Conversation
K. Ryabitsev 🍁
monsieuricon
I'm aware of Anubis and I'm afraid proof-of-work intermediaries are going to become the only way to deal with bots.
However, I don't like Anubis's general approach. I would prefer to have something built into varnish with some more logic that allows for more nuance. If there is a local cached page, allow the request. If there isn't, but the load/RAM usage is low, let the request through. If the load is high or if we're seeing lots of 503's, only then require proof-of-work.
However, I don't like Anubis's general approach. I would prefer to have something built into varnish with some more logic that allows for more nuance. If there is a local cached page, allow the request. If there isn't, but the load/RAM usage is low, let the request through. If the load is high or if we're seeing lots of 503's, only then require proof-of-work.
3
3
12
sarah tonin
SRAZKVT@tech.lgbt@monsieuricon sounds like a nice enough middle ground, but im personally not a fan of forcing people to use a big browser that supports js and can run it fast enough for proof of work to be viable
not only that, it's a waste of people's compute ressources, and also of energy
not a fan, but we can't have nice things
1
0
1
K. Ryabitsev 🍁
monsieuricon
@SRAZKVT Yes, it's definitely a "metal detectors in high schools" kind of solution, but c'est la vie.
0
0
1
@monsieuricon Could you also limit it to un-cached and dynamic content? (Or was that implied?)
1
0
0
K. Ryabitsev 🍁
monsieuricon
@Aissen Yes, that's what I meant by having a local cached page. On a cache hit, just let it through.
That said, it's not like we're discussing a real product -- it's just my laundry list of wishes. :)
That said, it's not like we're discussing a real product -- it's just my laundry list of wishes. :)
0
0
1