Nginx L7 DDoS Protection! 💥 ⚡

Debian 13 (trixie) supported
nginx 1.30.0
HTTP/3 (QUIC) via AWS-LC
ModSecurity v3 (libmodsecurity)
Naxsi
Lua (LuaJIT 2.1)
Cookie-based challenge
Versions List

Easy install

  sudo install -d /etc/apt/keyrings
  sudo curl -fsSL https://apt.julio.al/repository/public/keys/raweb.asc \
    -o /etc/apt/keyrings/raweb.asc

  echo "deb [signed-by=/etc/apt/keyrings/raweb.asc] https://apt.julio.al/repository/raweb trixie main" \
    | sudo tee /etc/apt/sources.list.d/raweb.list

  sudo apt update && sudo apt install twiy

Compile from source

apt-get -y install git && cd /root/ && git clone https://github.com/theraw/The-World-Is-Yours.git && cd The-World-Is-Yours/

bash build/run.sh new
bash build/run.sh build
bash build/run.sh postfix

If you want to try with a custom nginx version then, open version file and change versions then run

bash build/run.sh new
bash build/run.sh build

CLI Info

bash build/run.sh new     => Download all modules + nginx that are missing from /opt/. (If you make version changes to 'version' file then simply rerun this to download again)
bash build/run.sh build   => This is going to simply compile nginx nothing else. (You can run this as many times as you need, its not going to replace configs)
bash build/run.sh postfix => This will redownload /nginx/nginx.conf everytime you run it. (Suggested to run only once when you install nginx via my repo for first time)

Nginx info.

=> Nginx Folder     = /nginx/
=> --conf-path      = /nginx/nginx.conf
=> --pid-path       = /var/run/nginx.pid 
=> --user           = nginx 
=> --group          = nginx
=> --sbin-path      = /usr/sbin/nginx
=> --error-log-path = /var/log/nginx/error.log

LUA RESTY CORE SCRIPTS = /usr/nginx_lua

How to install lua scripts

. /root/The-World-Is-Yours/version
cd /opt/mod/; git clone https://github.com/openresty/lua-resty-lrucache.git
cd /opt/mod/lua-resty-lrucache; make install PREFIX=${LUA_SCRIPTS}
nginx -s reload

Performance

vs. vanilla nginx (same version, default config)

Area	Twiy	Vanilla nginx	Why
TLS handshake throughput	+5–15%	baseline	AWS-LC's tuned AES/ChaCha asm vs OpenSSL
Static file throughput	2–5×	baseline	`open_file_cache` (off by default in vanilla)
TLS resumed handshakes	~10× CPU saving	baseline	200 MB shared session cache vs none
Per-handshake latency (cold)	−50–200 ms p95	baseline	OCSP stapling on by default
Compressed-text bandwidth	−60 to −80%	unchanged	brotli + gzip enabled in `http {}`
WAF, Lua, HTTP/3	included	not included	needs custom build

Support options.

No free support for how to do things, please don't spam with questions in discord.
Free support for installation related errors only, is included.
Business inquiries, regarding anti-ddos protection or other security/optimization concerns you can contact me on : raw@dopehosting.net