요. ## 변경이력 #### 1.5.2 * Added access control for autodiscover/autodiscover.xml and wpad.dat. #### 1.5.1 * Can deny access to xmlrpc, RSS and certain countries now. #### 1.4.1 * Multisite compatibility implemented. #### 1.3 * Validation cookie is set via JavaScript now and encrypted. #### 1.2 * Redirect POST-requests only for login page. #### 1.1 * Set validation cookie for all GET-requests. * Use random cookie name for better security. #### 1.0 * Initial release. ## 기초 * 버전 **1.5.2** * 최근 업데이트: **6년 전** * 활성화된 설치 **3,000+** * 워드프레스 버전 ** 3.5.2 또는 그 이상 ** * 다음까지 시험됨: **5.4.24** * 언어 * [English (US)](https://wordpress.org/plugins/protection-against-ddos/) * 태그: * [Brute Force](https://ko.wordpress.org/plugins/tags/brute-force/)[ddos](https://ko.wordpress.org/plugins/tags/ddos/) [login](https://ko.wordpress.org/plugins/tags/login/)[Peformance](https://ko.wordpress.org/plugins/tags/peformance/) [security](https://ko.wordpress.org/plugins/tags/security/) * [고급 보기](https://ko.wordpress.org/plugins/protection-against-ddos/advanced/) ## 평점 별 5점 만점에 5점. * [ 4/5-별점 후기 ](https://wordpress.org/support/plugin/protection-against-ddos/reviews/?filter=5) * [ 0/4-별점 후기 ](https://wordpress.org/support/plugin/protection-against-ddos/reviews/?filter=4) * [ 0/3-별점 후기 ](https://wordpress.org/support/plugin/protection-against-ddos/reviews/?filter=3) * [ 0/2-별점 후기 ](https://wordpress.org/support/plugin/protection-against-ddos/reviews/?filter=2) * [ 0/1-별점 후기 ](https://wordpress.org/support/plugin/protection-against-ddos/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/protection-against-ddos/reviews/#new-post) [모든 리뷰 보기](https://wordpress.org/support/plugin/protection-against-ddos/reviews/) ## 기여자 * [ WPChef ](https://profiles.wordpress.org/wpchefgadget/) ## 지원 할 말 있으신가요? 도움이 필요하신가요? [지원 포럼 보기](https://wordpress.org/support/plugin/protection-against-ddos/)