4 ms·
Let me introduce you to the concept of defence in depth: https://en.wikipedia.org/wiki/Defense_in_depth_(computing) https://en.wikipedia.org/wiki/Defense_in_de
by neoCrimeLabs 10y ago
Let me introduce you to the concept of defence in depth:
https://en.wikipedia.org/wiki/Defense_in_depth_(computing) https://en.wikipedia.org/wiki/Defense_in_depth_(computing)
Really, the longer a website is online, the more it attracts bots. Spam bots, brute-force login attempting bots, information gathering bots, vulnerability testing bots, and many more. This isn't even counting targeted attacks.
I've seen many small websites recieve much more bot traffic than user traffic. Sometimes to a crippling level.
My point is, it's not paranoia if they really are after you - even if it's a mindless mass of bots.
Like all security though, sometimes you affect legitimate users. This is why it's great to have multiple ways they can provide feedback.
- tracker1 10y agoAt [a certain auto website I used to work at] the bot traffic was a significant amount of the requests... Because of the nature of referal traffic we were required to let the bot traffic stand... This was mitigated by implementing a few layers of a decent caching strategy, as well as some db improvements, and moving search queries to a separate database server (mongodb, then elasticsearch) altogether. In the end, there are lot of things you can do to help mitigate these things... It really just depends on what you are trying to accomplish with a given site.