Download & Install

System requirements

Platform	Requirements
Linux	x86_64; kernel 3.13+ (native nftables blocking, tested down to kernel 4.4; older systems fall back to ipset automatically); Apache access/error logs
Windows	Windows 10 / Windows Server 2016 or later (uses the built-in Windows Firewall)

Nothing to pre-install — SvrGuard drives the firewall natively and never calls external programs.

Linux one-line install

# Run as root; installs the service and starts it
curl -fsSL https://svrguard.ofuyuan.com/install.sh | sudo sh

Windows one-line install

# Run in an elevated (Administrator) PowerShell
irm https://svrguard.ofuyuan.com/install.ps1 | iex

Manual packages

Prefer not to pipe a script? Download a package directly (Ed25519-signed, verifiable):

svrguard_latest_amd64.deb (Debian / Ubuntu)
svrguard_latest_x86_64.rpm (RHEL / CentOS / openSUSE)
svrguard_latest_linux_amd64.tar.gz (generic Linux)
svrguard_latest_windows_amd64.zip (Windows)

After installing: two questions and you're done

1

Pick a deployment mode

"Standalone" enables the local web console; "Central" (Pro) takes a pairing code and runs this host headless, reporting to your fleet dashboard.

2

Confirm log locations

The setup wizard auto-detects your Apache log paths — just confirm. SvrGuard starts analyzing immediately.

3

Watch the first block land

Depending on exposure, the first automatic block usually arrives within hours. Open the dashboard or wait for the email.

To verify blocking is live (Linux): nft list table inet svrguard shows the firewall table and block list SvrGuard maintains.

How updates work

Free: download the latest package from this site and reinstall — configuration and data are preserved.
Pro: OTA auto-update — agents upgrade themselves when a release ships, and rule packs plus the threat-intel IP feed update continuously online.