This is interesting in that it combines the concept of port knocking with a REST interface, which I'm assuming is up to the user to create a front end for. Unf

This is interesting in that it combines the concept of port knocking with a REST interface, which I'm assuming is up to the user to create a front end for. Unfotunately it also relies on Kubernetes which means that using it for a single system isn't practical. At least, not for this server owner. My own approach is simply security by obscurity (a non standard port) with APF/BFD doing the needful for locking bots out if they figure out the port. I've had to change ports only once in 6 years, so it's working to keep bots out rather nicely. And really that's all these things are- a way to keep bots out. A determined attacker will figure this stuff out anyway.