4 ms·

Bad guys can easily rent time on botnets with hundreds of thousands of ips.

• henvic 10y ago
  So the solution for you seems to be allowing bad guys DoS your system because bad guys can do bad things, is it?
  • jessaustin 10y ago
    Is per-IP rate limiting the only one way to respond to auth DoS? Different situations involve different trade-offs.
  • eli 10y ago
    Rate limiting. Not denying service. Bad guys could cause you to have to wait some number of seconds to log in.