• ElectricVocalist@jlai.lu
    link
    fedilink
    arrow-up
    17
    ·
    18 days ago

    but I would assume there’s an arms race going on behind-the-scenes between Cloudflare and the bot developers

    No. CF lost years ago, and the checks can be bypassed easily. It’s just that it blacklists ips generating insane traffic but there is a lot of margin

    • smeg@infosec.pub
      link
      fedilink
      English
      arrow-up
      5
      ·
      18 days ago

      I put my little blog behind Cloudflare because I was tired of it going down due to scrapers overwhelming my little VPS.

    • Maroon@lemmy.world
      link
      fedilink
      arrow-up
      4
      ·
      edit-2
      17 days ago

      I’ll admit that I am a newbie, so I ask in ignorance: have you tried using Anubis + BadBotBlocker + Fail2Ban?

      It genuinely worked wonders for my tiny site that was being bombarded.

      • ElectricVocalist@jlai.lu
        link
        fedilink
        arrow-up
        1
        ·
        17 days ago

        Crawlers have never been a problem for me as my internet subscription is unlimited. My experience comes from being the one crawling sites and bypassing the CF challenge