[HELP] Protect against HTTP/2.0 attack

[Gimly86]

Hello all,

This is not an issue, it is possible to change to discussion please ?

VM : Only dedicated to BunkerWeb
O/S : Debian 12
Nginx : 1.26.3-1~bookworm
BunkerWeb : 1.6.1 (No Pro license)

This morning, I'm having DDoS attack on HTTP/2.0, from 1000 IP, with this format on /var/log/bunkerweb/access.log :

_ 5.199.161.81 - - [22/May/2025:10:46:21 +0200] "PRI * HTTP/2.0" 400 86965 "-" "-"

Due to this attack, the 8vCPU on my VM having LOAD.

So, i want to know what is the best practices/configuration to prevent this type of attack ?

Thanks in advance

[TheophileDiot]

Hi @Gimly86, an Anti-DDoS plugin is available in the PRO version: https://www.bunkerweb.io/2025/02/25/introducing-the-new-anti-ddos-bunkerweb-pro-feature/

[Gimly86]

Thanks for your reply @TheophileDiot