...You can follow the setup guide at https://33hops.com/vmware-esxi-nat-with-custom-firewall.html
The appliance comes in a very small package (less than 5 MB), still it's fully functional, make not mistake. It is configured with 256 MB of RAM in a 50 MB .vmdk disk, which should be more than enough for any small lab, corporate department or (c)VMWare (c)ESXi dedicated server.
Just uncompress and register, enjoy.
Detect Flooder IPs, Reduce Attack Surface against HTTP Flood Attacks
This module provides attack surface reduction enhancements against the HTTP Flood Attacks at the web application level. Massive crawling/scanning tools, HTTP Flood tools can be detected and blocked by this module via htaccess, firewall or iptables, etc. (like mod_evasive)
You can use this module by including "iosec.php" to any PHP file which wants to be protected.
You can test module here: http://www.iosec.org/test.php (demo)
Watch the Proof of Concept video:...
Crowd Control is an small, cross-platform HTTP proxy (a fork of the elhttp project) designed for systems with little RAM, such as a home router. It can filter URLs using SquidGuard blocklists, and has the unique ability to filter HTTPS domains as well.