Discussion What is the best way to protect server?

So, How to protect server in a best way?
Like Trust player+Taptodo, the player should carry out the parkour, so they player have permission to place/break-- for survival, for security, owner can use some plugin to protect the robot (defense DDOS attack) Same IP only one player can join the game like that.
So anyone have a best idea to share?

Change the maximum amount of packet one IP address can send. Plenty of softwares out there as well...

but i am not using VPS

Clarify what you mean. There are many things that a player has to be protected from. For example, from a stupid owner... Which perspective do you?

ddos attack, using js...

DDoS attack using JavaScript? What?
You can't stop a DDoS attack using a plugin. It needs to be stopped way before it actually reaches your server.

DDOS attack can stopped by plugin....and using js mean the player can using js in the server.

It can't. Once it's attacking the server a plugin can't do anything.

You mean ModPE scripts?

You can't stop the DDoS by a plugin. What a DDoS does is to spam your server with signals. And to know that such signals reached the server by a plugin, it is when the server is already affected by the signals. Let's take an analogy. You want to block noise from reaching your ears, but how do you know there is noise? It must be the noise already reaching your ears such that you know the noise arrives.
But then, to block DDoS, you must block the signals before you reach the server. But what the plugin handles is what happens after they reach the server. So how can you block it?

As for ModPE scripts, you can't detect them unless BlockLauncher does some tricks and sends signals to the server. Otherwise, how do you know a poison is a poison until someone drinks it and dies? So, you can't actively detect ModPE scripts.

Try CloudFlare
The free packet includes also a basic DDoS protection.

So.... How to defense that? whitelist?

And what should i do if the player using js on my server.?????

You can't do nothing to prevent players using MODS, Blocklauncher (JS) automatically disable ModPE scripts, so they're using MODS, not JS

But someone using JS (touch a block, then auto spawn a house/building)

Detect them, such as how unreasonable their movement is, like if they build too fast, kick them.

Nop, BlockLauncher allows mods now ._.

If a blocklauncher mod uses entity spawning or block placement, it will only appear and work correctly to the person who ran that mod. (ModPE is what I'm known for so.. Trust me xD)

Nop, you don't need to do that:

A small change in BlockLauncher can make them become placement.

Yes, blocklauncher it's a bad app because it open the door for the hackers and we can't really detect them.

Nop, blocklauncher modifies a local world folder. If you join a server, it modifies the local world _lastjoinedserver . it wouldn't have access to modify server files.