EndGame V3 Script • Free & Self-Hosted

EndGame V3 – Free Anti-DDoS for Onion & I2P | BotDigit

Meet EndGame V3: a free, self-hosted anti-DDoS front for Tor and I2P. Human-friendly guide, quick install steps, and free setup support from BotDigit.

Stop DDoS at the Front Door — The Human-Friendly Guide to EndGame

EndGame is a self-hosted anti-DDoS front for Tor and I2P. It filters junk, shields your origin, and keeps real users flowing—all without third-party gatekeepers.

At a Glance

Zero trust issues. Full control. Locally compiled, locally run—no middlemen. Built with NGINX+LUA, Tor/I2P, and hardened defaults to take the sting out of bot floods.

Free forever. Works with Tor & I2P. Go/Rust components.

What is EndGame?

EndGame is a front-end shield that sits between users and your real app server. It filters abusive traffic, rate-limits bad actors, issues lightweight captchas, and only forwards clean requests to your origin.

Typical flow: User → Tor/I2P → EndGame Front → (optional Tor) → Origin Server.

Use EndGame on a separate machine from your origin. It proxies content onward after screening.

Why it matters

Own your perimeter: no third-party filtering or logging, transparent and auditable stack, and horizontal scalability using Go-based balancing.

What you get out of the box

Smart Traffic Filtering

NGINX + LUA rules with built-in captcha and Tor circuit-ID aware rate-limits. Stops flooders without punishing humans.

Hardened by Default

Automated setup includes fail2ban, rkhunter, chkrootkit, and kernel/memory tweaks for stability under load.

Scale with GoBalance

A high-performance rewrite of OnionBalance in Go for descriptor publishing and load distribution across many fronts.

Rust Captcha

Lightweight Rust captcha with zero runtime deps to keep your front snappy even during heavy surges.

Tor & I2P Ready

Enable Tor/I2P paths per your threat model. Optional PoW/intro-defense hardening for onion services.

Brandable

Drop in your colors, logo, and favicon so your queue and captcha pages feel like home.

How EndGame works

EndGame runs as a front that inspects incoming requests. Clean traffic reaches your origin; abusive traffic is throttled, challenged, or dropped. For serious scale, pair with GoBalance so a single public master onion distributes users across many EndGame fronts.

Why balancing matters

GoBalance coordinates descriptors so traffic spreads across multiple fronts and prevents any single machine from becoming a bottleneck during attacks.

Human-first experience

Legitimate users land in a fast queue and pass a lightweight captcha. Attack tools get rate-limited at the edge.

Install EndGame (Quick start)

1. Get the source from the trusted distribution and extract it locally.

2. (Optional) Build GoBalance with Go, then generate its config and note your MASTERONION.

3. Edit endgame.config: set TORAUTHPASSWORD, secure KEY/SALT, and choose Tor proxy or local proxy to your origin.

4. Brand your front: set colors, site name, favicon, and logos for the queue/captcha pages.

5. Run setup.sh as root on a fresh Debian 12 host; it installs dependencies, configures Tor/I2P, hardens the box, and enables services.

6. Go live: copy the onion (and I2P, if enabled). Use GoBalance to publish descriptors for seamless scaling.

The installer validates your config (correct onion length, non-default keys, proper salt length, sudo/root permissions) before proceeding.

What the setup script does for you

Installs NGINX, Tor/I2P (as configured), LuaJIT, essential modules, and security tools. Applies NGINX/LUA config (cookies, session length, rate limits), compiles captcha, sets up services & log rotation, generates/loads hidden services, sets Tor auth, and starts EndGame + NGINX automatically.

Prefer local proxy? Point PROXYPASSURL to your origin. Using Tor? Add your backend onion(s) for redundancy.

Free installation support by BotDigit

Don’t want to wrestle with configs? BotDigit will walk you through the whole setup—config hardening, branding, and final checks—at no cost, and provide step-by-step guidance if needed.

FAQ

Is EndGame really free?

Yes. It’s free to use and self-hosted. You run it on your hardware, under your rules.

Can I run EndGame without GoBalance?

Yes—EndGame works as a single front. For serious load or active attacks, GoBalance lets you scale horizontally.

What OS is supported?

Deploy on a fresh Debian 12 system for the smoothest experience with the included installer.

Will this slow down real users?

The goal is to slow down attackers, not humans. Lightweight challenges and smart limits keep legitimate traffic flowing.

Can I customize the look?

Absolutely—colors, logo, and favicon can be set so your queue and captcha pages match your brand.