[NiteWave]

Is this the Load balancer?

both lslb (litespeed load balancer) and lsws(litespeed web server) has built-in anti-ddos feature.

here's the detail document on how to configure the this feature in lslb and lsws:
http://www.litespeedtech.com/docs/we...lientConnLimit

in your case, lsws may be enough, no need lslb.

based on your anti-ddos configuration, lsws detect and ban IP automatically. the ban period is configurable --- "Banned Period (sec)". after the ban period, lsws will lift the ban for this IP without user's manual work.