At a glance, this looks like something you could pretty trivially re-implement without the web UI. It's not terribly hard to write middleware to reject request

At a glance, this looks like something you could pretty trivially re-implement without the web UI. It's not terribly hard to write middleware to reject requests based on things like IP address, especially if your rules don't require state (like rate limiting per IP instead of just flat dropping based on IP). I do think it must either be early or abandoned; the NodeJS installation instructions are just an empty page.